URLhaus Database

You are currently viewing the URLhaus database entry for http://mysql.flypig.group/index-hold/protected-zone/x1svkrk4b21do-0waju4re6n9zey6-profile/kancjqdxfp3ak-z03yx5y016/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:294893
URL: http://mysql.flypig.group/index-hold/protected-zone/x1svkrk4b21do-0waju4re6n9zey6-profile/kancjqdxfp3ak-z03yx5y016/
URL Status:Offline
Host: mysql.flypig.group
Date added:2020-01-22 14:15:10 UTC
Last online:2020-02-10 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-22 14:16:06 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:18 days, 20 hours, 12 minutes Bad (down since 2020-02-10 10:28:27 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-24doc 20200124 98592.docdoc 849967a28df9b7a79d4aecbea261cd9fc610ad12a3eead53b053ec760ca28bafVirustotal results 26.56% Heodo
2020-01-24Dat_3728467.docdoc ccbaf6c64e1e4d35b0cccdb8862b2d71a72992ff0b7473e60de6c51fe58b8220Virustotal results 27.87% Heodo
2020-01-24rep-2020_01_24-478.docdoc 8dfda883de58e06c92b64245474e42e52ada0a0dd10cb9218595fb09bee88463Virustotal results 28.12% 
2020-01-24dat-3576.docdoc ce660d7f4d173999ba421ad499211d7a5860bb5917791a8f626e84b49b216746Virustotal results 28.12% Heodo
2020-01-24dat-2020_01_24-725.docdoc 0b200863b12632ebfe7016933294a07e8a21e8fa929ca760de5b41825aee5355Virustotal results 25.81% Heodo
2020-01-24file_AKJ78147.docdoc 1aa202d1363b788dc25fcea092fc4820de4afbb1bbedac8a6d9dc56442b966ccVirustotal results 26.98% Heodo
2020-01-24inf 010.docdoc eca46e2754dfc66489b85a2f044fc2bbc1b1b33b0cb9ebc3af851ff42301d6fbVirustotal results 26.23% Heodo
2020-01-24ARC 2020_01_24 T621047.docdoc 24ed47c016ae3044057de9f65965ca39dcd0cb0d66b96e27ea2bd5ddf2d06274Virustotal results 44.44% Heodo
2020-01-24INF-714.docdoc f8e5a48fa21ab15f165fa212c584068c9c275fab547b3b65f04d40ccc151ca19Virustotal results 45.16% Heodo
2020-01-24MES 20200124.docdoc 533a5a288de7b3b037b3d849a6ba1d95b8b6996d84361f9d6a32a81a1b7172c3Virustotal results 44.44% Heodo
2020-01-24MES.docdoc a5949311c983e124ba9f32963d4edcfec18258c0993ae8f423472645c91d8314Virustotal results 42.86% Heodo
2020-01-24File_2020_01_24_4298.docdoc a90dc69a3f8828308c20d7fff0689e701d423ee90a56fb09fb39b8706545af82Virustotal results 42.86% Heodo
2020-01-24DAT-2020_01_24-2182935.docdoc beda0838615f06cbeb4c2cd683091ff68eccfb4ac59dfe175ed6f3aa8c878972Virustotal results 40.32% Heodo
2020-01-23INF EHU9650.docdoc bfc951f4f36bc84bb0cf1a7cbb4d6f26b7b9edc1796f0d86fe01778f841cf09aVirustotal results 37.10% Heodo
2020-01-23ARC 20200124 PH332912.docdoc 7abb3e4c83b02572677e4ec2c0fb9b815830bea5eeaa515a50fb999016abd7cbVirustotal results 38.71% 
2020-01-23Dat 20200123.docdoc d56f4f0cecb59ec47429cd8694ff131971eb83b2e0510b7d6440aa23d2e6b54fVirustotal results 30.16% 
2020-01-23LIST 94496.docdoc 355ce44f2f2d7267f65b0be74c54cefdd0faec75bde956b72ddaf94a9795a2b2Virustotal results 32.26% Heodo
2020-01-23Dat 2020_01_23 744404.docdoc f72e74ea61f7b7a18e525ffa6453d67872f898f2be8def76d3ec300684b9be38Virustotal results 33.33% Heodo
2020-01-23REP J827349.docdoc 544b49bce1aeac4879cdcd5526cab45257ada596d9a32b3cbd254b7cb5bab381Virustotal results 29.03% Heodo
