URLhaus Database

You are currently viewing the URLhaus database entry for http://gn52.cn/css/Pages/CmUzPDxvmcX/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:189028
URL: http://gn52.cn/css/Pages/CmUzPDxvmcX/
URL Status:Offline
Host: gn52.cn
Date added:2019-05-02 06:00:35 UTC
Last online:2019-05-16 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-02 06:02:05 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:14 days, 4 hours, 10 minutes Bad (down since 2019-05-16 10:13:04 UTC)
Tags:emotet link heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-03FILE_130956095509US_May_03_2019.docdoc f35cde1b8619bb6a1c597a3ccd7965d4c24434bd0e02a8b215b75a69fd96f7d1Virustotal results 32.79% 
2019-05-03INC_447021966375US_May_03_2019.docdoc 0731dac1d684fd9c6150d9d0c20e52073cdf8b9a8a2afbe06578f553c315bc86n/a Heodo
2019-05-03DOC_943464191164US_May_03_2019.docdoc db18c4598bbacd610a58daa6caae5b9cf0dee2994ab5a969e81ffb0dd5f5a3c7Virustotal results 28.81% Heodo
2019-05-03DOC_143281554496US_May_03_2019.docdoc d357263af9dbbba4d29f2dfe47d9303c020b883f1cc7cdd24390e744c8d5c3edVirustotal results 27.87% Heodo
2019-05-03INC_3354540752US_May_03_2019.docdoc 47ff1922c8bf5e9e4944d5d3703858836ae1acbb1387c2cf3280abfe1eb20632Virustotal results 28.33% Heodo
2019-05-03SCAN_76602855759US_May_03_2019.docdoc 47d5b493497550fbfa7b76608e82b40b7432ec6fd0efd5b162d1901a189133f9Virustotal results 29.51% Heodo
2019-05-03LLC_564723934685US_May_03_2019.docdoc 46dddf743200acba21e4e2eadf9567769446002f19b405be24576832b3cd1888Virustotal results 28.33% Heodo
2019-05-03DOC_4884753717US_May_03_2019.docdoc 79b6f593af071528bec7bdf1e1dc916bb1fb622dee27050b56b399c55c654cf0Virustotal results 29.51% Heodo
2019-05-03SCAN_2735490073US_May_03_2019.docdoc d1c30d524c0e13638c93c5d6c708e318d8e0ccef1a50929c804da51efd3bbb8cVirustotal results 30.00% Heodo
2019-05-03DOC_09900839728US_May_03_2019.docdoc 103a9a5a879c4c02ef7d59494306068c7e013d54d01c496c3034a5d49d665d95Virustotal results 26.67% Heodo
2019-05-03Document_6549436712US_May_03_2019.docdoc 6c03ef96d9933ed865c770135fa52fddc780e30d5cddff4c4caff56561b2387dVirustotal results 29.51% Heodo
2019-05-03INC_9869703288US_May_03_2019.docdoc f3058c1db83d73446065c2bbd696d77552fc69b6f9b3b61bc10163c963a6177bn/a Heodo
2019-05-03Document_1962740310US_May_03_2019.docdoc 405e58903f88ee4859fc1ffd4d8449d2a8cb49ea316b6a7e98c6a0ca46239f24Virustotal results 31.15% Heodo
2019-05-03Document_2591494101US_May_03_2019.docdoc 1d7539321e9bf6c9eea9678b1a9c391a361b871937e8cb526e160f153c7645f4n/a Heodo
2019-05-03DOC_16073789914US_May_03_2019.docdoc d2d2a455578a38b9a564aaa771c3f8464d8158ed7eb6f94cb692eda8ffc5eb66Virustotal results 31.67% Heodo
2019-05-03SCAN_49869254755US_May_03_2019.docdoc a6c39942b4368c8042b2966a36af70a0664404a62b92f59dcd574b258946db7dn/a Heodo
2019-05-03Document_55729525750US_May_03_2019.docdoc dcca578d9c6b6b2a130fc9d21ed872258ff71901fe4e3566e2990f5151d94f78Virustotal results 31.67% Heodo
2019-05-03DOC_48347688903US_May_03_2019.docdoc 990801c1de058647b506c19565ee7abf0c886af33defe87c185c91aa65f9b579Virustotal results 41.67% Heodo
2019-05-03DOC_623279346486US_May_03_2019.docdoc 4146e3cf4f60248ab8855463ad47ac44eadfa77f85a93d219f31d7ee935d9da6Virustotal results 42.37% Heodo
