🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for http://host03.wnetwork.com.my/cgi-bin/XZga/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:266646
URL: http://host03.wnetwork.com.my/cgi-bin/XZga/
URL Status:Offline
Host: host03.wnetwork.com.my
Date added:2019-12-11 02:56:26 UTC
Last online:2019-12-20 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-12-11 02:58:12 UTC to admin{at}icore[dot]com[dot]my)
Takedown time:9 days, 6 hours, 30 minutes Bad (down since 2019-12-20 09:29:05 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-12INVOICE JOV456_1661.docdoc c765ecf47cc4ba7c01f89d2a7349570cd9ffe689498c807227fadcc78f291da2Virustotal results 40.98% Heodo
2019-12-12invoice-IE704_632.docdoc 38a5382700f37efbdb1c8fc06a5ba21a2a27266186ef5653ef1842812da182eeVirustotal results 39.34% Heodo
2019-12-12INVOICE-XKA67_21.docdoc d4456652e6a13350efc90f3beced14fa0fabdfdfb9f46107f5feb0713af37d56Virustotal results 40.98% 
2019-12-11Inv H91_85899.docdoc eccd29d2064d11af26b58ed3ae7824a0ddb2c2ab4c86c3ab1f030dd94cabbdc4Virustotal results 40.00% 
2019-12-11Inv-EJR42_65.docdoc 303ed3cd82e47b8679359290246fd48a529ec0be567451fb84e5119f5cd07545Virustotal results 47.46% 
2019-12-11Invoice-G602_252.docdoc d9b513c8517f073760bdb577d2e9051c91c709852d48961117d5dffe7976ca36Virustotal results 45.90% Heodo
2019-12-11invoice D57_617.docdoc 0e52f40038dae37d4956da6613d5bf033d783830ebc74620510b1613bf223372Virustotal results 40.98% 
2019-12-11invoice-UW45_8252.docdoc fd19a4fca8e4b745cd9ff1d4d71151792218569c027632793dc9bab396294b09Virustotal results 40.98% 
2019-12-11Invoice RJ47_26293.docdoc acaca87404d323e919e910f2ad0c6ca398a0cd789ffc327973d8fef90b238ca3Virustotal results 36.07% 
2019-12-11INVOICE-RZT959_183.docdoc e1f315e16cea5360492223af2d3b47da3f3b3d250882552371d5578b0f319ba0Virustotal results 29.03% Heodo
2019-12-11INVOICE-DJ205_59324.docdoc 2a8d8c4c86e6d82c8187fdf077104b60a1323ff613941108fdf616d7155ff721Virustotal results 29.51% Heodo
2019-12-11invoice-NSH670_57683.docdoc bc3d5a793002c6d23c5e6166c7b8d8084f9f335793a4230c0ab459808f276ed0Virustotal results 28.33% 
2019-12-11invoice_GL16_76863.docdoc 9483705e55d6da05244fdc7d18120f246c8021f0c62ca7a9a83285ed7a7adebdVirustotal results 29.31% 
2019-12-11Inv_K810_80966.docdoc 4ee0bf78e3b0a06c35fed0f912db6fabbb5fae13f838cd4132634359ad0d24daVirustotal results 39.34% 
2019-12-10Invoice-T124_87816.docdoc 91167bef3bc48293d11a8ea55c9d6d8cefbc1771266b70175ad77d3673e88774Virustotal results 27.12% Heodo