URLhaus Database

You are currently viewing the URLhaus database entry for https://tudien.org.vn/es/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:2650434
URL: https://tudien.org.vn/es/
URL Status:Offline
Host: tudien.org.vn
Date added:2023-06-02 15:37:43 UTC
Last online:2023-06-05 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2023-06-02 15:40:39 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:2 days, 12 hours, 16 minutes Poor (down since 2023-06-05 03:56:44 UTC)
Tags:BB30 geofenced js Qakbot link TR USA zip

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-04document_E413_Jun_2.zipzip 249d60ae48eaa806a442b6de092570aa5da063232144aacf5b35fc460aa5fc54Virustotal results 19.35% 
2023-06-04document_B275_Jun_2.zipzip 89e86d15e498732f243e89e5c3f162be799d4c87298df1a6f5eb9f869aa50568Virustotal results 24.19% 
2023-06-03document_A501_Jun_2.zipzip 2713912d6b284f7c846b050c4ca34a6352a3278bbda0a97362b6b02a629162e8Virustotal results 19.35% 
2023-06-03document_B872_Jun_2.zipzip 198c783da795adace6f862eddc26c213130ef5a1b35a94bf3faea4d14e3fcfd0Virustotal results 26.67% 
2023-06-02document_B370_Jun_2.zipzip 979b85c313fba80f41ee3c499a7f587d8d3a9c3f6fbe876df054cc6e1bad3b01Virustotal results 20.97% 
2023-06-02document_A124_Jun_2.zipzip e9f791133576ae182ce4e1034a880bf9856cd963de8d852e12ca5174407bbf5bVirustotal results 20.97%