URLhaus Database

You are currently viewing the URLhaus database entry for http://cngda.tw/secure.myacc.docs.biz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:122740
URL:http://cngda.tw/secure.myacc.docs.biz/
URL Status:Offline
Host:cngda.tw
Date added:2019-02-12 19:26:28 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Abused domain (malware)
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-12 19:28:19 UTC to yaou0937953361{at}gri[dot]tw)
Takedown time:2 days, 23 hours, 23 minutes Poor
Tags:doc emotet epoch1 heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-14eBill_021420190780661.docdoce659dc03dfe534ba5abae46047a329043002e7f1560a4888a49dcf31f9958399n/a
2019-02-14eBill_021420197272740.docdocf12e124637c07cad9b7e1ce7becc22d4e6235674806bbf5a9c219338640f8a99n/a
2019-02-14eFORM_201902143446.docdoc7bbcb13ba9df7f6d8fa33c2b581cdd1ae42407ba604bb6b4c883e41f41601590Virustotal results 12 / 55 (21.82)
2019-02-14eBILL_02_14_19684850.docdoc5ede447198fd9790905c29e6810244fa57fbba49dfe1adcdfc3b9eb0be5f8fbeVirustotal results 12 / 54 (22.22)
2019-02-14eFILE_02_14_1915718.docdoc93d436758cc24dfad3d575c3794ccbed12ff44d6d9f0d76bc428c470d5b89608Virustotal results 11 / 57 (19.30)Heodo
2019-02-14eform_0214201955667.docdoc5e09937233d3be286d6935cedca2ff4954e7b36ecc582a2150d89686357b77een/aHeodo
2019-02-14eFile_2019021465158.docdoc547b9761464a9037c1aa76c52178b5d141ab790adce4e100d9fca489d1bdc461n/aHeodo
2019-02-14eBILL_021420194436395.docdocddc7f188c59c03ef24d8f5ce2f3d9d93dd9c9fb6a9072bf30700a080e17a15bbVirustotal results 11 / 52 (21.15)
2019-02-14eINVOICE_021420193976.docdocc2b792f0e67f6982b6bf54bfdc5e88541f7af446f8225027b7c3cc2c98953c42n/a
2019-02-14eInvoice_021420192072.docdoc8fa8e6f9ce5b34d88fa570fa7630419dfadd71d24c3b29634e361dbf85bfdcd8Virustotal results 11 / 53 (20.75)
2019-02-14eBill_02_14_194122.docdoc1e98f156e7ed7d59838b17ed0eed92bb7be5aa6ca24adbf309248519638c7567Virustotal results 11 / 54 (20.37)
2019-02-14eFILE_02_14_1979340.docdoc69b6d136530b5d3edd4f07166b54e8b08b320914dd5bd3e3081185bf6c75f09cVirustotal results 11 / 54 (20.37)Heodo
2019-02-14eFORM_20190214383496.docdocfbebf124c9bd0eb283ce8c38e47aacd82fce8d87379aa5138b0e78312e2829aeVirustotal results 11 / 56 (19.64)
2019-02-14eBILL_021420191538681.docdocf04b45873ca7819656f9be1eecedf24a034d742aa8f2d16ef6ed3f53f48cf008n/aHeodo
2019-02-14eFile_02_14_193176432.docdoc869c7e5002cf4566c7b1331be7ce8e9847dc76570c2951b45cb831bf95c25d30n/aDyre
2019-02-14eFILE_021420191375.docdoc4278120c2c57403b97a72dd9418855af55e61fdf51f89bd855ee1c9373525ebaVirustotal results 11 / 57 (19.30)Heodo
2019-02-14eBill_021420190001.docdocc58e7b8696794c6d5f1dd3745225d93fade8d584c4ad620296d4a37b7f0d30afVirustotal results 9 / 47 (19.15)
