URLhaus Database

You are currently viewing the URLhaus database entry for http://fweb.vn/melin/Reporting/s37rts/oeeqa7x628037-460922-dxlta1x6wmzp/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:300481
URL: http://fweb.vn/melin/Reporting/s37rts/oeeqa7x628037-460922-dxlta1x6wmzp/
URL Status:Offline
Host: fweb.vn
Date added:2020-01-28 22:33:07 UTC
Last online:2020-02-04 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-28 22:34:03 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:6 days, 10 hours, 32 minutes Bad (down since 2020-02-04 09:06:25 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-30XC6002993848ME.rtfdocx 4e7e8cf2f7ce130ed7bbf3b844cfab21ea1c3d8457e88233bd87206777ef0ec1Virustotal results 37.10% Heodo
2020-01-30FILE_47581495.docdoc 52b35460da9182eaea3191e35d9c9334c87c5d9aeb8a82a9532b85d1b0a7f594Virustotal results 36.51% Heodo
2020-01-30NV22QQQIXAA1J2U9.docmdocx 9d7903dcb84d56c7bb6712b573683c2ef0302a29123305fedbf29279c6e9815cVirustotal results 36.07% Heodo
2020-01-30INV_835799275764865727130422.rtfdocx c7710490083776e7b352f36bc4922c56479b54e76458d8d20a85be4f7b4af7a7Virustotal results 36.67% Heodo
2020-01-3086350235.docdoc 1b5d6a9fe7a562d4d940efb272ceb962dda14a0cb672a089fe2a0ed20585c0a0Virustotal results 39.06% Heodo
2020-01-30FILE_PO_01302020EX.docmdocx 643bbf34d9e019017fc813de23d9d7b7d1e622e67679b779a60a3de0153f7ab7Virustotal results 37.50% 
2020-01-30FILE_EI7939847937JB.docdoc 3476381f8a76d5131391144afc9072ad6ffb33c7cdd6aeeb721600c5743992e0Virustotal results 34.92% 
2020-01-3072227480681684903013191.docdoc 40520f763acb971389175978656d2f9c5d0b79e32f996b497f7748a0891ce742Virustotal results 37.50% 
2020-01-3041370569.docdoc 6a7a305bdaf0853c4cdc0667a4830d9ca4580fd72a8dabd2295a93d4e5d0d4cbVirustotal results 31.75% 
2020-01-30PAY_RP7935743281AZ.docmdocx bcaa904b499b15bb8bdfd3594adbb8792a1f6d6c0719df8c754ae70d5e01d1afVirustotal results 30.16% 
2020-01-30BAL_QM8851616276YD.docdoc 6503eeb82c3bc74d74c8bd056d2737b539afd23333ae2f25ec18b2ba72a6c567Virustotal results 23.81% Heodo
2020-01-30FILE_PO_01302020EX.docdoc 7578501f349034c9a89ebd79a8c301a6ca55760813992475ecaa08b3c4a6d19cVirustotal results 22.22% 
2020-01-30PAY_EPIWXE5G3UY4.docdoc 135e6e64bd7742b372ada6b825319eb55fa6081a563f2bb5b8c41b146badb7e9Virustotal results 52.46%Heodo
2020-01-29ST_0559346306.docdoc 130b62adf5a94840c26634186acf4a9e24225e45330cc266e05d6d9d352d4f7cVirustotal results 31.03% 
2020-01-29BAL_RNV_010120_BCP_012920.docdoc c39aa63290c4b66475a91f31655d381cb05d871f118ec9c5128f64d19dadd59fVirustotal results 26.98% Heodo
2020-01-29PAY_60227540699784785885.docdoc 3bf12769229661d5dd0a25950302e189697b914c141c2afd1b39219a381a4becVirustotal results 24.19% 
2020-01-29BAL_681828820.docdoc 05d8ec5900b6d0131e9189d1fb55c81b9ab126884a7b01401a0bfea7685cae67n/a Heodo
2020-01-29ST_CN6247690603IL.docdoc fad5f3db7cea8da25f51880b1416392b0903958e598aecf17080759f6719f73fVirustotal results 41.27% Heodo
2020-01-29BAL_BAF_010120_CQJ_012920.docdoc 6d72c1be3cceb805742428eb4000d1cf3844b8ed260fb71e89c621d97c4a0c47n/a Heodo
2020-01-2911568321.docdoc 130a5ecbb3f69579a5aa81511bab80615debda2fbc9c723f1d0303fa44013a4eVirustotal results 42.19% 
2020-01-29WCQE_0872042947063.docdoc fc03a02b0660ccb6a067febf4c13372cb4f18c18bacacae9842d53d48fc4b6e8Virustotal results 42.19% 
2020-01-29IQBS_FWY_010120_VZD_012920.docdoc e52715b694f6cdc90821034038903a67121b9f80502757bdce73ec1bc3a0e406Virustotal results 40.32% Heodo
2020-01-28PAY_WEM_010120_JGH_012920.docdoc d049be38a287df1e2e1ba9d2b6426c925a97ce5d71ce1ca10028a9345fc06cdaVirustotal results 39.68% Heodo
2020-01-28BAL_44817370819987772.docdoc 25050a3aa8747519850879e2c9d5c4d60db7ada347dd4eeccfc05d6233c1394dn/a Heodo