URLhaus Database

You are currently viewing the URLhaus database entry for http://oceangate.parkhomes.vn/AKGX_a1dYE-kfKoWVOw/ZfH/Clients_Messages/2019-02/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:117543
URL:http://oceangate.parkhomes.vn/AKGX_a1dYE-kfKoWVOw/ZfH/Clients_Messages/2019-02/
URL Status:Offline
Host:oceangate.parkhomes.vn
Date added:2019-02-05 13:44:22 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-05 13:46:02 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:1 month, 3 days, 8 hours, 12 minutes Bad
Tags:emotet epoch1 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-11invoice_02062019.docdocb1e05cc9e4784c7cfda338496816486cb35d79624843e0eaf01c78965a2e96a3Virustotal results 33 / 59 (55.93)
2019-02-06ebill_file_20190206.docdoc8f314b59098bd8cfbf4f6ceda569a6472e38b16c23fe4eca6548b19800424aceVirustotal results 11 / 58 (18.97)Heodo
2019-02-05receipt_20190206.docdoc8b41368a8548700d117eed3cbc2ff2ea19bfbb156813f9cb64490c425e273d77Virustotal results 12 / 60 (20.00)
2019-02-05receipt_20190206.docdoc8f5912d7f605b62e96114e8f8c37df85930a8c85087cf54c6afe7e8cecdb71ccn/a
2019-02-05receipt_02062019.docdocd0e9b53fd5fd1a00b19121d3ad7f39d79071a9fa4d24f0980f83a10c46087830Virustotal results 12 / 58 (20.69)Heodo
2019-02-05invoice_02-06-2019.docdoc01803dffa47e587fe0d89f98b9ddf4363438df48838a7e4664777147cb3dd9e6Virustotal results 11 / 58 (18.97)Heodo
2019-02-05invoice_02062019.docdocb7fc95a2bc7a30daf68c9809cba01c8617e876c753bd0261beda9f4eaddac0dfn/aHeodo
2019-02-05payment_02-06-2019.docdocb714c8ad4458f42fa3c5de2b3bb5b39842913a04337c253b3ca46f41428f1aa2Virustotal results 14 / 59 (23.73)Heodo
2019-02-05bill_2019-02-06.docdocfabe6396d0f66857df66a99e1d28cb788d48a6d02014c878fc9edc11806f6cb8Virustotal results 14 / 58 (24.14)Heodo
2019-02-05ebill_file_2019-02-06.docdoc9f3915047ed36dcf60b18281f7d02c402950df2b14461376231cf07363f89173Virustotal results 13 / 58 (22.41)Heodo
2019-02-05PAY_2019-02-06.docdoc938b3988817839d9fa3268d3ca6dc995ba1fb1535a8fdcdc5f36e833a9bee3beVirustotal results 14 / 59 (23.73)Heodo
2019-02-05payment_2019_02_05.docdocc780cc92f746fb404fd8849398586384194ad9508e36186728341307c4d9b5a1Virustotal results 14 / 59 (23.73)Heodo
2019-02-05invoice_20190205.docdocd6edf75ad4d7d9dcc43670fe4a16860a25efe44da423e9dea150cfc8857cc25an/aHeodo
2019-02-05invoice_2019-02-05.docdoc6ed710ce395754bdd4ff37d4356530147396b0c0f90d90f62ac6d4446727f50dVirustotal results 14 / 59 (23.73)Heodo
2019-02-05ebill_file_02052019.docdoc633c73a8301bf31c433c17d794c766820d6deff07423fe123f13945ca3f9f2e1Virustotal results 14 / 59 (23.73)Heodo
2019-02-05PAY_2019_02_05.docdocbe60689245c7789f95a92a467d9d9fd1e44d8e1a783cc89e324592a600e51676Virustotal results 14 / 59 (23.73)
2019-02-05payment_02052019.docdoc91a147199eaa1d9d1ac8c3efcd03e08d7448773b0c585588b58909c1732c0e35n/aHeodo
2019-02-05PAY_02-05-2019.docdoc73f777fab6966d2ae2642bc57d2ef9020eb93f3585c952abf1fd37181b38ba36Virustotal results 14 / 59 (23.73)Heodo
2019-02-05bill_20190205.docdoccb5f6dfeac0562b0fd9a787f3f0db62aa4850c8fd1c546df8c003562e724434an/a
2019-02-05bill_02-05-2019.docdoc2acc440ae5ff8ca3b15e94c47c9f402e013176d26130a301a7ea99fe2f5adc7dVirustotal results 11 / 60 (18.33)
2019-02-05invoice_02-05-2019.docdocdf1f04c271e5f1dcd9a71a56710deb71ebb1c99009ad7190bf5de0c810060948Virustotal results 11 / 59 (18.64)Heodo
2019-02-05bill_02-05-2019.docdoca32cdc0afc841615f0b0a32e9b0f6d3c7d4cc81f590db8ac67ae295bdecb57e7Virustotal results 11 / 57 (19.30)Heodo
2019-02-05bill_02-05-2019.docdocc67ecba78851cc8a39ec8a809bf29072e1be600571ed5e2e029dba7c0aab2396Virustotal results 11 / 58 (18.97)Heodo
2019-02-05PAY_2019_02_05.docdoc51dbe11b3f1a1399be0962ec3c80a8bc16f311b42afa589aa43a926b96bb0965Virustotal results 11 / 60 (18.33)Heodo
2019-02-05receipt_2019_02_05.docdocfc09808f8f3eba7c785acb5098a9a9e39ca7107f5165e2288450744604d7a3a1Virustotal results 10 / 58 (17.24)
2019-02-05ebill_file_02-05-2019.docdoc8d99186bfbf62eeb11b269d0dd4e1089137ad1a33dc136585e832c243eeb8186Virustotal results 11 / 58 (18.97)Heodo
2019-02-05bill_2019_02_05.docdocfe86cbdc327a82e49e4556e66bd85b26627f57e0fbf8c03c1df29b03eb621686Virustotal results 11 / 59 (18.64)Heodo
2019-02-05PAY_02052019.docdoc231da1a201d2f2458a49d38586e446e27f9ad090b77e3f9e3555cf9010bc5489n/aHeodo