URLhaus Database

You are currently viewing the URLhaus database entry for https://shagua.name/xjj/b70t5w1-73-7040/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:293217
URL: https://shagua.name/xjj/b70t5w1-73-7040/
URL Status:Offline
Host: shagua.name
Date added:2020-01-21 05:01:16 UTC
Last online:2020-04-18 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-21 05:02:03 UTC to ipas{at}cnnic[dot]cn)
Takedown time:2 months, 28 days, 0 hours, 26 minutes Bad (down since 2020-04-18 05:28:14 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-24invoice_NCTD3015_54198527.docdoc d4a5dec72600091f43cc79f5efc5b76ed09571f1a906a6fe4400b3ff08341638Virustotal results 25.40%Heodo
2020-01-24Invoice 04_3144275.docdoc d830dd74d73625f82a36da760445920cea41b3321cba4769dd421d38e5c8b366Virustotal results 26.98% Heodo
2020-01-24Invoice-Q982_26138120.docdoc 21ed646e9c73d65b5355a50adb7b3a7b2f6d76b45d4248e2ad2480fd784ee8b5Virustotal results 25.40% Heodo
2020-01-24invoice_7_04377621.docdoc e6227f508ea8149469cf318e6939e1fd1d8b32b728997677e8220d7c4b827ac3Virustotal results 25.40% Heodo
2020-01-24Invoice-046_249808245.docdoc f650d229a5a7baea3cf86104f874121c82bb34994d2be1d3344cf45769387accVirustotal results 25.81% Heodo
2020-01-24Invoice-LC5275_9828741.docdoc 7c181b5800d9b531de9f431cbd6947e93f55ac0e5f6fcad200acf2466f411a8cVirustotal results 49.18% Heodo
2020-01-24invoice_F46_5308263.docdoc 3019c5713b1eae96e9080ac03f4c948abb9012ec8937fd082bf6f26c9aabbd98Virustotal results 46.77% Heodo
2020-01-24Inv_66_2481119.docdoc 0ca26646d4e6d640b628e402fcbf0dc050634baaf8b6468051b29dd30a1cc140Virustotal results 46.77% Heodo
2020-01-24Invoice-NY7_58395585.docdoc 34691ccf852ea3e1fc484a1b5e18dab1768f593de138bd42ccb9d6e36e58c87bVirustotal results 45.31% Heodo
2020-01-23Inv_TJB8733_861474091.docdoc 4d65aa1d4d4356e59a68839a7e437a4e3d207e6bf481c90baf4ba6de5b9d0ed4Virustotal results 34.92% Heodo
2020-01-23Inv HXSS5676_929689.docdoc 4d903e16f764960f758403ee88c04d33109f7148020565ab567b66dc178d2c91Virustotal results 30.65% Heodo
2020-01-23Invoice XFO68_0858666.docdoc 69896fb1907aeb3711bc79924a6aa0f9d636605647439f36e14ad1e7c1afa917Virustotal results 31.75% Heodo
2020-01-23Inv-41_7158648.docdoc af8976ac691aa40327d9844ef283ec4de84fd38c56d57218befd747516e4e92eVirustotal results 32.79% 
2020-01-23Invoice YCQV57_888437.docdoc 12958a0020162751f99e336844423a03e94d65328cc2bb55a570293e54d2a0c3Virustotal results 32.26% 
2020-01-23Invoice_JQY2653_915484644.docdoc 5b2ac8270a6ffbca8b132910368dd5e11cf151c394bc3f707a80be90f2bdd210Virustotal results 31.25% Heodo
2020-01-23Inv-6302_600899467.docdoc f5809fa786d473f788c4252040f5ae73923dd6bf37af5c9b91282e44bc1905cdVirustotal results 31.75% Heodo
2020-01-23Inv DXPA5_81679362.docdoc e41c558156d999fcb01df97b67cc0df4652e2799d05f12f7bf987d9d54e668acVirustotal results 29.69% Heodo
2020-01-23INVOICE BJK2174_11804806.docdoc 9bbfe0b457184f41255832ce9e3b15e25fe0bdb51a9ecf942163063c7f38acc3Virustotal results 25.81% Heodo
2020-01-23Invoice-2_22558928.docdoc f8a99bfbf6c324f6f76f07ae81630edabaf926a75bc2bc290abeb01d910b9a67Virustotal results 27.42% Heodo
