🤲🏼 NEW | abuse.ch Community Hub! Earn recognition 🏅 for the malware intelligence you share, climb the leaderboards 📈, and connect with like-minded contributors who share your hunting focus 🤝. Ready to unlock your profile? Go to the Community Hub →

URLhaus Database

You are currently viewing the URLhaus database entry for https://cece.edu.vn/backup/5y43gl-ld-4387/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



ID:267396
URL: https://cece.edu.vn/backup/5y43gl-ld-4387/
URL Status:Offline
Host: cece.edu.vn
Date added:2019-12-12 03:21:09 UTC
Last online:2020-03-06 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-12-12 03:22:03 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:2 months, 25 days, 8 hours, 2 minutes Bad (down since 2020-03-06 11:24:11 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-03-06n/aunknown 3691395e30c6664317f32920ee8c37592b7c6b8bd812bbafac24cd6c4af9f11cn/a 
2019-12-13Bonus Payment FNO81910.docdoc 84dde0d05510d3f29750985972d97fb6a4ee5bb5168dee6ee5fe4081e4b1e347Virustotal results 34.48% Heodo
2019-12-13Bonus Payment YN101998851.docdoc 0ea2d08799a6cce3f7c1d94ffb1657ea77c93da5a55dfe8c34a6c6e43082cd3cn/a Heodo
2019-12-13Pay PNO9730.docdoc 16a152d62c22e97695d546db457c563ee707a1720e2484aefca89c4ea444f756Virustotal results 34.43% 
2019-12-12Bonus Payment Notification SFF009462500.docdoc 4e6ecdecd5d7cefb2a5ae9eb200dd55c82bdf5f1a34628177e18ed12ce96cbe6n/a Heodo
2019-12-12Notify OB107799.docdoc b11c0efd45884d745e5ab432d564083219ec67f55f7b21c4ecad715203a9e389n/a 
2019-12-12Pay 14858902.docdoc 4ab7db337b3b597fdda75aed736f5d3256721c22f9c6b3a12fb0237b7b725e8dn/a 
2019-12-12Bonus S361309.docdoc 942a7a7c1077f67e7fd868d64dcd3033574ee89d95845eaa83d3a40385f21874Virustotal results 33.90% 
2019-12-12Bonus Payment 214322305.docdoc f59f977d3187101bfbfe78bc48663ed97e0764674f803e9ad5af7607661ac4e5Virustotal results 33.33% Heodo
2019-12-12Bonus Payment Notification W31485655.docdoc d81a284ae7d3b942ef02659ca2f90b8017e30730fdf79ba7408704b1d07e6546Virustotal results 39.34% Heodo
2019-12-12Bonus Payment Notification IS2402035.docdoc e259563ba766ac0a56c0e402fe412085aa398f721620a04335a9b8f41225fb85n/a Heodo
2019-12-12Bonus Payment Notification RJM427.docdoc c065308bae2e29a077afed2d64f29ea013ac3697b251f1a9e0cc4b8072234f71n/a 
2019-12-12Notify H865532298.docdoc 5df1f1341851c837a5892bd964c406fe101dd9154c3b5c1df36eb95372c604e0Virustotal results 30.51% Heodo
2019-12-12Bonus Payment Notification SVQ34473.docdoc 8ec626cb5d05c16b41312eb6967a5b541891ecbd185bd088415fff9689af2973n/a 
2019-12-12Bonus Payment Notification PK028832974.docdoc b235bf9aeaa3cd3418f2f1f3769f99b65e465915cd872b5860d833e456668c8cn/a 
2019-12-12Bonus Payment Notification H03170.docdoc 94510d6c56c6fa6cbe0d4b8db07087b3a841aae400176f97d419ad2bd3bcb85an/a 
2019-12-12Pay Payment OE03010892.docdoc c765ecf47cc4ba7c01f89d2a7349570cd9ffe689498c807227fadcc78f291da2Virustotal results 40.98% Heodo