URLhaus Database

You are currently viewing the URLhaus database entry for http://demo.liuzhixiong.top/trust.accounts.send.net/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:122628
URL:http://demo.liuzhixiong.top/trust.accounts.send.net/
URL Status:Offline
Host:demo.liuzhixiong.top
Date added:2019-02-12 17:39:25 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-12 17:40:05 UTC to abuse{at}quadranet[dot]com)
Takedown time:3 days, 2 hours, 25 minutes Bad
Tags:emotet epoch1 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-14eFORM_02_14_1965221.docdocd88a30cf3b32cda80940dc9883d43c514e1505f44c7a9e9ba5b3c85c3302d9e7Virustotal results 12 / 56 (21.43)Heodo
2019-02-14eFile_02_14_1938810.docdoc239942748da63d13b679edf04d3b955f6979d03cf2d5f53b0e10871c9717c6ebVirustotal results 12 / 56 (21.43)Heodo
2019-02-14eFile_021420195911110.docdocc6cd14fd703d984a3229ce1a5e813c2dc0b556abb62e5a25ca5857cc3a4f176bn/aHeodo
2019-02-14eFORM_02_14_198126.docdoce4e3c145c665c49ca56c6a0db3a0ceb9a99f892b3dad4c23786b9f0ef6f26911Virustotal results 12 / 56 (21.43)Heodo
2019-02-14eFILE_0214201901295.docdocf0ede2a03f4ea0117da4f47c3041d9a0d9876c374f4b74cee6e8b6dab2b31e4aVirustotal results 11 / 56 (19.64)Heodo
2019-02-14eFile_20190214069828.docdocfd424ccf7eb083c966106b8049d6e68876e652df73401772883e80a63d98be65n/a
2019-02-14eInvoice_201902148045986.docdoc5036fcb8efabc8a863e9828107c22cdde2fbaee8b94545f2e793a8bdd7331272Virustotal results 11 / 55 (20.00)Heodo
2019-02-14eFILE_0214201938723.docdoc1e98f156e7ed7d59838b17ed0eed92bb7be5aa6ca24adbf309248519638c7567Virustotal results 12 / 55 (21.82)Heodo
2019-02-14eFile_02_14_199134868.docdoc4aec976e9b1d4139ab3a2a6bc56a3aed96f54a943369ca2efd80761aafbaa461Virustotal results 11 / 58 (18.97)Heodo
2019-02-14eFILE_201902141509.docdoc51557a206fd8ce2a055c9fdb69e9111a976332e3a5f6dda32a8a2d2afa21602dn/aHeodo
2019-02-14eFILE_201902145804.docdoc1699ca85191a06d203b19364a067e1f96448ae391dba79fb82ffb7bdbba5b600Virustotal results 11 / 54 (20.37)Heodo
2019-02-14eBILL_02_14_1933321.docdoc05d36e396f86fd51b882535d427d042f7475c9aeeb2d54536aa90789b3515019Virustotal results 11 / 56 (19.64)Heodo
2019-02-14eBILL_20190214132265.docdocadb2c71003bea01e720d6237f14058785bf3721f138d4f401a6c5a46c43eb915Virustotal results 11 / 55 (20.00)
2019-02-14eBill_201902140876.docdoc4f45707b07936c4a33037b0861fc6aaab24493b4372341deff8df56d6bac47a2n/a
2019-02-14eINVOICE_02_14_19805963.docdocfb2fddb42d09abd2cdaf2ff7d67c2cf676e78b294fe0d7225d19e96c496b7fdcn/a
2019-02-14eInvoice_02_14_192666866.docdoc2b8afbe2f7d8f7fcfa9e9e083c17de1ec69a518ec96c7b13644186873f8b33c5Virustotal results 11 / 54 (20.37)Heodo
2019-02-14eINVOICE_02_14_1955224.docdocc58e7b8696794c6d5f1dd3745225d93fade8d584c4ad620296d4a37b7f0d30afVirustotal results 9 / 47 (19.15)
2019-02-14eBILL_02_14_1944826.docdoc9a8638e42360c33ee43e4bde6fafa5b5ea62a164adda3b29fa7908904de76ba9Virustotal results 11 / 51 (21.57)Heodo
2019-02-14eform_201902148967.docdocd1cef97ad1d73220a0c4e28095b4a46992713d0649f8b138ca74b5e05be508b0n/aHeodo
