URLhaus Database

You are currently viewing the URLhaus database entry for https://nhathongminhsp.vn/calendar/uwatf-bko7ta-yqbdut/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:187990
URL: https://nhathongminhsp.vn/calendar/uwatf-bko7ta-yqbdut/
URL Status:Offline
Host: nhathongminhsp.vn
Date added:2019-04-30 14:00:06 UTC
Last online:2019-05-01 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-04-30 14:00:11 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:1 day, 2 hours, 24 minutes Poor (down since 2019-05-01 16:24:36 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-01Rechnung_64251297425DE_Mai_01_2019.docdoc 68e686c3f2b87d3169766ffe4bba021a8acd7648ca38c6c75be829a864558ecbVirustotal results 26.23% 
2019-05-014495489264DE_Mai_01_2019.docdoc 49b5e70a242f984eadee49435aac4371ca3cb65b02b2f6fbcbfcbfbd9d985782Virustotal results 26.67% 
2019-05-014547881564DE_Mai_01_2019.docdoc db1c99298b5e34e6f10a5e054febbbbb8ebf940b4cacdcd1b1f4bf542d7da41dn/a Heodo
2019-05-017977590114DE_Mai_01_2019.docdoc 4b37aca0d46401d67a57677fc4189ef354ec63afa9c3312cd076fbe0391b9c6dn/a 
2019-05-01Rechnung_3858043342DE_Mai_01_2019.docdoc 9c8a8c93bd7627958c439fcb2f59df0236b1103da10b38c95498eafabd99887bn/a Heodo
2019-04-30Dokument_83749199236DE_Mai_01_2019.docdoc 9799b8b545925ef92b4b71fdd9af69c182cf471e215026914c3574b7084c5880Virustotal results 50.00% 
2019-04-30Rechnung_8176561965DE_Mai_01_2019.docdoc 52448cd37a4b02eb30174ada8146ed194b6cc52c9d340816a615f368476d9a3bn/a Heodo
2019-04-30Dokument_90197988738DE_Mai_01_2019.docdoc db491acde2147421a9c85c908da92b4f8af714da4609c2ddebfc509eca3ffc42Virustotal results 50.00% 
2019-04-30Rech_5857887026DE_Mai_01_2019.docdoc 2b1810f68974145fa51514b11e17499ff46e0d2eee96976a51ffa446424d1da3n/a Heodo
2019-04-3074403336319DE_Mai_01_2019.docdoc c654d69862242df1d006165cd8d0a60f683ab0eae1cb1cd5f374f831e4374606Virustotal results 48.33% 
2019-04-30Scan_7481520280DE_April_30_2019.docdoc 118942917ae2acf9a6c6ba8bae443bfa7d060b530958196b654729715276a4f9Virustotal results 50.00% Heodo
2019-04-30Rech_7802401684DE_April_30_2019.docdoc ae9aff9f74e7ad8ed8d61afd4f3796861ed3f08eb4ac310f3acfe9228d637b4an/a Heodo
2019-04-30Dokument_0661717199DE_April_30_2019.docdoc 8430c4680ac5779d052836f9fbdbdb6a9809d1eb8c62246036e89c5c919312dbVirustotal results 48.33% Heodo
2019-04-30517106173711DE_April_30_2019.docdoc 034d793e2d7928a31f3a2d405552c9288aa51d9fb212759573cb300f5538e92eVirustotal results 48.33% 
2019-04-301639459258DE_April_30_2019.docdoc d6b27400c5f0886cc2c21da11cacf302aa85e1b457a6f49ed8119b573fcb5558Virustotal results 47.54% Heodo
2019-04-30Rechnung_39330956045DE_April_30_2019.docdoc 42a04a35e214a16dcf1a928a99faa2648c7a34562eead18fa516512fcfa784baVirustotal results 47.54% Heodo
2019-04-30Scan_787806336451DE_April_30_2019.docdoc a68abf4c2b97d243d84969b61f10219e0eb42263822a18fd10a9575dc3371c02Virustotal results 49.15% Heodo
2019-04-3094134629361DE_April_30_2019.docdoc f5e1fe9adece633f63a665f277cd8bf19bde62423b747cdcc4cb0c291ac2d7d8Virustotal results 46.55% Heodo
2019-04-30Scan_54129127204DE_April_30_2019.docdoc 14c0357b63d11dbadf73949bed4a57e9928d2843282d71f3111eb17711fc9dcbVirustotal results 41.94% Heodo
2019-04-30344003996139DE_April_30_2019.docdoc 4ea21ebe4deb18442e48c50e5df59871fe759b0bc7d77d9e642fb4c2d8d075c3Virustotal results 40.98% Heodo
2019-04-309712042973DE_April_30_2019.docdoc f373bd488cf0827c59a30c3baa87bd6136d9a1176d79747897cef693e5fd5e6aVirustotal results 37.70% Heodo