URLhaus Database

You are currently viewing the URLhaus database entry for http://akuntansi.upr.ac.id/dist/vY9I74AvaQNUc99JsKh6qBIgUQJ7HdOuRKi7VeGqxg0z99dgtuJv1RjMoLSVKhc90lvCFQ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:974277
URL: http://akuntansi.upr.ac.id/dist/vY9I74AvaQNUc99JsKh6qBIgUQJ7HdOuRKi7VeGqxg0z99dgtuJv1RjMoLSVKhc90lvCFQ/
URL Status:Offline
Host: akuntansi.upr.ac.id
Date added:2021-01-22 17:24:05 UTC
Last online:2021-02-02 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-22 17:26:10 UTC to noc{at}agti[dot]co[dot]id)
Takedown time:10 days, 13 hours, 48 minutes Bad (down since 2021-02-02 07:14:46 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-29WMNOA53WSQ1Z.docdoc 0ccb445a3ac3105e0441ad64f7aa8b0f34ceb186bfd4cde4ee582f9efffb6587n/a 
2021-01-23AEDVB0VNRY6V.docdoc 526866190c8081698169b4be19a6b987d494604343fe874475126527841c83a7Virustotal results 58.06%Heodo
2021-01-22VW8U9Q91Y.docdoc 377ccf81bc50553f09c559652bad5ec67c73c649cb60ba53cfd01f39a52e5ad2Virustotal results 38.71%Heodo
2021-01-22A05S5U3ZM.docdoc 5baed32dcd265a53a8f5f4182bfa79336ffa1acc17f1ab71e8387529a82b10cdVirustotal results 37.70%Heodo
2021-01-22KY729THM.docdoc 8af280e70fb92f35455e9f18296c0fbaae42288517c6925a9db673a9368e9bf3Virustotal results 39.34%Heodo
2021-01-22P6PAJBY.docdoc ab6d3be4c24da3e9c1df9e970119843a19dd372e08d3be797ce636117a71cb15Virustotal results 36.51%Heodo
2021-01-228YDWX0VJWON888.docdoc 912f6f38547eca79cdd2f66b1252ac5b777f454c8d4da059d319ca9a42d1cf24Virustotal results 31.75%Heodo
2021-01-2264J43Y.docdoc d25d5d359b01bb46095375c553f2b4ea91e2e4abee77df10d21d6ab08740dc97Virustotal results 33.93%Heodo
2021-01-22IO9LQ6KOO.docdoc a9e7d57e01fc4d6f2d10be4bf46a18c3ee912fd05dfbaf30a11ee950efab43a1Virustotal results 34.92%Heodo
2021-01-22T6D08D1HN.docdoc 0c12f24715c776b1cca7c4fcae52f35da82d11bc17f962cbc7a01b7baf4e0078Virustotal results 33.33%Heodo
2021-01-22RJZCL14UK.docdoc df7956bed96a8d21cc40f5f0abfb5fd98df9ca8f98982661f6ad3c9bf38a2740Virustotal results 33.90%Heodo
2021-01-22EO5ES0F.docdoc 18eeb3c4acd968e5fb4a847ef4eb4953690be2b5a9ad36d6f82a9cbc7caa7a53Virustotal results 32.26%Heodo
2021-01-22983QSKQJP3BX5ISJ.docdoc 1d6af24aae07d7b11397907b44aa3108efeaaa211b182a6dc28246b79a36a2c4Virustotal results 32.79%Heodo
2021-01-2240GYA2WP03.docdoc c47dd140c6bc057daadb9ee597e65f4354bd84521ed7631a0f100eb027f6adb8Virustotal results 31.75%Heodo
2021-01-22KCUU97OI.docdoc e35524adab62617f979bf2093ed1c81d50ea11bbf40b3f32bc000a58fe99a39cn/aHeodo
2021-01-22OI3ACU.docdoc 79901cb00c81b1c2bb626096ee6bdf18e1bb6e757f7c48c0bf1c0377e9d3cde8Virustotal results 31.75%Heodo
2021-01-22GJO2WGF1Z5ENJHUY.docdoc d22a8782e2f9702d603cc082a1578d1b26f7fce4c1d01ecbff337d9b68e2a21bVirustotal results 31.75% Heodo
2021-01-227ZFHP66.docdoc 19eabf766e8a1eab6d6736638f9331a3ed1606b329cf336e4a564c8b0ab220f4Virustotal results 31.75%Heodo
2021-01-22QINWJJV43A74CV2.docdoc e26acfd8ba9ac131426a2d9667e8ad19344e9977a884531fd2a2127615481f99Virustotal results 32.26%Heodo
2021-01-22HO4685VGC2BO9.docdoc cb61a7b158e7abd85d3eae1f24f813429ca19d16a207e7263022e5ffa0b16fd8n/aHeodo
2021-01-2291HZB76NTF3STV1.docdoc 077fd7de4590c86cef6c92180c5d65a613bc17a38f749b04ac9ec8d2bee2ecafn/aHeodo
2021-01-22U8D0I8I.docdoc 0a1a62f399d64c1fbffd740358974f855e76f9dc173292b27ce0eee5abb689e8Virustotal results 32.26%Heodo