URLhaus Database

You are currently viewing the URLhaus database entry for http://yoha.com.vn/css/multifunctional_resource/corporate_forum/47091871420415_e17lLh/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:300576
URL: http://yoha.com.vn/css/multifunctional_resource/corporate_forum/47091871420415_e17lLh/
URL Status:Offline
Host: yoha.com.vn
Date added:2020-01-29 00:14:21 UTC
Last online:2020-02-04 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-29 00:16:03 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:6 days, 15 hours, 46 minutes Bad (down since 2020-02-04 16:02:47 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-31ARC_2020_01_31_20256.docdoc 70614612076d2aa000cd44cbf046687404cc690e8c5894a2f63fc4c9c193a2e2Virustotal results 34.38% Heodo
2020-01-30INF-20200131-090.docdoc 38ed0185799cc1cb1e2fcfea1f554229ad2ddee7695a8eee704426cf83a6b7e6Virustotal results 33.33% Heodo
2020-01-30Inf_939988.docdoc 78af768890683c9271a83b8fa61ac0743bbf82ff74a00a23e8b36e1cc539b664Virustotal results 34.92% Heodo
2020-01-30DAT-2020_01_31-7803.docdoc f49ee5e7c4bc2384d6506dbbec88af0952dd50e37bc2f61df774c6e8a47a3218Virustotal results 34.92%Heodo
2020-01-30rep.docdoc df43728a90f505ab871cacfc9dda0c255c46428970911584e7ff00a42c796c41Virustotal results 35.48% 
2020-01-30rep 20200130 4154.docdoc 88d2169711b161c4ef3ad2a293d5d31f96681e8341468acf5a7d8f77296a0649Virustotal results 39.68% 
2020-01-30FILE 2020_01_30 3705359.docdoc 162e460256ab76b13ecf9daf16f1867bb2e13925b3894c8f56fc2d360781c389Virustotal results 38.71% Heodo
2020-01-30LIST 88398.docdoc 2b5bdd3bfb73fa7e1bd1b322c377a0ffd4386f783c6658748a15a25679b09b51Virustotal results 38.10% Heodo
2020-01-30File 20200130 LBX027.docdoc 33bff75b0b0477fe5ebb1baa53a6e72f2c569227d8ab61eddac59592d02d28faVirustotal results 32.26% Heodo
2020-01-30Mes-923775.docdoc 767b17c9708aa05e3d52db97aa2842a873f2cf8e9d75f19e3e8c84fd32442e32Virustotal results 25.00% Heodo
2020-01-30Rep-200.docdoc 7099bcda5f0b4caadc077f6bc794a4dc8933e66863535f49c23c8b19ec793b7fVirustotal results 28.57% Heodo
2020-01-30Mes-2020_01_30-Q96506.docdoc 6926bc1e1548f432acb621ea14a0a04189aacc9b0d3730cc275ea5be5ab2ddf7n/a Heodo
2020-01-30DAT_O79787.docdoc 093fe06865cc5cd449e9684d621efaf181505881f5e0e818b0ec9c4459ef1ba9Virustotal results 22.95% Heodo
2020-01-30File V961.docdoc ded73d524fe7544ecb69b5779a5bddbef01386b55ac338c83fb4d25d31745584Virustotal results 25.00%Heodo
2020-01-30INF_2020_01_30_JR10059.docdoc 4932fd4b350016a8ffd5945209efaabc177ab4bb83e310f2896d29c02e0a612fVirustotal results 25.40% Heodo
2020-01-29Doc-20200130-BT596795.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29inf_20200130_90615.docdoc 2c7a2ffff7a4a2fcb7a86235dafda3b02ce67330155e00a22408d6c14b2f5cafVirustotal results 40.32% 
2020-01-29ARC 606931.docdoc de39c0b0ba341eb6a6c1cc3bff5a3dede93907976a77563396df5165f422ac7fVirustotal results 33.33% Heodo
2020-01-29inf-2020_01_29-AYY566.docdoc 7e8c0e91d30b485bed7963d9d3169c243edb3f5f2ce5e8049df4731007ea4d61Virustotal results 32.26% Heodo
2020-01-29ARC-2020_01_29-531841.docdoc 93e6b158ccceb81017a551ff0ede39622381a6ee79e572a206f2756b342a47fbVirustotal results 28.57% Heodo
2020-01-29arc 20200129 9326.docdoc b7be54905b7c6faa05793dcfbd48dbe4b489f5424a08a31cc09e12ffb7390060n/a 
2020-01-29DAT-20200129-O7250.docdoc a6f8d6e5f80b47b55146e82c61a78c5ed8c451bcb68d157dee574d02c768ba30Virustotal results 26.56% Heodo
2020-01-29DAT_20200129.docdoc ec9b05ca4512e2e594339751e698ee57b1373c749a8c8b26cbe5c79dc1e978ccVirustotal results 26.98% Heodo
2020-01-29dat 20200129 732.docdoc 0b0243567f8017cba7be007b4d797731af10a9c7e9971cb09881d0a646bf88a2Virustotal results 30.00% Heodo
2020-01-29Doc 2020_01_29 31003.docdoc aad9025b37d955a0929dc76185e7b87d374e735e3a30a258bd549dcfc7a1bf27Virustotal results 26.98% Heodo
2020-01-29dat_20200129_JOR0401.docdoc f8a5336b371ee216fc6fb0d0b23eca343a30c1d0ff719e61a847bffaaaf64a21Virustotal results 25.40% Heodo
2020-01-29Arc_5821.docdoc 9e66ad03e7885710b534addc2f0c5637987970b3c6185b27cb42a4fcfa06dfc9Virustotal results 24.19% 
2020-01-29Doc 20200129 XY13915.docdoc 94e0d6de6118c26179d6f05dd39b5583f1fe79c66151f666734b93a655a71930Virustotal results 23.81% Heodo
2020-01-29MES_2020_01_29_UA833594.docdoc 7c22eab322ac6b786498c54df9abb223c3466203f681028b1023147f081fd6can/a Heodo
2020-01-29File_2020_01_29_261.docdoc fb8b1e69574f8ec2121b612f1339a516d01536a2174f432585e94c98fba7ab8bVirustotal results 44.44% 
2020-01-29File_2020_01_29_2432.docdoc 8c05cb88caacbc8eb0e4a1e79a0d1a707959b45fb39f5e694923b6b069ebce75Virustotal results 43.55% 
2020-01-29INF 20200129 DRL3167.docdoc d0587297f7b5699b364592f59c0d93057b42defb42c714d6381d54a6142953edVirustotal results 44.44% Heodo
2020-01-29FILE-20200129-V500896.docdoc 705a21a458e18ec2353f1141cd6971cd6ffe76398c6c0bffea9c4f3e2c370c87Virustotal results 39.68% Heodo