URLhaus Database

You are currently viewing the URLhaus database entry for http://hazel-azure.co.th/application/FILE/m489ry-5864784-288066-1kn1qxe960-xiphc42vd/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:295204
URL: http://hazel-azure.co.th/application/FILE/m489ry-5864784-288066-1kn1qxe960-xiphc42vd/
URL Status:Offline
Host: hazel-azure.co.th
Date added:2020-01-22 21:08:07 UTC
Last online:2020-07-19 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-22 21:10:04 UTC to op-network{at}inet[dot]co[dot]th)
Takedown time:5 months, 28 days, 19 hours, 51 minutes Bad (down since 2020-07-19 17:01:31 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-01PAY_47581805915.docdoc d30a2b94d82ed0a368924a5867af661010d1aaa494110e62b2b835f5df3a9d6fn/a 
2020-01-24PAY_47581805915.docdoc b98a210cb0682233e9b26bf11137456f9c93b2ed49bd15a903a88171fe754f87Virustotal results 32.79%Heodo
2020-01-24P_PO_01242020EX.docdoc 804b6df952f9749264baf768162a3a3b1f16fd36d9e2124de99f6002d9a1ab14Virustotal results 30.16% Heodo
2020-01-24DOC_92348134.docdoc 449eec3362b0e15a7cd00d2853d95be962bbb0a5f1b285f96164f4515275c18bVirustotal results 31.75% Heodo
2020-01-2483493596.docdoc 8388df2859989323c4471518332173373dbd4ef4d8d051f781b74ad808230e2fVirustotal results 26.98% Heodo
2020-01-24BAL_83330002.docdoc b8a0145d14a3b8c4baa3bc3a66dd1c9532f6612b46e0fb12f9efd906bc5d219bVirustotal results 27.42% 
2020-01-24YW3658647469VZ.docdoc 6f5b6ce04708712cdb5319ec58f2ebc8ea192e9b229cb5a574ccca831f89f679Virustotal results 26.98%Heodo
2020-01-24PAY_69076472.docdoc b49c454243db3c873a4b5137c4370a6f8fc036d1b179c5d9a79fa813ce3fd163Virustotal results 26.56% Heodo
2020-01-24OK_PO_01242020EX.docdoc e848ede38876ef2dedf485fe2818f53dcfc4a4cdd21062ce8ff7a53d2f8e32b1Virustotal results 26.56% Heodo
2020-01-24INV_IRI_010120_WHU_012420.docdoc 789f39cce8f34ef92a1114d703e66a8894c7d3025572c148161fa467d1b6fe81Virustotal results 26.98% Heodo
2020-01-24MG_70281756.docdoc 6b70256ec87f79fca124f33a26e5f745547c178cdb9ddd66e63f073948449bb7Virustotal results 26.67% Heodo
2020-01-24ST_5627232929465907778.docdoc a73762a4fcac6839eb5266cc79c7363b551e6bd22d63e2ca84f916607b32f0f9Virustotal results 25.81% Heodo
2020-01-24ST_PO_01242020EX.docdoc 1e1233341f3cabaec36e9a7aedf295488edea6d4cb7f27423040c37bd4d22905Virustotal results 25.00% 
2020-01-24PO1263147599SU.docdoc c0a18fef0ae13f0382cc567ef09d500b74ac60a29ba17ae3461f72bff8bdf688Virustotal results 26.56% Heodo
2020-01-24PW4153718454LU.docdoc bc8bc48482786ef3eaf2ec81adf2abd9ce68aa9f1776d2dff6990e4631d62d10Virustotal results 45.31% Heodo
2020-01-24INV_08E5HI220DXXX8P.docdoc c2699b0fd5e8f71ff977b80a65502ea4164c68e120b7d7fb948a25187ec88a11Virustotal results 47.62% Heodo
2020-01-24REP_72866753.docdoc 2c4b0f8d4c1eaa6adbac77b21a05ff32242cab116fc252c21c67fc0ab51ba110Virustotal results 46.77% Heodo
2020-01-24SW_KDBWUJR7QW.docdoc 73da5cdf0f98ea4dbedb8219ddd051b4d7a04c9750fc4b1d6f9c8e4f9e218c53n/a Heodo
2020-01-24RP_4199157784931998.docdoc 2caa93025cda12c41ce7d3ac89a2e81c7db0a40a6571fb3cb406c98e2ec71097Virustotal results 44.44% 
2020-01-24DOC_536689018134.docdoc ddf866c230e59d9ca832eab360303767357ba3355a1cdc0509e069fa3234898aVirustotal results 41.94% Heodo