2019-05-03LLC_9359863741US_May_03_2019.docdoc ca8b291d0dc68db57dcde7e61fa81d3da86f9c65c5006a6228e7fb80cd8ee651Virustotal results 35.09% Heodo
2019-05-02DOC_976150966725US_May_03_2019.docdoc 15d6cb9824fffd568458004f7229d69b27e35d5832a06314821f924491c61f3bVirustotal results 35.00% 
2019-05-02INC_533157982930US_May_03_2019.docdoc e94720b4121c2f2d41e0ee3d754100229d76b7f7085c5700cc059ac806f0a59eVirustotal results 39.34%Heodo
2019-05-02FILE_7053364955US_May_03_2019.docdoc 8349b412581a466e885158f9a83aee010856a203586fe21fb479d87fd23c2826Virustotal results 34.48% Heodo
2019-05-02DOC_5342139408US_May_03_2019.docdoc 4a4e5f7221b64a94e9ef4e6aa74464802d5156b0fed3258d36bc778233fbf8aaVirustotal results 36.67% 
2019-05-02DOC_7241630845US_May_02_2019.docdoc 6c1d9bbd9dcad8b950dcada8139a8b21e31036ae9d319050f7513d240ef31995Virustotal results 36.07% Heodo
2019-05-02LLC_512787711218US_May_02_2019.docdoc abc589d5ec63138ee0c588f744cb6c8ba59baed47e9316419c174ef6e6a7e393Virustotal results 37.70% Heodo
2019-05-02FILE_3668317991US_May_02_2019.docdoc 9412268f1f2c0eb9a06cc682d774e05495a3b4e468749c77e157a5a354c2c8d8Virustotal results 38.33% Heodo
2019-05-02SCAN_013839007866US_May_02_2019.docdoc 77097aa9879009420abd97243ad99b01d6f37aeb4a0f10db935af76d24071f60Virustotal results 33.33%
2019-05-02Document_267902351152US_May_02_2019.docdoc 5a065c412c5ca5029a12a0c5bb8fc9ea3fbe72f7b3a89fa7fbaede2f06ae8185n/a 
2019-05-02DOC_92887187656US_May_02_2019.docdoc 0aba359f77ac576510a26b160b60e4b0bc470db5ec0341e64234681ec8c607c1Virustotal results 34.43% 
2019-05-02FILE_6033320477US_May_02_2019.docdoc 11f45c2f0d6d243306cbd6c70c01f1efb2050836b14f4d669b7a471511ade739Virustotal results 26.67% Heodo
2019-05-02SCAN_2869050176US_May_02_2019.docdoc 29d5a0eb1f8b938839724b100c9d78b140e82567e8addd0d15bf06f98e61de90Virustotal results 27.42% Heodo
2019-05-02LLC_05773337945US_May_02_2019.docdoc 61363331b4ed5c211a5108f4820e0e7b31451bb9fb50da87d537b88e01159528Virustotal results 28.33% Heodo
2019-05-02SCAN_890452081370US_May_02_2019.docdoc 5df383f04feac1ecc7ff1cda2e577d97e612db6ded6d2d33830eaaa3fc0d569eVirustotal results 27.87% 
2019-05-02INC_014933073466US_May_02_2019.docdoc 456c3edf43e0677174dad7da916faec9c2534520655a62ad5be950b123060daeVirustotal results 27.87% 
2019-05-02Document_84763944970US_May_02_2019.docdoc b1dced28edb0f204dfeddacb104281bf43b041d6dfb17f063aed46e5b5437998Virustotal results 33.33% Heodo
2019-05-02DOC_11712540366US_May_02_2019.docdoc c00f51900f0ea1f2b2f180fce863a775f22285c5e714f71db05511ebbff40bffVirustotal results 31.15% Heodo
2019-05-02FILE_0161940326US_May_02_2019.docdoc b0ac55a9a3533916702fcb365a321abaf4990b73459a2fd1a32a3378cda957edVirustotal results 32.26% Heodo
2019-05-02LLC_049298527388US_May_02_2019.docdoc fea2192a0625af323042fe1f31e647d6a4be939d0ad615b8eae445e1d29bfd8cVirustotal results 31.67% Heodo
2019-05-02Document_597354542756US_May_02_2019.docdoc 1c97b7f3209e9d9ec53eb970c19973fd0a805e6f621aaedd613235fc9fbe453cVirustotal results 31.15% Heodo
2019-05-02Document_37685806600US_May_02_2019.docdoc 8e4a311d2368b3ef3374691d891e860542fbcd33a8c5df81d9264762449a41a5Virustotal results 28.07% Heodo
2019-05-02DOC_521765268353US_May_02_2019.docdoc 17f4ae8fba484e7fb87c16216ece4622556d70db4d807d8b0a4ac207eba7d015Virustotal results 38.98% Heodo