2020-01-23INF 60744.docdoc 70084c2ceb78bd84337fbbfdb4765d5cfcf58a003b9d39b07c4e1ca9e7e1291dVirustotal results 30.16% 
2020-01-23LIST UX3472.docdoc 753ba292a9101cd2fa0073bac05ec613232a1c200379ee46c1b8bb58a51f4c07Virustotal results 29.03% 
2020-01-23Doc-20200123-946.docdoc 7c6b31364028d77f2db085615af43fd3b6b991f4bb3f16e271c313d1380310a7Virustotal results 25.81% Heodo
2020-01-23Doc 2020_01_23 A18105.docdoc e5afc379b50bce74cf1a04bf9c3c7076606bccf43f6fd011c95beb8859b95245Virustotal results 25.81% Heodo
2020-01-23File-2293501.docdoc 9dc63628bbba4305f4e20d32f24bf0416a92edafee60d293788bdc8e81c0455bVirustotal results 28.57% Heodo
2020-01-23mes_20200123_VWX45854.docdoc 1b2a8fa233d738505dc4538a43ab60d5f61cc7e52dbb8d6314510cb80a96e044Virustotal results 28.57% Heodo
2020-01-23MES-LA309.docdoc 820fede14a0ca102f9f247fec80cd81e334cdc30059660a61e097d03eae74f33Virustotal results 26.98% Heodo
2020-01-23file_20200123_RVD32869.docdoc aaade832c86b767e64ac370ec468133b1b0f777316fc22d37a85c2254ad1d752Virustotal results 20.63% Heodo
2020-01-23Arc-20200123-440602.docdoc 1bf65ffffcdb4a5b95632a0f9284431d8f8e4bb85d791e9a3a1c170a14ab4c55n/a Heodo
2020-01-23Arc_20200123_90927.docdoc 0602a260f7babf69b17ea0c106902e0aa1210f18240011382c3d1b89cbf2a78fn/a 
2020-01-23LIST-2020_01_23-KQ15544.docdoc cb8f7b473f1c200a59f57ff19de1171c4931c3264b691ac05aa63c3d33f37fb6Virustotal results 21.88% Heodo
2020-01-23INF_20200123_WSR806846.docdoc ff382a168f3ab1259e35d9f04c088d783cfb700db20955dce5f7307bbdef516fVirustotal results 33.33% Heodo
2020-01-23doc-20200123.docdoc 391cdfda17669f8646d016ccbed5a280386e0ee0d329337ceea01aec817a30edVirustotal results 33.33% 
2020-01-23ARC_2020_01_23.docdoc a5b40116b0e7fcee6fbf05e3425ae17e7812e5a1bfa387e8588f0002fff8911eVirustotal results 35.48% Heodo
2020-01-23LIST_20200123_QF341.docdoc 35e9ccfe2fb736ab494d113297f3c7069e131c28b9996efe0623d6f6fa2e2644Virustotal results 34.38% Heodo
2020-01-23Arc.docdoc 60577cf4f41ddd64eb84e77684f9c15171a6b4e10dcd6d47ef15864dee6e2211Virustotal results 29.69% Heodo
2020-01-23Inf 20200123 1357945.docdoc 184e990a522473877e090d94d604888ffc86d75830faaa9858c5131b8e03adaaVirustotal results 31.75% Heodo
2020-01-22list-EFQ210101.docdoc 4f75ef9736ddc508f70ea5da489948d950de61b352fe2497e3c5c87e322597e6Virustotal results 29.69% Heodo
2020-01-22dat_515.docdoc 054097464a18a552af3b8b22367aba7e730d8e4d65de944f8a3414fcef815337Virustotal results 29.69% Heodo
2020-01-22LIST.docdoc 94e08c0bae9bdef279f8e2b9c6b4f5315c766e6d9dd73b9fd4879ddd3520bcadn/a Heodo
2020-01-22Doc-2020_01_22-INR417.docdoc 346b0ba9684b9fdc8dde08af0ab486c86cbea5347a32be77aaafb0dc9034f2e2Virustotal results 28.57% Heodo
2020-01-22doc-6884.docdoc 09c16304c3e1aec3c34700ba9ccc3b60a96824e6f17b99ada9f1ddfc84e20d06Virustotal results 28.12% Heodo
2020-01-22List 20200122 59911.docdoc 6eb3a1de5779c87ba943671cbe8f29213ae390f189e8bd35f9520393e1edf6den/a Heodo
2020-01-22bl 1179844.docdoc 15a0d8db0be33d9ad3472545eb007ef434d43a1b726faf8fa0513f5f55b70218Virustotal results 28.57% Heodo
2020-01-22arc-2020_01_22-R4040.docdoc 2ad3eac84cebb1c035141e43e0b9a5cf7ef8defb6dc62580737446cc39f9f7f7Virustotal results 30.65% Heodo
2020-01-22rep-20200122-UK488.docdoc 50b49f1b413ac9a2b9ee2c9facd4bc8e33d123887e8ca509cb11c377104e4874n/a Heodo