URLhaus Database

You are currently viewing the URLhaus database entry for http://demo.liuzhixiong.top/trust.accounts.send.net/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:122628
URL: http://demo.liuzhixiong.top/trust.accounts.send.net/
URL Status:Offline
Host: demo.liuzhixiong.top
Date added:2019-02-12 17:39:25 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL :Not listed
SURBL :Not listed
Quad9 :Blocked
AdGuard :Blocked link
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-12 17:40:05 UTC to abuse{at}quadranet[dot]com)
Takedown time:3 days, 2 hours, 25 minutes Bad (down since 2019-02-15 20:05:21 UTC)
Tags:emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-14eFORM_02_14_1965221.docdoc d88a30cf3b32cda80940dc9883d43c514e1505f44c7a9e9ba5b3c85c3302d9e7Virustotal results 21.43%Heodo
2019-02-14eFile_02_14_1938810.docdoc 239942748da63d13b679edf04d3b955f6979d03cf2d5f53b0e10871c9717c6ebVirustotal results 21.43%Heodo
2019-02-14eFile_021420195911110.docdoc c6cd14fd703d984a3229ce1a5e813c2dc0b556abb62e5a25ca5857cc3a4f176bn/aHeodo
2019-02-14eFORM_02_14_198126.docdoc e4e3c145c665c49ca56c6a0db3a0ceb9a99f892b3dad4c23786b9f0ef6f26911Virustotal results 21.43%Heodo
2019-02-14eFILE_0214201901295.docdoc f0ede2a03f4ea0117da4f47c3041d9a0d9876c374f4b74cee6e8b6dab2b31e4aVirustotal results 19.64%Heodo
2019-02-14eFile_20190214069828.docdoc fd424ccf7eb083c966106b8049d6e68876e652df73401772883e80a63d98be65n/a
2019-02-14eInvoice_201902148045986.docdoc 5036fcb8efabc8a863e9828107c22cdde2fbaee8b94545f2e793a8bdd7331272Virustotal results 20.00%Heodo
2019-02-14eFILE_0214201938723.docdoc 1e98f156e7ed7d59838b17ed0eed92bb7be5aa6ca24adbf309248519638c7567Virustotal results 21.82%Heodo
2019-02-14eFile_02_14_199134868.docdoc 4aec976e9b1d4139ab3a2a6bc56a3aed96f54a943369ca2efd80761aafbaa461Virustotal results 18.97%Heodo
2019-02-14eFILE_201902141509.docdoc 51557a206fd8ce2a055c9fdb69e9111a976332e3a5f6dda32a8a2d2afa21602dn/aHeodo
2019-02-14eFILE_201902145804.docdoc 1699ca85191a06d203b19364a067e1f96448ae391dba79fb82ffb7bdbba5b600Virustotal results 20.37%Heodo
2019-02-14eBILL_02_14_1933321.docdoc 05d36e396f86fd51b882535d427d042f7475c9aeeb2d54536aa90789b3515019Virustotal results 19.64%Heodo
2019-02-14eBILL_20190214132265.docdoc adb2c71003bea01e720d6237f14058785bf3721f138d4f401a6c5a46c43eb915Virustotal results 20.00%
2019-02-14eBill_201902140876.docdoc 4f45707b07936c4a33037b0861fc6aaab24493b4372341deff8df56d6bac47a2n/a
2019-02-14eINVOICE_02_14_19805963.docdoc fb2fddb42d09abd2cdaf2ff7d67c2cf676e78b294fe0d7225d19e96c496b7fdcn/a
2019-02-14eInvoice_02_14_192666866.docdoc 2b8afbe2f7d8f7fcfa9e9e083c17de1ec69a518ec96c7b13644186873f8b33c5Virustotal results 20.37%Heodo
2019-02-14eINVOICE_02_14_1955224.docdoc c58e7b8696794c6d5f1dd3745225d93fade8d584c4ad620296d4a37b7f0d30afVirustotal results 19.15%
2019-02-14eBILL_02_14_1944826.docdoc 9a8638e42360c33ee43e4bde6fafa5b5ea62a164adda3b29fa7908904de76ba9Virustotal results 21.57%Heodo
