URLhaus Database

You are currently viewing the URLhaus database entry for http://www.maisenwenhua.cn/wp-includes/Reporting/j8ni3406942-026544-kmk8iyb3t133qc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:301130
URL: http://www.maisenwenhua.cn/wp-includes/Reporting/j8ni3406942-026544-kmk8iyb3t133qc/
URL Status:Offline
Host: www.maisenwenhua.cn
Date added:2020-01-29 10:55:07 UTC
Last online:2020-03-23 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-01-29 10:56:03 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:1 month, 23 days, 16 hours, 32 minutes Bad (down since 2020-03-23 03:28:59 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-31ST_FX3539811243CN.rtfdocx 12f17aa88c41cd66c648d4f19289192958e721c494829eb67962060967d804beVirustotal results 42.86%
2020-01-31RP_16884152.docmdocx 214d5a002c69788401e88128b4532c65e84c31018aadda1fdd7badc5bd1b16adVirustotal results 41.27% 
2020-01-31RP_PO_01312020EX.rtfdocx 26abe273a868c6aeb39d60ae94f447a744e4b2e76be5599e36df3c5cbaafdd6cVirustotal results 40.62%
2020-01-3134839073.rtfdocx 6c537f49120d9eb66ddd4c15b6b27c22fde22d43869c18fa9b8bfb1766d13d15Virustotal results 41.27% 
2020-01-31INV_PO_01312020EX.docmdocx 9c5de271d65d0f60677c42eca0d3ef7644017fbeb235ebf84a1bf90f0759e3d8Virustotal results 38.10% 
2020-01-31BAL_529409646357909605583.rtfdocx 6971378f1c7eccd93a6ab7cf3dd5ea551a5ca14cf564e121f883c2f364e46876Virustotal results 33.87% 
2020-01-31SW_PO_01312020EX.docmdocx 4e2b359f6af536b5b64747340cafc480a9ca13749929b951a2db7d5f18b00facVirustotal results 34.38% 
2020-01-31PAY_30372540.docmdocx 1b75dd0fa245e88d26cb1ca67bcc5a5c0e515a1a61e11ecf77f962989f3072d4Virustotal results 34.38% Heodo
2020-01-30INV_H9PY40FYCPAEU8MO.docdoc 54e129e6834af97b4ad21f3e8157eec8f08d3c46c4c49680d1b9a539429f58f5Virustotal results 35.48% 
2020-01-30INV_VF1GUSV8L2DAD.docmdocx 22edab118ab47558449e05fa300e7535892bc2df0c285641ae0424aca9c8a3b5Virustotal results 34.92% Heodo
2020-01-30FILE_27928455.rtfdocx 9d7903dcb84d56c7bb6712b573683c2ef0302a29123305fedbf29279c6e9815cVirustotal results 36.07% Heodo
2020-01-30DOC_PO_01302020EX.rtfdocx c7710490083776e7b352f36bc4922c56479b54e76458d8d20a85be4f7b4af7a7Virustotal results 36.67% Heodo
2020-01-30SY5359180889WZ.docmdocx 1b5d6a9fe7a562d4d940efb272ceb962dda14a0cb672a089fe2a0ed20585c0a0Virustotal results 39.06% Heodo
2020-01-3032872848.rtfdocx bfb07402a9c2d9bc220ccce8b230e81d4fc183715599b2aae3a17dfa3d9e8419Virustotal results 38.10% Heodo
2020-01-30FILE_DFT_010120_VFS_013020.docdoc 2a4836acbc4c134aaea56cb543461fc151e8db768f9cf1a3edb70813dff8327an/a Heodo
2020-01-30RH8203030097AC.rtfdocx 40520f763acb971389175978656d2f9c5d0b79e32f996b497f7748a0891ce742Virustotal results 37.50% 
2020-01-30RP_76514216.docmdocx 0f306bd8f9966cbd586c596b54c32f00c23bf48963ef3a0158e1faa3ca1add83n/a 
2020-01-30E_BB3537761361FJ.docmdocx 72632cbb5a52904f9f0b8d201344958a9668ef1f52518be67520555eab7d0660n/a Heodo
2020-01-30YTJ_010120_HBO_013020.docmdocx d90ea13533de15c663974d29fd8e1524c78e1e3f67220874f8f41dd486f0af31Virustotal results 24.19% Heodo
2020-01-3094059540.docdoc 0e8bf4227a4711a00bdef9eecc715129b94f89647c1606b0826974f91b00c90bn/a Heodo
2020-01-29SW_SQLLPTS.docdoc 135e6e64bd7742b372ada6b825319eb55fa6081a563f2bb5b8c41b146badb7e9Virustotal results 32.26%Heodo
2020-01-2990344231.docdoc e18317c574e19a90bb705a85073532bd2ec510834ab8698ca864112a79aca9d2Virustotal results 33.33% Heodo
2020-01-29PAY_39048493.docdoc 2f7201c689a3c0a11cf22c6af3caaaae5d1665e5c9708dd91c891c59152ed235n/a Heodo
2020-01-29DOC_W9PK6V09E.docdoc 676826308fd42a8c5d5130e1994e49f1e6dcbdd69ef8fc7d2e1b522eb3177ae4n/a 
2020-01-29REP_ASO_010120_HLX_012920.docdoc 57e4192c1e874aee5fddc2f9fa0e7dd81e563e92fc4d6b0f92819445a6e28d88Virustotal results 27.42% Heodo