2019-02-14eFORM_20190214437122.docdoc9a8638e42360c33ee43e4bde6fafa5b5ea62a164adda3b29fa7908904de76ba9Virustotal results 11 / 51 (21.57)Heodo
2019-02-14eFILE_0214201947933.docdocd1cef97ad1d73220a0c4e28095b4a46992713d0649f8b138ca74b5e05be508b0n/a
2019-02-14eINVOICE_201902140693690.docdoccf04da964014299d991218169315bcd5d6d77ae67c6211bcf95158c4a461bf2dVirustotal results 10 / 51 (19.61)Heodo
2019-02-14eFORM_02_14_19021166.docdoc0eff3a4b444eb8c567db5b87dfadb6a0b1fbec831901cb2718964fab137472b8n/a
2019-02-14eBill_201902140463260.docdoc90a497b432bc14ae7ac9016f868a72ac74ac4d31a2b4619ca2be1f5d1f2d6950n/a
2019-02-14eBill_02_14_196784.docdocb7e66cf6b9746084770347e1766e227e536a88892530d6f8db193a485e681bf3n/aHeodo
2019-02-14eInvoice_2019021487162.docdoc44af4973b88c3d9fdb128c5338e528698ff6bc5578fe8d5f51a3767c919020e7Virustotal results 18 / 55 (32.73)Heodo
2019-02-14eFORM_021420192949.docdoc8aafae60bcbdbdbdf877093104370bcf096a650c308fbb38828eccac6ee0a795n/a
2019-02-14eform_02_14_194215252.docdoc24accce394df4d28c0b496cacbcb0245e52c3401fccfaf14fb0ac8cf65a08ca4Virustotal results 17 / 55 (30.91)
2019-02-14eInvoice_20190214544697.docdoce6b79db99b399198a61b836acb552f49c58e491bebda5dc7125d2a3f8b798f1fn/a
2019-02-14eBill_02_14_1903480.docdoccebe799eb13204e363f9d18a0be2885e4668ca32ffbe1bcbe0d6071ddc5fe541Virustotal results 17 / 54 (31.48)
2019-02-14eBill_201902145252.docdoc60bcaac606692210b3caefe17ecf597d49db8d529978d6726a7269b4a14dc641n/a
2019-02-14eFile_02_14_197949384.docdoc1b8f1db3cc4c467bca294bafe4ef2082c83c385e75cc4fc589eb2b32a6d0c279n/a
2019-02-14eform_02_14_19570762.docdoce95846c16abcb48406d3e68b89c6c57335d72683501f7a9bd60d2e7894fedaa2Virustotal results 15 / 55 (27.27)
2019-02-14eform_02_14_195750153.docdoc36e96af0d786eeefe5749d3b60ab2dfa044ca4da0644012c8c15dc5a6df36e17n/a
2019-02-14eINVOICE_02_14_196336404.docdocc131a04ef143915bef40c4816d7c065d86f15e1e00b15f26500895151f466fedn/aHeodo
2019-02-14eBill_021420198804.docdocc72ca32025175570b30d91669466db659f84b9b910498b3d1b8ff673feb48213Virustotal results 16 / 57 (28.07)Heodo
2019-02-14eFILE_2019021489728.docdoc619324ffdc2376cb39135e2705c1034eb856bd564698c886a15b176aa95df5cbVirustotal results 15 / 55 (27.27)Heodo
2019-02-14eInvoice_02_14_1929900.docdoc02733ad79a16b0fb62e4dfe438aaf227d6a456fe60445aa595cad125d72c9294Virustotal results 15 / 57 (26.32)
2019-02-13eInvoice_02_14_197165.docdoc8e610df0d3b2a0b27aecd4d74baa2303621a4e1cdcdfd62a9a0518ad813276den/a
2019-02-13eFORM_201902140961.docdoc2f65ba0ecfd26fa06e238822d9c0f8bc60b0dcd003afbd7568b1fd1ee6bbd191Virustotal results 10 / 58 (17.24)
2019-02-13eInvoice_20190214172112.docdoc8050b4496e395a91f1363fc1af60a243811a170eccefe723b8f04e93e403a013Virustotal results 11 / 57 (19.30)