2019-02-14eform_201902148967.docdoc d1cef97ad1d73220a0c4e28095b4a46992713d0649f8b138ca74b5e05be508b0n/aHeodo
2019-02-14eINVOICE_02142019288684.docdoc cf04da964014299d991218169315bcd5d6d77ae67c6211bcf95158c4a461bf2dVirustotal results 19.61%Heodo
2019-02-14eFILE_02_14_192770.docdoc 0eff3a4b444eb8c567db5b87dfadb6a0b1fbec831901cb2718964fab137472b8n/a
2019-02-14eFile_02_14_195323653.docdoc 90a497b432bc14ae7ac9016f868a72ac74ac4d31a2b4619ca2be1f5d1f2d6950n/a
2019-02-14eINVOICE_021420198869493.docdoc b7e66cf6b9746084770347e1766e227e536a88892530d6f8db193a485e681bf3n/aHeodo
2019-02-14eBill_20190214905515.docdoc 44af4973b88c3d9fdb128c5338e528698ff6bc5578fe8d5f51a3767c919020e7Virustotal results 32.73%Heodo
2019-02-14eFORM_02142019969921.docdoc 8aafae60bcbdbdbdf877093104370bcf096a650c308fbb38828eccac6ee0a795n/aHeodo
2019-02-14eFile_02_14_19324663.docdoc 24accce394df4d28c0b496cacbcb0245e52c3401fccfaf14fb0ac8cf65a08ca4Virustotal results 30.91%Heodo
2019-02-14eFILE_021420190957.docdoc e6b79db99b399198a61b836acb552f49c58e491bebda5dc7125d2a3f8b798f1fn/aHeodo
2019-02-14eFile_02_14_19237170.docdoc cebe799eb13204e363f9d18a0be2885e4668ca32ffbe1bcbe0d6071ddc5fe541Virustotal results 31.48%
2019-02-14eform_021420195993919.docdoc 60bcaac606692210b3caefe17ecf597d49db8d529978d6726a7269b4a14dc641n/a
2019-02-14eINVOICE_02_14_192429934.docdoc 1b8f1db3cc4c467bca294bafe4ef2082c83c385e75cc4fc589eb2b32a6d0c279n/aHeodo
2019-02-14eFORM_201902142775299.docdoc e95846c16abcb48406d3e68b89c6c57335d72683501f7a9bd60d2e7894fedaa2Virustotal results 27.27%
2019-02-14eINVOICE_2019021404692.docdoc 48cad76efb958c7d247a27f4636d464536d78174b5379f744c86be9b22020fd8Virustotal results 27.27%Heodo
2019-02-14eINVOICE_02_14_192727824.docdoc 36e96af0d786eeefe5749d3b60ab2dfa044ca4da0644012c8c15dc5a6df36e17n/a
2019-02-14eInvoice_021420193664.docdoc c131a04ef143915bef40c4816d7c065d86f15e1e00b15f26500895151f466fedn/aHeodo
2019-02-14eform_02_14_19993559.docdoc c72ca32025175570b30d91669466db659f84b9b910498b3d1b8ff673feb48213Virustotal results 28.07%Heodo
2019-02-14eInvoice_201902144242.docdoc 619324ffdc2376cb39135e2705c1034eb856bd564698c886a15b176aa95df5cbVirustotal results 27.27%Heodo
2019-02-14eBILL_2019021471222.docdoc 02733ad79a16b0fb62e4dfe438aaf227d6a456fe60445aa595cad125d72c9294Virustotal results 26.32%Heodo
2019-02-13eFORM_02_14_19729274.docdoc 8e610df0d3b2a0b27aecd4d74baa2303621a4e1cdcdfd62a9a0518ad813276den/a
2019-02-13eBILL_021420198644.docdoc 2f65ba0ecfd26fa06e238822d9c0f8bc60b0dcd003afbd7568b1fd1ee6bbd191Virustotal results 17.24%
2019-02-13eInvoice_201902143095.docdoc 8050b4496e395a91f1363fc1af60a243811a170eccefe723b8f04e93e403a013Virustotal results 19.30%Heodo
2019-02-13eFORM_201902140630.docdoc 46bce1e470af13227d4949322b92cacd5a4bae10eabb3fc5cd46fa2f34b76a29Virustotal results 18.18%Heodo
