URLhaus Database

You are currently viewing the URLhaus database entry for http://chukysonewca.vn/cgi-bin/9641226MXM8912/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1967709
URL: http://chukysonewca.vn/cgi-bin/9641226MXM8912/?i=1
URL Status:Offline
Host: chukysonewca.vn
Date added:2022-01-11 16:27:11 UTC
Last online:2022-01-16 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-11 16:28:08 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:4 days, 9 hours, 34 minutes Bad (down since 2022-01-16 02:02:56 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1246988476-34017254.xlsmxlsm c82f282fe8e4c3583e5e4d834ae90565ff0b3fb958513688b442153cc57c82fbn/a Heodo
2022-01-11496-785273.xlsmxlsm 2bcd5baa2d280f6afd51a5beb204c382fce0fa58f20ff76076d27cb2323e8ac6Virustotal results 9.68% Heodo
2022-01-11995399_80503064.xlsmxlsm 1df00c09db9bfcf4e493dacdef73f2b732cd06ae4b931bd356516667a44c47e2n/a Heodo
2022-01-11kReyb_0.xlsmxlsm 57bb4eb8428998738c8860427c1c1de98d681120512901d8174f8fc2edd545f9n/a Heodo
2022-01-1187813340_605684.xlsmxlsm 99223483d99394011b572cfa63b22fd53a04ef616a9e93ce78e6e9d11c9fbb9dn/a Heodo
2022-01-1131WGTVYOYGZK-5277.xlsmxlsm 8a9101b7343bf1a4608ae17b84bd290c1e40f510ec792e9c5d3cc5ace4ca5490Virustotal results 9.68% Heodo
2022-01-11945357462_405397793.xlsmxlsm 20be5590c08561d3a5be97621400daf8528533950a589089a00a259da40668d8Virustotal results 9.68% Heodo
2022-01-1100494533_82760.xlsmxlsm 71da6e57fe5adfa0b06f8ba9525e6db95e7c25246179fa8563561d24e79e6c65Virustotal results 9.68% Heodo
2022-01-11Uy357.xlsmxlsm 929fd76e8373d3c14a1fa542d4222dba73cb21f0c5cdaa0c8b7acea0a53d8f0bVirustotal results 10.00% Heodo
2022-01-115421606446.xlsmxlsm c2cb81db208398e070c47e7d03e76709142dec85ddaa985883536283a0acbb14Virustotal results 9.84%Heodo
2022-01-11351451-227811700.xlsmxlsm 79a935edd516953713a4d4565e5dfcbbb08f17b9633f31d84e0e042a5de4c178n/a Heodo
2022-01-1132KDNPXRJJL-28.xlsmxlsm eabf9bfbdc503869315be500dab8f676c77bc6111c99ebeaec1981e1dc95af9cVirustotal results 9.68% Heodo
2022-01-113444-05749587.xlsmxlsm e55ce4bc7ca054665ac48b9640d2f0f3bc4a83af6c95b4019b28c4d49ba669b9Virustotal results 9.68%Heodo
2022-01-11I-63.xlsmxlsm 00c8843cc08ecd83f55f5b22eeeef2c14ff4207192bac3795cb0409569b2defbVirustotal results 9.68% 
2022-01-11997398022489041.xlsmxlsm 8225d340f62e0a9d2fd91acc14510e7df52c5649f1edfe0ba62e00f859d597ccn/a Heodo
2022-01-11EA_6859698.xlsmxlsm 60a2fe4a87a42aef09d57e41fa80f438983821928336d78cd14ce1042e638b6bVirustotal results 9.68% Heodo
2022-01-1120_70.xlsmxlsm f84d3863143cbe9c97859d10c99e61155092470c08e9aee090365490450a4f00n/a Heodo
2022-01-11HLZY545013.xlsmxlsm bb42c503ef90a3b580fe241d3935057273211a16974921ce0999f778cfe35f7en/aHeodo
2022-01-1190WXDINJ_859415.xlsmxlsm 6913af2de9271a92bd9c7c9afe4923a08f237459d7e1e03d171e96fa291e39een/a Heodo
2022-01-1122466269_117.xlsmxlsm fe9b66e9750d5a9622c8cdf80c0fe282396305c32affe31e612bb8a69485ea80Virustotal results 8.33% Heodo
2022-01-1153675-701870.xlsmxlsm 314beb338f0644b4900ecc03c9ae919a0cb841f556fa61e02d205c281c278206n/a Heodo
2022-01-119625952_410.xlsmxlsm 34f56237f58ad36e22626f2d62e82abd70eb30b63248ad4c559d7b179508d3d0n/a Heodo