2020-01-23Inv BWAN2007_1276994.docdoc 4efe99e760c862d17d3128bc8c9bfe85a4512b981ac9944bd6f3c38d0d02651bVirustotal results 28.57% Heodo
2020-01-23Inv-C6_359066.docdoc 6e51e0155d05dcff84597c83d9f3ecbbbc59c0d1763e7b147cc5592e3cbbd704Virustotal results 31.75% 
2020-01-23Inv-970_7768639.docdoc f7fd1bc385e801ea09e47dffb635b82ff487f4b83f694447946569117c848462Virustotal results 26.56% Heodo
2020-01-23INVOICE 48_640851.docdoc bcd78fb2ae376c31ea21a7d1b7d110e4dd0a49c9a8261bc5f68816e4d1091bbbVirustotal results 22.22% Heodo
2020-01-23Inv-BBYU6_565676.docdoc bdb5f000963cc046a5794deb863fd7698b3420f5ae8d41d6b09a2f13df7b3f47Virustotal results 22.22% Heodo
2020-01-23Inv-PWET5686_811201.docdoc ede0274ada2624e552749f7852dc316f0d689fa6669b78853a60f65e99d1aa93Virustotal results 23.73% Heodo
2020-01-23invoice_T606_568988879.docdoc 0f8e10bbdc8728918591e85cccb046c2773c40bac92da35c9474905528e4f22eVirustotal results 20.97% Heodo
2020-01-23INVOICE-6539_534460.docdoc b4f3c614764ab55febfefc958d4fb70920c4c17380c6d2adf4f77d68878598daVirustotal results 33.33% Heodo
2020-01-23Invoice 7854_722771184.docdoc dd4f81cce9127017ba4585b5525e4f20c75f06fb1035e5f0d8d807260ac8019dVirustotal results 31.25% Heodo
2020-01-23Inv SCBV6574_383017.docdoc a6caf4ef566d28695b60b4316c66a9354a608127c38c5725d8bcde83f06c1ac3Virustotal results 28.12% Heodo
2020-01-23Invoice_PANB1_253449816.docdoc 48158e6a152e84a80d00ec820249636ae00b966099d2ef9ab8c768197efe2da4Virustotal results 28.57% Heodo
2020-01-23Inv RJRQ9_4540949.docdoc 8fce0c3f5b2c7f7961769c009486ee767f9463bf3f80aee244f964717b5f0fc0Virustotal results 34.38% Heodo
2020-01-23invoice-MAT305_911085221.docdoc 733d8bcdb433038a0ba20539f6bd045154a7af77796aa2c6ea411c2da696c319Virustotal results 32.26% Heodo
2020-01-23Inv-P9818_50029984.docdoc 1c244d818f2d1e8b44a21b46b36aa29b2a6de9b37ce8463210ced5c7219801faVirustotal results 34.92% Heodo
2020-01-22invoice-SZYQ95_11275222.docdoc 975aaa0512dbb84a3bab02f13d499e897d4594c9c465f978431021ef836b7dcfVirustotal results 33.33% 
2020-01-22INVOICE X5_18739499.docdoc e82adc98fcfdb46771178d4b4aa4d672a9cb7e6250ca4d87db04c9190ab00d23Virustotal results 28.12% Heodo
2020-01-22Invoice-26_98813025.docdoc f3d0f1bfe76e8a822d17bd917aed62d45fa8202d1906566abf7eee43e2881994Virustotal results 27.42% Heodo
2020-01-22Inv-FY91_040597655.docdoc 6e22ec241347511c50792b6a52423ba4c27dd6cc1a0598bb85f0606d65c6e69cVirustotal results 28.12% Heodo
2020-01-22Invoice-LM54_42681753.docdoc b0f9b35af82ec49cfd0211971bfe8a148000d70a806f104e739600df1fb743c9Virustotal results 32.81% Heodo
2020-01-22Inv-RQP968_912270.docdoc 3c883920142d8e22088985f3f3594665bd83571bfb755aa1aa5b7354fa7912bfVirustotal results 29.03% Heodo
2020-01-22invoice UR687_1377018.docdoc 424176c5eb3fe9eb958ac0e0b9ed8a3fc23ae3b56334f12d4e47f5cedadd49e1Virustotal results 26.98% Heodo
2020-01-22invoice-J03_128790526.docdoc 65cba6a906f2a7520df807c03184497be908c91ecb85d00b1caeea1513a948cfVirustotal results 28.57% Heodo
2020-01-22invoice ZRTA0_42988193.docdoc 8c7789d0789c1577504a4fe78fcd941bf7213492ee0ac852e59a69e5f3365f2dVirustotal results 27.42% Heodo