2019-02-13eInvoice_02_14_195682.docdoc 15b0891d13aefc17adf3ba8fdf570dba763f32661aa72177b4dad8e9c3da74dbn/aHeodo
2019-02-13eBILL_02_13_195799.docdoc b2b2934c98c2c1b218cf95d9feb0a071a4a7b507db0cf58576b9d2a86c23188fVirustotal results 21.43%Heodo
2019-02-13eFILE_021320194688.docdoc 0d3789b5613f17c62f50c421781af224a5130f936b147f9b459c39acfbe9c413Virustotal results 17.24%Heodo
2019-02-13eInvoice_02_13_190773885.docdoc adf4a20c7d15365bb9ab64eba58030602afb74ba8e191326a9250aef4fcd9eebVirustotal results 16.07%Heodo
2019-02-13eFORM_02_13_1942580.docdoc 762010819aac35827bd1a7c75b41cdcbe005b0930bd382f44b95a716fc3abb03Virustotal results 14.29%Heodo
2019-02-13eInvoice_02_13_195017.docdoc 6752d12b102e5a4d1659d124985edac7cca933abff7deee38e0902e21353718eVirustotal results 18.52%Heodo
2019-02-13eform_2019021394492.docdoc 00f03991dafaaae758848789831086c742aa81845ee5fb19a83ecabd1c414159Virustotal results 15.52%
2019-02-13eBILL_02_13_194289.docdoc b72540e462c1c4fa30f17c1c31003d63e1d772435f20cec49e17c01587b39106Virustotal results 18.97%Heodo
2019-02-13eFILE_20190213748444.docdoc e3192d0ad18c7bfd98e879c8a40afb3496835792aeedf6032572072f278967c7Virustotal results 15.79%Heodo
2019-02-13eInvoice_02_13_199722.docdoc cfe381fcbb5c0d45a7f40822df5d5967cab21cc454387f9469a7bba8c503aa4aVirustotal results 18.18%Heodo
2019-02-13eform_02_13_195887225.docdoc dfc2e982f50d7df16be5e88f9f9901cbb318490167f7669e20c262ffd8f87ce4Virustotal results 16.36%Heodo
2019-02-13eInvoice_201902137149675.docdoc 8a320256d039685389a6d124c1e6990c21812f75b7b77f89dc2a2160810785f7Virustotal results 14.81%Heodo
2019-02-13eBill_02_13_191970.docdoc 69cd78eec9c073bf2910b3ed4abb675908adc820e25c3e33ff0b154158c96641Virustotal results 15.79%Heodo
2019-02-13eFile_201902139524689.docdoc c7c93c7d3d849010ad878a938d2b2adc9e8c9b5ec8fa3a9e2f96a733a6b00f44Virustotal results 16.67%Heodo
2019-02-13eform_02132019221319.docdoc 341953de8c3974331f355ca207cca324dce68ed588b9f230356fbe184b733b87n/a
2019-02-13eform_02_13_19291427.docdoc 306559a01b5640c2526f1f495447da0187d97cf7a826030a7479d116b6e9a886Virustotal results 16.36%Heodo
2019-02-13eFILE_02_13_1991817.docdoc 9606d86e7bb72309086d117efdbf55637e1b781631d02504f92f2148f1c7d122Virustotal results 15.79%
2019-02-13eINVOICE_20190213349733.docdoc 5725aac54f9e0b682c8e90c5adc8e25b1a97ee60aa1ad40f7b5154772e428bf9n/aHeodo
2019-02-13eFILE_20190213930415.docdoc ab09084e5321b552445689d057851b4f551c58506dbced9576b1856aa0517c39n/a
2019-02-13eInvoice_2019021327505.docdoc 6c1710a1a3c916f3bc8ca4eee0eab976c39fb0b24b520e8a4e9ca7e9106c84f5Virustotal results 33.93%Heodo
2019-02-13eFile_02_13_1992641.docdoc d86dffa3c6861d289c115394cdcda950fa8ea88a50c6fd8c7f3f6b8720085c88n/a
2019-02-13eFORM_02_13_19687057.docdoc 813b8b26db590fc346a8f2feee33409f46c1066cace60353f29725330193b5d7n/aHeodo
2019-02-13eFile_0213201959371.docdoc 4458ae6f0ddafefff59ae71480e104dbe486a205219695877e2652ce3865b933n/aHeodo
