URLhaus Database

You are currently viewing the URLhaus database entry for http://machining.vn/assets/multifunctional_section/individual_portal/164153738501_uKnN7lxN8YvsMGJ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:299727
URL: http://machining.vn/assets/multifunctional_section/individual_portal/164153738501_uKnN7lxN8YvsMGJ/
URL Status:Offline
Host: machining.vn
Date added:2020-01-28 09:44:09 UTC
Last online:2020-01-29 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-28 09:46:02 UTC to abuse{at}choopa[dot]com)
Takedown time:1 day, 10 hours, 50 minutes Poor (down since 2020-01-29 20:37:00 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-29inf 2020_01_29 MZ12505.docdoc f794730342329d1ca756e53becae5be97d1f5fc5628dc8dd371111d0d8df96c3Virustotal results 32.81% 
2020-01-29Inf_2020_01_29_DP452.docdoc 49725f6641477d5fcdc1933e66eb652922a1e1264277a6aef8069967eb0084f0Virustotal results 30.16% Heodo
2020-01-29File 20200129 660.docdoc b09c8d39fe17d600ac2beffd9540076f55d944b41ae3c11b26600252a272b3ecVirustotal results 26.98% Heodo
2020-01-29rep_2020_01_29_BZ72146.docdoc a6f8d6e5f80b47b55146e82c61a78c5ed8c451bcb68d157dee574d02c768ba30Virustotal results 26.56% Heodo
2020-01-29mes-104.docdoc 41f2df35fe03375e39b939c95142a9c04e1613e60bcdeb4f50ea339349d04243Virustotal results 26.98% Heodo
2020-01-29ARC 20200129 1563.docdoc 681cf7e6e085dfaeabad5bbaf2adc9194fff19044df752c7adbfd19077ace1e2Virustotal results 26.98% Heodo
2020-01-29Inf 20200129 858.docdoc f8a5336b371ee216fc6fb0d0b23eca343a30c1d0ff719e61a847bffaaaf64a21Virustotal results 25.40% Heodo
2020-01-29File 2020_01_29 VQ9270.docdoc 9e66ad03e7885710b534addc2f0c5637987970b3c6185b27cb42a4fcfa06dfc9Virustotal results 24.19% 
2020-01-29Rep-4493.docdoc ab46f8f9b1905e64a35d9db9e9ff84df5eb21679b53d1291553d1b6a936554a5Virustotal results 23.81% Heodo
2020-01-29dat-2020_01_29-QBK249.docdoc 7c22eab322ac6b786498c54df9abb223c3466203f681028b1023147f081fd6caVirustotal results 24.19% Heodo
2020-01-29FILE_2020_01_29.docdoc fb8b1e69574f8ec2121b612f1339a516d01536a2174f432585e94c98fba7ab8bVirustotal results 44.44% 
2020-01-29LIST-20200129-L175197.docdoc 085777a85dd9b9d62ecf918d0cda586ecae8d0b32af5aa6182d85c77a8a571fdVirustotal results 42.86% Heodo
2020-01-29MES KA154037.docdoc d7bcb9c0a8ff27400a3e2a846976dd062129a404c432e34e4fd885f734300144Virustotal results 44.26% 
2020-01-29Dat_20200129_LUE635907.docdoc 6a23106b558df36e6d88bb5b5dd187430087eff0c8a2ca1586f8538e8259e01dn/a Heodo
2020-01-29dat_2020_01_29_3641.docdoc 26e9b52ab2150b5410b69fbb020642053c81b652e8c997a7bb304da089232cacVirustotal results 43.75% Heodo
2020-01-29Arc_20200129_1784808.docdoc 24feb6df1e8f6c53bd9feedc048edbaa84e854f4accbd7fd64e8c4c74b2de5b9Virustotal results 43.55% Heodo
2020-01-29MES_20200129_U363.docdoc e26c4466ac96339cf441036fb05d86cba2f624e2c7481c1ca86209c19122cbc6Virustotal results 40.32%Heodo
2020-01-28doc 2020_01_29 FFD1962.docdoc 4b4867516d0fd10fb9b46f9474a7db95edf90a09b41086aaa1eef12ed73664baVirustotal results 41.94% Heodo
2020-01-28List_20200128_EA2401.docdoc 9a1962dfceb1a62ff349d932160c03ec9304954e3a0fb69e25b672fbef7b90b4Virustotal results 36.51% Heodo
2020-01-28DAT 20200128 38267.docdoc 81cd0ae1bd6ce5aeabddf861abb573b6eccbc049428230b4b5815d17909dc3bbn/a