2020-01-22Inv-HSRI9_756686081.docdoc f9560dc519e813ec3b39ea3d9dd1d863c2187d14f983d291c801452aa7c43db1Virustotal results 30.65% Heodo
2020-01-22Inv-ZL2_839673.docdoc a92d0f72b0064095dfb9f3c33107f9d2968dacb8267450d79a0e0d265fe23941Virustotal results 30.65% Heodo
2020-01-22Invoice_DAWJ548_995488.docdoc ba04b0a3fbcaa93c4c4d55e8686205b50d5467373fe6cf3961c41a6d9b5e2d85Virustotal results 29.03% Heodo
2020-01-22Invoice-G1_785380.docdoc 1bcbdde37aa474f7da9b6aa87a35050a574fde322383a5326ad3a2de336659a5Virustotal results 27.42% 
2020-01-22Invoice-X419_183985386.docdoc a43dc802a0108342f8a4a1b4573770b5cbc35fca8be069827599a7708e2c16cbVirustotal results 26.23% Heodo
2020-01-22Inv-800_074506785.docdoc b8dc39865a8f62c7bf39e72618b2af23db145e846781bc87a730626873da893eVirustotal results 26.23% Heodo
2020-01-22INVOICE-LABV1292_35047828.docdoc e3c19433848a0b0023963e05496e09744003119af344985daad6a614cebfb1b4Virustotal results 21.31% 
2020-01-21Invoice F4_4330643.docdoc 1d0edf1be46e8567cdbcc608cb4556c0fd8af4a1f011a3a249c6d00e6e5ce8b1Virustotal results 21.31% Heodo
2020-01-21Invoice CJ92_96540888.docdoc 367ba91cb54e7938d84bb39986cbc499e92acaa19f78b6345d13b3fbd1d903c0Virustotal results 22.95% 
2020-01-21Invoice-Z95_253052898.docdoc 515e0e1a9e7994eab3ad00067f1549639c284e0225db703ce58dae8d605f075cVirustotal results 21.31% 
2020-01-21Inv-WLTJ719_822702.docdoc b621e523b5227cab9e3cd066e8f964a362dad10a6d9c9ab95d099ea56f7f38d2Virustotal results 22.95% Heodo
2020-01-21Inv-659_2312881.docdoc 34a4bac47f42d2775ebc0c1f274f4fdf207acbf79d681c4da5a612c5f2987599n/a Heodo
2020-01-21INVOICE MA84_182225.docdoc 911c7302bba8ebf022f7b06d72b4ad2d70a53021ad08349b0b974a61177cd886n/a Heodo
2020-01-21invoice-2151_006159.docdoc 7c138128d8dcfcef1f383d815bb70b4c4e33f6a88ca5996fff2f67bde4f4b26fVirustotal results 22.95% Heodo
2020-01-21INVOICE-X9_547219.docdoc 0cf22f290aeb6815de1ee2241737b02a8db7d6ec26923eea8b8524aa5c24b773Virustotal results 21.67% Heodo
2020-01-21invoice-ZGBT2_6138190.docdoc eae3cc75b9ce6714e5f28a84420c6e056398fc408b33a8109fff731d4d37d895Virustotal results 21.67% Heodo
2020-01-21INVOICE-GTD1_160469.docdoc 3d54a3649da061513fa3169fbc132afe22f3c0534d8eb483c38a9abf1f4bae66Virustotal results 23.73% Heodo
2020-01-21invoice_G47_916167.docdoc 82bf92f8f30ec4f7813dce2e62d60dbcfbd53b5e53e5ded8307d4898e41ab0a6Virustotal results 25.42% Heodo
2020-01-21Inv-QFL0_034277699.docdoc 5e4d7fe7b015da8212c2430900e6a4cd61d246c9785f6e85f5acc72d04432cc4Virustotal results 25.00% Heodo
2020-01-21INVOICE-EA98_408936.docdoc e09637eddfc2bfc14bc5b1c30b82abf32499e5dc406882a5a825ecb223492e86Virustotal results 28.33% 
2020-01-21Inv_TOCE1691_9582674.docdoc 8adf131ed321d6d3aab85250d292da1d638dd76087af7f59025f93ac6e795697Virustotal results 25.81% 
2020-01-21invoice_I285_311662863.docdoc 72b5f5d539c7024db2283653690d00e74b38049afc4a620b85e63aeca3729e42Virustotal results 25.81% Heodo
2020-01-21Inv-IWAM30_77868717.docdoc c9b288f025cd8dd448fc3b9a7315b5f54fd97d274d7c3716334e92b10c22bad9Virustotal results 39.34%