URLhaus Database

You are currently viewing the URLhaus database entry for http://www.178zb.com/avcupkl/KBlhe-WVCWFhodD9BBflj_lbrcsBpH-dB/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:182358
URL: http://www.178zb.com/avcupkl/KBlhe-WVCWFhodD9BBflj_lbrcsBpH-dB/
URL Status:Offline
Host: www.178zb.com
Date added:2019-04-22 21:48:15 UTC
Last online:2019-04-25 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-04-22 21:50:03 UTC to ipas{at}cnnic[dot]cn)
Takedown time:2 days, 10 hours, 58 minutes Poor (down since 2019-04-25 08:48:55 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-24S-0562417-04252019.zipzip 32aad85b252dd78506276ca221593876b74c35e86b1a548031282c29cb29c6c9n/a 
2019-04-24E_052411_04252019.zipzip 94c1ab4e36c2fd6959cbdf00ad794e4da76f2916de79fb7923055f8c8d8edc8dn/a 
2019-04-24YK_915318231_04242019.zipzip 90f540925eded4ce000e161369001ddac1a3f4ce5da270d3f6bf2b846bec1f85n/a 
2019-04-24A-867939472-04242019.zipzip 18b610f569954aff8c3d75c9c9446702ed4ce6709f8c58b5a60f448b7c567d68n/a 
2019-04-24O_668273_04242019.zipzip 9a132508f4ead52b8598623ffa3b56761292216fd3443a97a2aba456a2449ad4n/a 
2019-04-24Z-77560647-04242019.zipzip cc36612028cd3630fdd7125e3a8141952d590a6a7687934d89b10758461a64fan/a 
2019-04-24FU_0772471_04242019.zipzip 80a1b90e7252c8c03c42653b924d3d33c797b6098ca36c71bd2c5467894ea4d7n/a 
2019-04-24ZA-88928856-04242019.zipzip e911d59a80d82af6b436400c0a8f8daab050ff093477f3ff2596c0d1b39b837fn/a 
2019-04-24KU-930593752-04242019.zipzip 24cc2d9734be6336d3852975ecff6f7fb2984f4f62e19069715a3c38b61d81ecn/a 
2019-04-24U_2367561_04242019.zipzip 0303dd4743bbe3fb47b30a0037117744cf0b000bcbe314889a73c35cd65094acn/a 
2019-04-24YM-0721791-04242019.zipzip e535784d7bce9cc134a466bce20ce4d18f9f9ae2f9a16b6c01ad8f6ec16d3fb4n/a 
2019-04-24R_352976_04242019.jsjs f9a3d8d2568059bff0da6d27fe8d474fa8dc1c0f97c24433f2fd9caed3594b0fn/a Heodo
2019-04-24E-9057128-04242019.jsjs da2d68c98cb3e9214a1e0bb58fc5fcd77c1435e63282c0602f085f56f6aa3e29Virustotal results 10.71% Heodo
2019-04-24P-9689150-04242019.docdoc 15b76f000b9a6bdc9237b8b67e2c3e63b5bf72a09b746bdc531de99c14362fd1Virustotal results 24.14% Heodo
2019-04-24V-670049650-04242019.docdoc c73c9d8340438ecfcad1f82d3b1a2726858de091df6946cf3c62990d8dbfc469n/a 
2019-04-24TH-216932888-04242019.docdoc bfc6f5780109d9395f042d83bf54f5bd0b45a0f4a511181e0f0b7f65e6768442Virustotal results 24.56% 
2019-04-24Z_7611863_04242019.docdoc 8f2002168bbdff63ed1e3e257d470ac5f3579a68a2412543f937cbe0e3e7d43eVirustotal results 24.14% 
2019-04-23LT-971329-04232019.jsjs 8870927b7fcb804322779608fabf59e1c019245df08aaaf5f9202d131e92efdaVirustotal results 10.91% Heodo
2019-04-23U_079980411_04232019.docdoc d8eb301687446e4cd6e78a8a12023289acb786b98b7fa84768b9dbd732180584Virustotal results 28.07% Heodo
2019-04-23KJ_614628_04232019.docdoc 32b8d9e46d1c876297223f64d7669be38749959ded1b977c2553cf47517e286an/a 
2019-04-23AI_06753746_04232019.docdoc 3ccc08551639ea7da8a092efdb09741ee02811fd2a184d1251912d1fbac80cb9Virustotal results 26.67% Heodo
2019-04-23YA_2148434_04232019.docdoc a13fb3d24e666871b1780e2bf04b62cd827d856043fe644245809f368ac600eaVirustotal results 30.00% Heodo
2019-04-23CS_03377882_04232019.docdoc 6a2b372164f3a1575f60581b21966a519c7b7bcb3896dc6a0157205b899c00e8Virustotal results 28.81% Heodo
2019-04-23Z-0278406-04232019.docdoc ed45725970bc308762a415bfe8e337d407cdce14c319cfa627b452c981e39266Virustotal results 26.32% Heodo
2019-04-23D-832294164-04232019.docdoc b8304ef53f9c5462f71c0231ffe09332a49d933b1288025b250f19486f4abe75Virustotal results 26.67% Heodo
2019-04-23I-22672987-04232019.docdoc 0613a5d290dd56c9f205c408e5f101f40c8a49066db7c76d7138e8c0d2975a75Virustotal results 27.12% Heodo
2019-04-23A-807347398-04232019.docdoc a35b5d2be5e897e676a9f988b4988faec6ed74cfbeb0bcd10818ac95b9293fcfVirustotal results 25.86% Heodo
2019-04-22NF_5181094_04232019.jsjs 79270d1e30b8e29e99db95c42e8d33801b27624fe09b05d51f4dd5c0a945d987Virustotal results 12.07%