2019-02-14eINVOICE_02142019288684.docdoccf04da964014299d991218169315bcd5d6d77ae67c6211bcf95158c4a461bf2dVirustotal results 10 / 51 (19.61)Heodo
2019-02-14eFILE_02_14_192770.docdoc0eff3a4b444eb8c567db5b87dfadb6a0b1fbec831901cb2718964fab137472b8n/a
2019-02-14eFile_02_14_195323653.docdoc90a497b432bc14ae7ac9016f868a72ac74ac4d31a2b4619ca2be1f5d1f2d6950n/a
2019-02-14eINVOICE_021420198869493.docdocb7e66cf6b9746084770347e1766e227e536a88892530d6f8db193a485e681bf3n/aHeodo
2019-02-14eBill_20190214905515.docdoc44af4973b88c3d9fdb128c5338e528698ff6bc5578fe8d5f51a3767c919020e7Virustotal results 18 / 55 (32.73)Heodo
2019-02-14eFORM_02142019969921.docdoc8aafae60bcbdbdbdf877093104370bcf096a650c308fbb38828eccac6ee0a795n/aHeodo
2019-02-14eFile_02_14_19324663.docdoc24accce394df4d28c0b496cacbcb0245e52c3401fccfaf14fb0ac8cf65a08ca4Virustotal results 17 / 55 (30.91)Heodo
2019-02-14eFILE_021420190957.docdoce6b79db99b399198a61b836acb552f49c58e491bebda5dc7125d2a3f8b798f1fn/aHeodo
2019-02-14eFile_02_14_19237170.docdoccebe799eb13204e363f9d18a0be2885e4668ca32ffbe1bcbe0d6071ddc5fe541Virustotal results 17 / 54 (31.48)
2019-02-14eform_021420195993919.docdoc60bcaac606692210b3caefe17ecf597d49db8d529978d6726a7269b4a14dc641n/a
2019-02-14eINVOICE_02_14_192429934.docdoc1b8f1db3cc4c467bca294bafe4ef2082c83c385e75cc4fc589eb2b32a6d0c279n/aHeodo
2019-02-14eFORM_201902142775299.docdoce95846c16abcb48406d3e68b89c6c57335d72683501f7a9bd60d2e7894fedaa2Virustotal results 15 / 55 (27.27)
2019-02-14eINVOICE_2019021404692.docdoc48cad76efb958c7d247a27f4636d464536d78174b5379f744c86be9b22020fd8Virustotal results 15 / 55 (27.27)Heodo
2019-02-14eINVOICE_02_14_192727824.docdoc36e96af0d786eeefe5749d3b60ab2dfa044ca4da0644012c8c15dc5a6df36e17n/a
2019-02-14eInvoice_021420193664.docdocc131a04ef143915bef40c4816d7c065d86f15e1e00b15f26500895151f466fedn/aHeodo
2019-02-14eform_02_14_19993559.docdocc72ca32025175570b30d91669466db659f84b9b910498b3d1b8ff673feb48213Virustotal results 16 / 57 (28.07)Heodo
2019-02-14eInvoice_201902144242.docdoc619324ffdc2376cb39135e2705c1034eb856bd564698c886a15b176aa95df5cbVirustotal results 15 / 55 (27.27)Heodo
2019-02-14eBILL_2019021471222.docdoc02733ad79a16b0fb62e4dfe438aaf227d6a456fe60445aa595cad125d72c9294Virustotal results 15 / 57 (26.32)Heodo
2019-02-13eFORM_02_14_19729274.docdoc8e610df0d3b2a0b27aecd4d74baa2303621a4e1cdcdfd62a9a0518ad813276den/a
2019-02-13eBILL_021420198644.docdoc2f65ba0ecfd26fa06e238822d9c0f8bc60b0dcd003afbd7568b1fd1ee6bbd191Virustotal results 10 / 58 (17.24)
2019-02-13eInvoice_201902143095.docdoc8050b4496e395a91f1363fc1af60a243811a170eccefe723b8f04e93e403a013Virustotal results 11 / 57 (19.30)Heodo
2019-02-13eFORM_201902140630.docdoc46bce1e470af13227d4949322b92cacd5a4bae10eabb3fc5cd46fa2f34b76a29Virustotal results 10 / 55 (18.18)Heodo
2019-02-13eInvoice_02_14_195682.docdoc15b0891d13aefc17adf3ba8fdf570dba763f32661aa72177b4dad8e9c3da74dbn/aHeodo