2019-02-13eFORM_021420199205570.docdoc46bce1e470af13227d4949322b92cacd5a4bae10eabb3fc5cd46fa2f34b76a29Virustotal results 10 / 55 (18.18)Heodo
2019-02-13eFORM_20190214193165.docdoc15b0891d13aefc17adf3ba8fdf570dba763f32661aa72177b4dad8e9c3da74dbVirustotal results 10 / 58 (17.24)Heodo
2019-02-13eFile_201902148778636.docdoc9e0d36cfd8196baeed740ebf985200c58f5fb8c9ca4e51a22b5d17588592664cVirustotal results 10 / 56 (17.86)
2019-02-13eFILE_02_13_195161.docdoc0d3789b5613f17c62f50c421781af224a5130f936b147f9b459c39acfbe9c413Virustotal results 10 / 58 (17.24)Heodo
2019-02-13eBILL_02_13_199958.docdocadf4a20c7d15365bb9ab64eba58030602afb74ba8e191326a9250aef4fcd9eebVirustotal results 9 / 56 (16.07)Heodo
2019-02-13eBill_02_13_1944652.docdoc762010819aac35827bd1a7c75b41cdcbe005b0930bd382f44b95a716fc3abb03Virustotal results 8 / 56 (14.29)
2019-02-13eFile_02_13_1986877.docdoc6752d12b102e5a4d1659d124985edac7cca933abff7deee38e0902e21353718eVirustotal results 10 / 54 (18.52)
2019-02-13eBILL_02_13_1949870.docdocb001ebc3672141a9de3796139845db2b3b56c45d58f84eb26da483fcfbe88144Virustotal results 12 / 55 (21.82)Heodo
2019-02-13eBILL_201902138865.docdoc8a320256d039685389a6d124c1e6990c21812f75b7b77f89dc2a2160810785f7Virustotal results 9 / 57 (15.79)
2019-02-13eFile_021320193446.docdoc7ab45f42eda01aba9f541e2c9f5c0b05f5941ee594fbd040145256adf7bf2e82Virustotal results 10 / 54 (18.52)Heodo
2019-02-13eBill_20190213158579.docdoccac96efc1e664c5e4b613a9ed50b0420ba4b7b934c2be982825c3e7203dd6b16Virustotal results 10 / 55 (18.18)
2019-02-13eBill_02_13_19982400.docdoc93d5b37c299fa4d7a59a35598a41240c92e7e4e7c241e7a4c84abb48d71c3efdVirustotal results 9 / 55 (16.36)
2019-02-13eFILE_02_13_197521.docdoc5142bec748ae56c16cc76f6d6480b17b93de5b2278e85b32be8d56032e51330fVirustotal results 9 / 51 (17.65)Heodo
2019-02-13eFile_20190213493113.docdocc7c93c7d3d849010ad878a938d2b2adc9e8c9b5ec8fa3a9e2f96a733a6b00f44Virustotal results 9 / 54 (16.67)Heodo
2019-02-13eBILL_021320197114.docdoc72c87c8eb43ed965400e91aa64820f564ea8756ab7744fd415261ed8d064ce37Virustotal results 8 / 57 (14.04)
2019-02-13eBill_201902131996042.docdocdaebac726cb32acadc0768549242a41e6571532abd94cabc363fad589a9394d3Virustotal results 9 / 57 (15.79)Heodo
2019-02-13eBILL_02_13_193360.docdocb1e225ebae83ccd9d734b479af36b360c89376f19db90eaad428da585dbefdc8Virustotal results 9 / 57 (15.79)Heodo
2019-02-13eBILL_201902130656.docdoc1b78380dc87da33f1be03698c6fb1c97047fb83b0869db614ad78af739d239e4Virustotal results 19 / 55 (34.55)
2019-02-13eFile_02132019759842.docdoc0d782eae48a64d70cf4a4c87db6d0d0f5410f894b0babeaf927352d4e2574029Virustotal results 20 / 57 (35.09)
2019-02-13eFILE_201902130153.docdocab09084e5321b552445689d057851b4f551c58506dbced9576b1856aa0517c39n/a