2020-01-23RP_236086878288596742.docdoc 5be57dfc1ec466f1be92f7b12e5623520bdd185a7ea6f50d60890f7df9cd67f9Virustotal results 38.10% Heodo
2020-01-23BATIH5RN.docdoc 826405ab23ee390f30113412530dd8fa36957b7fd600826efea19868f3f20b3dVirustotal results 38.71% 
2020-01-23ST_09315914.docdoc 6cdaa453da5fc4e716f93cc0b78b6732e2b1b3cfcb95013d1ccc14a7fc0b8697Virustotal results 33.87% Heodo
2020-01-23BAL_PO_01232020EX.docdoc a48692ac69029e43c34f02d17df8103b91037aabd7db83fd7ac40cf461ebe95aVirustotal results 31.75% Heodo
2020-01-23REP_1220643664935122187338.docdoc be6c0143e369040588ac032db356bb21b70bda2cd730cee53440f1a52186b25fVirustotal results 30.65% Heodo
2020-01-23PAY_29008904.docdoc 70b896a95932fba098f1e50ae4c7f8796bd1636fe7f75ebcd5b690c986ab0c00n/a Heodo
2020-01-23PO_01232020EX.docdoc c82a367077df5a08b1c5607128e658095404e2fe76bd7a0c4c17b8d74bdba0c3Virustotal results 29.03% 
2020-01-23F6UZJLBOT.docdoc e1380fa81c9ecf98aea7ac2b25a691e612910e8b07ce4adf982136d30d00907fVirustotal results 29.03% Heodo
2020-01-23BAL_PO_01232020EX.docdoc 1fd3b81ca3d30c9017a44eef7861ac902255560376ba3a1524e22f8bee5fcaa7n/a Heodo
2020-01-23274489804396849.docdoc e81dc8d25679f4fea9a21338bd9612d079418003d3304029950f146696624ff7Virustotal results 28.33% Heodo
2020-01-23REP_KM3500798810DA.docdoc 667a70d5b2b7840b6e7668f011e10182bbd2103b7885111ed07392813d2af6d4Virustotal results 31.75% 
2020-01-2323U66E8ZJBBJ.docdoc 73ec09ba4b743dd18b184e5c7b2f4bd79bcefdc5df159653c75ffb5e05d7559fVirustotal results 32.81% 
2020-01-23719ZXN2BC.docdoc a340d8ba5f7367085e1773a5d0349ecadd71bd43d775d96d697126bf76b76d4cn/a Heodo
2020-01-23FCW_21139497.docdoc 3dddeb95fb091ba145a2b0705117b8ecefdcf833024674c193dbe2ccbc4c6bd4Virustotal results 20.63% Heodo
2020-01-23INV_PO_01232020EX.docdoc e0d5b5e788d2707e296ecee76f68c8c2ec1d9df9115ebabe6f14a1251cb9dbc6Virustotal results 20.97% Heodo
2020-01-23145766761282193382753.docdoc 260b5a47eceb11eaeaddda02644c85294da44e3eaca951d45152e1db6b9f1c79n/a Heodo
2020-01-23SW_76896908929175773274451.docdoc 627970068806ee557b861c46c5f66f04f0985ad9caddd21dc3c8e4682108042dVirustotal results 22.22% Heodo
2020-01-23DOC_PO_01232020EX.docdoc e50ca42cece8459c5ed1bf0713f580775a5bea5fd9384b1e5f284e52f2db08b1Virustotal results 20.97% Heodo
2020-01-23PAY_06847264.docdoc 425dc31b9652f83260c405be0755dcc694bee850e115c19c8aab134a108c8ef3Virustotal results 32.26% Heodo
2020-01-23INV_034060282973663646151188.docdoc 9af2280771f435166b53ce4682f2cedf9072877a0fd338920e1a7ae4434c47caVirustotal results 30.16% Heodo
2020-01-23U_98454574.docdoc e63aa1c3401d847d86e7d7a0183b1b09932060991feb79d6e2b775a27f30c36bVirustotal results 30.65% 
2020-01-23DOC_54681102.docdoc c78e3b88c08a9425cc9d6043a9d20e85c160e556a37f57f3f2515cb894c33316n/a Heodo
2020-01-22RP_9932340359785.docdoc 29487cc347b96694240c5003b2fde7f8e509ac63ea9365249aa1a23c122502ceVirustotal results 27.42% 
2020-01-22FILE_WUJ_010120_RZL_012320.docdoc 72bd6822c6587d7476c2bce9cbb767b7f392c8c960c6a5f08b75f5ef154f6a2aVirustotal results 27.42% Heodo
2020-01-22RP_BKP_010120_OGL_012320.docdoc 0dec28897974eacee319734ac9b757ff186fd1278092d5836175185fac8a3d54Virustotal results 28.12% Heodo