2019-02-13eBILL_02_13_195799.docdocb2b2934c98c2c1b218cf95d9feb0a071a4a7b507db0cf58576b9d2a86c23188fVirustotal results 12 / 56 (21.43)Heodo
2019-02-13eFILE_021320194688.docdoc0d3789b5613f17c62f50c421781af224a5130f936b147f9b459c39acfbe9c413Virustotal results 10 / 58 (17.24)Heodo
2019-02-13eInvoice_02_13_190773885.docdocadf4a20c7d15365bb9ab64eba58030602afb74ba8e191326a9250aef4fcd9eebVirustotal results 9 / 56 (16.07)Heodo
2019-02-13eFORM_02_13_1942580.docdoc762010819aac35827bd1a7c75b41cdcbe005b0930bd382f44b95a716fc3abb03Virustotal results 8 / 56 (14.29)Heodo
2019-02-13eInvoice_02_13_195017.docdoc6752d12b102e5a4d1659d124985edac7cca933abff7deee38e0902e21353718eVirustotal results 10 / 54 (18.52)Heodo
2019-02-13eform_2019021394492.docdoc00f03991dafaaae758848789831086c742aa81845ee5fb19a83ecabd1c414159Virustotal results 9 / 58 (15.52)
2019-02-13eBILL_02_13_194289.docdocb72540e462c1c4fa30f17c1c31003d63e1d772435f20cec49e17c01587b39106Virustotal results 11 / 58 (18.97)Heodo
2019-02-13eFILE_20190213748444.docdoce3192d0ad18c7bfd98e879c8a40afb3496835792aeedf6032572072f278967c7Virustotal results 9 / 57 (15.79)Heodo
2019-02-13eInvoice_02_13_199722.docdoccfe381fcbb5c0d45a7f40822df5d5967cab21cc454387f9469a7bba8c503aa4aVirustotal results 10 / 55 (18.18)Heodo
2019-02-13eform_02_13_195887225.docdocdfc2e982f50d7df16be5e88f9f9901cbb318490167f7669e20c262ffd8f87ce4Virustotal results 9 / 55 (16.36)Heodo
2019-02-13eInvoice_201902137149675.docdoc8a320256d039685389a6d124c1e6990c21812f75b7b77f89dc2a2160810785f7Virustotal results 8 / 54 (14.81)Heodo
2019-02-13eBill_02_13_191970.docdoc69cd78eec9c073bf2910b3ed4abb675908adc820e25c3e33ff0b154158c96641Virustotal results 9 / 57 (15.79)Heodo
2019-02-13eFile_201902139524689.docdocc7c93c7d3d849010ad878a938d2b2adc9e8c9b5ec8fa3a9e2f96a733a6b00f44Virustotal results 9 / 54 (16.67)Heodo
2019-02-13eform_02132019221319.docdoc341953de8c3974331f355ca207cca324dce68ed588b9f230356fbe184b733b87n/a
2019-02-13eform_02_13_19291427.docdoc306559a01b5640c2526f1f495447da0187d97cf7a826030a7479d116b6e9a886Virustotal results 9 / 55 (16.36)Heodo
2019-02-13eFILE_02_13_1991817.docdoc9606d86e7bb72309086d117efdbf55637e1b781631d02504f92f2148f1c7d122Virustotal results 9 / 57 (15.79)
2019-02-13eINVOICE_20190213349733.docdoc5725aac54f9e0b682c8e90c5adc8e25b1a97ee60aa1ad40f7b5154772e428bf9n/aHeodo
2019-02-13eFILE_20190213930415.docdocab09084e5321b552445689d057851b4f551c58506dbced9576b1856aa0517c39n/a
2019-02-13eInvoice_2019021327505.docdoc6c1710a1a3c916f3bc8ca4eee0eab976c39fb0b24b520e8a4e9ca7e9106c84f5Virustotal results 19 / 56 (33.93)Heodo
2019-02-13eFile_02_13_1992641.docdocd86dffa3c6861d289c115394cdcda950fa8ea88a50c6fd8c7f3f6b8720085c88n/a
2019-02-13eFORM_02_13_19687057.docdoc813b8b26db590fc346a8f2feee33409f46c1066cace60353f29725330193b5d7n/aHeodo
2019-02-13eFile_0213201959371.docdoc4458ae6f0ddafefff59ae71480e104dbe486a205219695877e2652ce3865b933n/aHeodo
2019-02-13eINVOICE_02_13_197853.docdocf538ee8501fc30e1c4ae2fa514858952069c77db02f433c7211361c7de4a0342Virustotal results 19 / 57 (33.33)