2019-02-13eFile_02132019744100.docdoc6c1710a1a3c916f3bc8ca4eee0eab976c39fb0b24b520e8a4e9ca7e9106c84f5Virustotal results 19 / 56 (33.93)Heodo
2019-02-13eFORM_02_13_191666.docdoc821b71c9fd3b62272475c4311e1f54cde3a467e2a9d618a3c0657dc9da1c8000Virustotal results 18 / 54 (33.33)
2019-02-13eFile_02_13_194265.docdoc4a3ade44ebed61b0b5c86ced8d1e85ea3ce21981a7f365a0d8d1c25c014e2ffan/a
2019-02-13eFile_02132019046522.docdoc4458ae6f0ddafefff59ae71480e104dbe486a205219695877e2652ce3865b933n/aHeodo
2019-02-13eBill_02132019665748.docdoc35fc2c38e0e4afb2068daf99019495b9264f8c44d5db3ba6b6aec5d389f7207fVirustotal results 19 / 56 (33.93)Heodo
2019-02-13eFile_20190213721538.docdocfc6cb533a710fa5bdaba2a06f103a8147b78911613d5ec0520bd0c4282c49acdn/a
2019-02-13eINVOICE_02_13_1907785.docdocdcc6711a8116b1e24aec79e5066b4aa738c2afce77656c5150bb3326aaf8579cn/a
2019-02-13eInvoice_02_13_1993932.docdoc0e7f4733841d308e03be632e980133f37432ec209e5f755a6f2f4365153279fdVirustotal results 19 / 56 (33.93)
2019-02-13eform_02_13_1931098.docdoc76cd96db24625e3d9ae47f7618ac30591f6c15e7b4a3446d57c03f586737373cn/aHeodo
2019-02-13eBILL_2019021329154.docdoc3722e38dfc6445a03e843fad423a8f401c24465817c2c65c7150d459851f9e1en/a
2019-02-12eFile_02132019289311.docdoc31269fda4663bc5f6bba68346a4d151ac496cede9f82b0efebc3337aeb4d459cVirustotal results 19 / 56 (33.93)
2019-02-12eform_02132019574439.docdoc6b90fbab01749462a83cc4dc452b96c77ca0b975acad0d81d8fee1720ca39d2bVirustotal results 18 / 56 (32.14)
2019-02-12eFile_02_13_19941956.docdoce9676a11a36d147aac2c5781a8270b45eca2f2509b2c95b2b668d4d1077dce2fVirustotal results 17 / 54 (31.48)
2019-02-12eFile_021320192650494.docdoce7fa0b77579a3dc649ebed6943d422820bb519ba316ba5261c07dadced0cd8c3Virustotal results 18 / 55 (32.73)
2019-02-12eFORM_02_13_19060828.docdocdd0ff448256f42d345e5c4c3fc6709f58edf50cef095a2aded59ed9524de4f45Virustotal results 18 / 56 (32.14)
2019-02-12eFile_201902134917363.docdoc48e06f2d44bdc24a9629f5fa8d3369973f2e1924e8e8279f6816424518972057Virustotal results 20 / 56 (35.71)Heodo
2019-02-12eform_0213201985771.docdoc30d6db8fedcca6feeb2ab6f64a2c0778e0bc3bc47d55f902cb0c047bd66480e3Virustotal results 16 / 54 (29.63)
2019-02-12eform_201902139624.docdoc3758752a73c0be622d0f99eb301eb447e3f57db71c916c1add6dc801214cf032Virustotal results 16 / 56 (28.57)
2019-02-12eInvoice_021320195010853.docdocbc4d532da6fa3b8bee4c159e9e96a03b3e9800e938033ed6820076fbaa05603bVirustotal results 17 / 57 (29.82)
2019-02-12eBILL_20190212376616.docdoc0dc73d739c5df89ad2ff7f54cd37b53a529d95b766e36ade366aa394d72b4025n/a
2019-02-12eBILL_0212201996194.docdoc0c969d5ad8febbf86af5152a0913bc56bab3951f51d15b60726e42d2e3e0bdf5Virustotal results 16 / 54 (29.63)
2019-02-12eFORM_02_12_19227407.docdoc5fcb69534f967d1724ceb8561472f07c1abd13cb98ea1c8d63009788c27170bfn/a