2019-02-13eINVOICE_02_13_197853.docdoc f538ee8501fc30e1c4ae2fa514858952069c77db02f433c7211361c7de4a0342Virustotal results 33.33%
2019-02-13eBILL_2019021369533.docdoc dcc6711a8116b1e24aec79e5066b4aa738c2afce77656c5150bb3326aaf8579cVirustotal results 33.33%
2019-02-13eFILE_02_13_1900252.docdoc 1f80bc1a597f55db4ecbf15b6485381153514e782469db4b9e64ddcc2f8badabVirustotal results 35.09%Heodo
2019-02-13eform_201902131280.docdoc a4ef612e70535abbbdb168a51f1d7e524ea19747e93616dd5daeaca728cb1fb6Virustotal results 35.09%Heodo
2019-02-13eINVOICE_201902135980.docdoc 0d782eae48a64d70cf4a4c87db6d0d0f5410f894b0babeaf927352d4e2574029Virustotal results 33.93%Heodo
2019-02-13eFILE_02_13_192156.docdoc dcf2062518f5f3fbf54499fbbe8ad8c1ab2b26dbe92ab36f1be3720b61d2808bVirustotal results 35.09%Heodo
2019-02-12eInvoice_02132019736403.docdoc 31269fda4663bc5f6bba68346a4d151ac496cede9f82b0efebc3337aeb4d459cVirustotal results 33.93%Heodo
2019-02-12eInvoice_2019021326140.docdoc 51e4683c429a41b0da3dbbd17126ab5327d4ded1f4bd4be381a42e65f5d1b84bn/aHeodo
2019-02-12eFile_02_13_19999157.docdoc 5a64216cd578341e9826d5ac879207015eed1c926ba1297d768efb964592d0cdVirustotal results 32.14%
2019-02-12eFILE_02_13_1995277.docdoc e7fa0b77579a3dc649ebed6943d422820bb519ba316ba5261c07dadced0cd8c3Virustotal results 32.73%
2019-02-12eINVOICE_02132019167337.docdoc dd0ff448256f42d345e5c4c3fc6709f58edf50cef095a2aded59ed9524de4f45Virustotal results 32.14%Heodo
2019-02-12eBill_20190213139818.docdoc 48e06f2d44bdc24a9629f5fa8d3369973f2e1924e8e8279f6816424518972057Virustotal results 35.71%Heodo
2019-02-12eINVOICE_20190213713029.docdoc 30d6db8fedcca6feeb2ab6f64a2c0778e0bc3bc47d55f902cb0c047bd66480e3Virustotal results 29.63%Heodo
2019-02-12eform_20190213227797.docdoc 3758752a73c0be622d0f99eb301eb447e3f57db71c916c1add6dc801214cf032Virustotal results 28.57%Heodo
2019-02-12eform_201902131220160.docdoc bc4d532da6fa3b8bee4c159e9e96a03b3e9800e938033ed6820076fbaa05603bVirustotal results 29.82%
2019-02-12eBILL_021220192518498.docdoc 0dc73d739c5df89ad2ff7f54cd37b53a529d95b766e36ade366aa394d72b4025n/aHeodo
2019-02-12eINVOICE_021220195093.docdoc 0c969d5ad8febbf86af5152a0913bc56bab3951f51d15b60726e42d2e3e0bdf5Virustotal results 29.63%Heodo
2019-02-12eform_201902124407340.docdoc 5fcb69534f967d1724ceb8561472f07c1abd13cb98ea1c8d63009788c27170bfn/aHeodo
2019-02-12eFILE_2019021221321.docdoc ac806d78d25581983f1200b8f3d89c233a76c9d87b03ae1d929ea89d0a72edc6Virustotal results 29.09%Heodo
2019-02-12eBill_02_12_193581575.docdoc 2b0e670389e4e92743752e217eb624f285d205bbbb69502201a291680164b8d6Virustotal results 27.78%Heodo
2019-02-12eBill_02_12_1998999.docdoc d23c7abd3719769158d6a04f512bdae7273163e74c3e8e165a387842f3430353Virustotal results 27.27%Heodo
2019-02-12eBill_201902122982185.docdoc 2330590939e55a145dd194bd887164df0dfd62fe01b19b0191bd62e4f4fa8192Virustotal results 25.93%Heodo
2019-02-12eINVOICE_021220198725.docdoc 01a5f6ecb789da2ffa5311b070f2daf717a22cb5e6334a43fb9aeec39d69b55cn/a