🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://main-news.temit.vn/wp-admin/gpbzjh-l9d-80/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:266578
URL: http://main-news.temit.vn/wp-admin/gpbzjh-l9d-80/
URL Status:Offline
Host: main-news.temit.vn
Date added:2019-12-10 22:17:07 UTC
Last online:2019-12-20 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-12-10 22:18:02 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:9 days, 12 hours, 35 minutes Bad (down since 2019-12-20 10:53:36 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-12INVOICE-N307_98052.docdoc 89891bb4f7c8613e62b60638e41a82d4fe0589af2be2884ffa84eb7d8102337bVirustotal results 34.43% 
2019-12-12invoice B66_71922.docdoc 5ab572b3e3a96baf28b4a1ac9473f4f864814fe34b6ad9c0f659503ce3c5d99dVirustotal results 35.59% 
2019-12-12Inv_WV99_44060.docdoc 942a7a7c1077f67e7fd868d64dcd3033574ee89d95845eaa83d3a40385f21874Virustotal results 33.90% 
2019-12-12invoice_T920_08.docdoc bd7eb33be848dbb55c75059e2b7e852d1a3a5ec98b133333d42179c54e96209eVirustotal results 33.33% Heodo
2019-12-12Invoice-A32_46.docdoc d8b887010e509e7b6e5477440d5f5859b4c343952757f076bdaa85a1a6465600Virustotal results 34.48% Heodo
2019-12-12Invoice WO16_387.docdoc f7ee2341285285841351035f263ee5f0b3ab1be0413b0df32b87c9fdca72032bVirustotal results 30.00% Heodo
2019-12-12INVOICE EX234_12.docdoc 5df1f1341851c837a5892bd964c406fe101dd9154c3b5c1df36eb95372c604e0Virustotal results 30.51% Heodo
2019-12-12Invoice AA380_786.docdoc 75003df212f89b0f10be093eece98e9fdd6e3ce4f11afe7396af3de2e5fbee37Virustotal results 31.15% 
2019-12-12Invoice_TK87_53.docdoc d6e0496d37de0054595389d2bc4986a02cd1443b505817c757116887a7cf10f9n/a 
2019-12-12INVOICE-YLB195_5829.docdoc 94510d6c56c6fa6cbe0d4b8db07087b3a841aae400176f97d419ad2bd3bcb85an/a 
2019-12-12Invoice-B507_25.docdoc c765ecf47cc4ba7c01f89d2a7349570cd9ffe689498c807227fadcc78f291da2Virustotal results 40.98% Heodo
2019-12-12Inv AM20_08.docdoc e141fe235a6ac39020328ea8f14b7f85b7eb029bec13b65622667f0c14a8ea22Virustotal results 40.98% Heodo
2019-12-12INVOICE-TCF588_6564.docdoc d4456652e6a13350efc90f3beced14fa0fabdfdfb9f46107f5feb0713af37d56Virustotal results 40.98% 
2019-12-11Invoice-TC24_72.docdoc b953d50e8d18011facc42df2834d1063d6b1e7c299b25ca5889361c75fe5d65aVirustotal results 40.68% 
2019-12-11Inv-C434_82.docdoc 49a0b0f5f6cd2b27aa13f64654d6a07edca351b13aab5fccb0e10cbcfafdfb7cVirustotal results 36.21% 
2019-12-11invoice UOY89_718.docdoc 8c25fd2e375277bab0347da08d43382feafb299c2aa23d8dd9e6696a1fb97974Virustotal results 36.07% 
2019-12-11Invoice_ULT984_8819.docdoc ca69295f8e6ad8320cf5570698d81e892554fc621cb18bac3e837b9323314bdfVirustotal results 40.98% Heodo
2019-12-11invoice FZJ656_5110.docdoc 0e999185cf311f579d0064771e259d82a009eeb42dcb55597662a6aad7edb0ean/a 
2019-12-11invoice ZUA595_500.docdoc 1921b22728517cbad3fed6c147b88f13f808ca146fd6e880312cde2285e5eb87Virustotal results 40.98% Heodo
2019-12-11Invoice_F65_28.docdoc fd39f0c4feca6bbc2bc72df5b1abf1266ea1a7bfd76caa5d1803e00096c19018n/a Heodo
2019-12-11Invoice_Z261_191.docdoc e1f315e16cea5360492223af2d3b47da3f3b3d250882552371d5578b0f319ba0Virustotal results 29.03% Heodo
2019-12-11invoice-MZP82_8693.docdoc 228881e86fd02f1df936abd4e534d0fe625f5f923bf39fa8625846e8ac6b9172Virustotal results 28.33% 
2019-12-11invoice JVH348_12.docdoc ed4a6f0b261f09d7b89c7adf9623e1c541ccddf5baf40ad35681f1e8e6c06dc4n/a 
2019-12-11invoice G68_76342.docdoc 7acb9dfcbeee0357d301da9535e185ed81352ca4f2c11a57d9797a13fbae0ccdn/a Heodo
2019-12-11Invoice-E41_72.docdoc 4ee0bf78e3b0a06c35fed0f912db6fabbb5fae13f838cd4132634359ad0d24daVirustotal results 39.34% 
2019-12-11Invoice_YZT441_95.docdoc c675be3129f8864f43771ccd0ff8220bda704d1205b6a5bd2e3169ad859baeb3Virustotal results 37.93% 
2019-12-11Invoice-VX879_7537.docdoc a60c7102286fc773ec8ada02318ac04bc6b9e5c4d835d4465fee783df6afe81bn/a Heodo
2019-12-11Invoice_A054_693.docdoc e418066e29b56b817f639c08108a7e87860ba30e896203a7cf96a68a512c64c0n/a Heodo
2019-12-10invoice_RIG995_7238.docdoc 7fbcdf5958cff8bfbda3d459229fd565adb74202c9105e1bfa21517c68b049f6n/a Heodo
2019-12-10Invoice VR71_4009.docdoc 0e15794f313c68b7518f35be7d4ed76525e886234dce8a949b1e8388d4ed08d4n/a