2019-02-13eBILL_2019021369533.docdocdcc6711a8116b1e24aec79e5066b4aa738c2afce77656c5150bb3326aaf8579cVirustotal results 19 / 57 (33.33)
2019-02-13eFILE_02_13_1900252.docdoc1f80bc1a597f55db4ecbf15b6485381153514e782469db4b9e64ddcc2f8badabVirustotal results 20 / 57 (35.09)Heodo
2019-02-13eform_201902131280.docdoca4ef612e70535abbbdb168a51f1d7e524ea19747e93616dd5daeaca728cb1fb6Virustotal results 20 / 57 (35.09)Heodo
2019-02-13eINVOICE_201902135980.docdoc0d782eae48a64d70cf4a4c87db6d0d0f5410f894b0babeaf927352d4e2574029Virustotal results 19 / 56 (33.93)Heodo
2019-02-13eFILE_02_13_192156.docdocdcf2062518f5f3fbf54499fbbe8ad8c1ab2b26dbe92ab36f1be3720b61d2808bVirustotal results 20 / 57 (35.09)Heodo
2019-02-12eInvoice_02132019736403.docdoc31269fda4663bc5f6bba68346a4d151ac496cede9f82b0efebc3337aeb4d459cVirustotal results 19 / 56 (33.93)Heodo
2019-02-12eInvoice_2019021326140.docdoc51e4683c429a41b0da3dbbd17126ab5327d4ded1f4bd4be381a42e65f5d1b84bn/aHeodo
2019-02-12eFile_02_13_19999157.docdoc5a64216cd578341e9826d5ac879207015eed1c926ba1297d768efb964592d0cdVirustotal results 18 / 56 (32.14)
2019-02-12eFILE_02_13_1995277.docdoce7fa0b77579a3dc649ebed6943d422820bb519ba316ba5261c07dadced0cd8c3Virustotal results 18 / 55 (32.73)
2019-02-12eINVOICE_02132019167337.docdocdd0ff448256f42d345e5c4c3fc6709f58edf50cef095a2aded59ed9524de4f45Virustotal results 18 / 56 (32.14)Heodo
2019-02-12eBill_20190213139818.docdoc48e06f2d44bdc24a9629f5fa8d3369973f2e1924e8e8279f6816424518972057Virustotal results 20 / 56 (35.71)Heodo
2019-02-12eINVOICE_20190213713029.docdoc30d6db8fedcca6feeb2ab6f64a2c0778e0bc3bc47d55f902cb0c047bd66480e3Virustotal results 16 / 54 (29.63)Heodo
2019-02-12eform_20190213227797.docdoc3758752a73c0be622d0f99eb301eb447e3f57db71c916c1add6dc801214cf032Virustotal results 16 / 56 (28.57)Heodo
2019-02-12eform_201902131220160.docdocbc4d532da6fa3b8bee4c159e9e96a03b3e9800e938033ed6820076fbaa05603bVirustotal results 17 / 57 (29.82)
2019-02-12eBILL_021220192518498.docdoc0dc73d739c5df89ad2ff7f54cd37b53a529d95b766e36ade366aa394d72b4025n/aHeodo
2019-02-12eINVOICE_021220195093.docdoc0c969d5ad8febbf86af5152a0913bc56bab3951f51d15b60726e42d2e3e0bdf5Virustotal results 16 / 54 (29.63)Heodo
2019-02-12eform_201902124407340.docdoc5fcb69534f967d1724ceb8561472f07c1abd13cb98ea1c8d63009788c27170bfn/aHeodo
2019-02-12eFILE_2019021221321.docdocac806d78d25581983f1200b8f3d89c233a76c9d87b03ae1d929ea89d0a72edc6Virustotal results 16 / 55 (29.09)Heodo
2019-02-12eBill_02_12_193581575.docdoc2b0e670389e4e92743752e217eb624f285d205bbbb69502201a291680164b8d6Virustotal results 15 / 54 (27.78)Heodo
2019-02-12eBill_02_12_1998999.docdocd23c7abd3719769158d6a04f512bdae7273163e74c3e8e165a387842f3430353Virustotal results 15 / 55 (27.27)Heodo
2019-02-12eBill_201902122982185.docdoc2330590939e55a145dd194bd887164df0dfd62fe01b19b0191bd62e4f4fa8192Virustotal results 14 / 54 (25.93)Heodo
2019-02-12eINVOICE_021220198725.docdoc01a5f6ecb789da2ffa5311b070f2daf717a22cb5e6334a43fb9aeec39d69b55cn/a