URLhaus Database

You are currently viewing the URLhaus database entry for http://tuvanduhocdaiviet.com.vn/wp-admin/available_box/close_portal/OaLBZw_xcpKwIjH3/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:301935
URL: http://tuvanduhocdaiviet.com.vn/wp-admin/available_box/close_portal/OaLBZw_xcpKwIjH3/
URL Status:Offline
Host: tuvanduhocdaiviet.com.vn
Date added:2020-01-29 22:19:07 UTC
Last online:2020-02-07 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-29 22:20:05 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:8 days, 12 hours, 12 minutes Bad (down since 2020-02-07 10:32:10 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-31Doc-2020_02_01-IL9595.docdoc 964ade2e36826fb06c5ca21cd4cbbd3a11a8e21c195e323ae8cfd383543d1d93Virustotal results 31.25% Heodo
2020-01-31Dat-20200201-2014208.docdoc 11719e43c0400c0e599a1d1a217da8178b2c7d62f66262fef88cffdd100c5246Virustotal results 31.75% Heodo
2020-01-31LIST-94234.docdoc 786338c65b78c5ba2c61da98f185fd1ea8efa6d26cdce817ebd143cdbf5aa79eVirustotal results 32.26% Heodo
2020-01-31REP-2020_01_31-52434.docdoc 7751baa036a3377751c1d23c593f017114859e8b8285f6ea41fde8d82e19be57Virustotal results 34.38% Heodo
2020-01-31FILE.docdoc 1bbba6556de9b7552cfe85621ad8905c44d0a59782a9db60bec73e07847e7767Virustotal results 31.25% Heodo
2020-01-31INF 2020_01_31 FPV070.docdoc 3a1bb7b01c02be6e2e71fd83c2bb04835747b98aafc1ee772f88c618b5325d53Virustotal results 28.57% Heodo
2020-01-31file_NA77616.docdoc 075d1f5b7944bb5b788d8b9036b9ade54bf6cda3e8d6809c6846900039d90e18Virustotal results 25.00% Heodo
2020-01-31Rep.docdoc 98d4100547490c9809f92a82a3afc57c4927ce1e84664bad304d005b9754a02fVirustotal results 20.63% Heodo
2020-01-31Arc 2020_01_31.docdoc 91275159f80eeb0eff909660f56290704daffd027e4b5725ef33573c925488a4Virustotal results 20.31% Heodo
2020-01-31INF-2020_01_31-962.docdoc 2c1c2bc7043d0a9e19f8082f74edb7fe6701df464a66a408969bd9825c11d16aVirustotal results 21.31% 
2020-01-31Arc.docdoc 9cef8737980e81c6206e9aabd1a34fa09873da539f2686f224e3d0c496190035Virustotal results 20.63% Heodo
2020-01-31Mes 20200131 7017100.docdoc 43582ceb15e33fde13dc6eb4d0b6785e2747e73114a7d1fccc032ab32b4a6e7cVirustotal results 20.63% Heodo
2020-01-31Inf 595.docdoc 479acd550fee84ce07d46ca359554323d14b0874e9402267f9f6cedc7ea64065Virustotal results 20.31% Heodo
2020-01-31list_20200131_LG270517.docdoc c8bd082a9174038d1dffc9a1fe5595314f3e2cd4a2657033f2e1efd3540a3df4Virustotal results 39.68% Heodo
2020-01-31Doc_191931.docdoc dd7ae3bc161b941e8ee4831dd583f504907c07c32c1d64d330d1f08e2030707aVirustotal results 39.68% Heodo
2020-01-31Dat-20200131-R457.docdoc 994ab85c2ed2004c1ac4b7eb7b3300ed9453ac6f02787c92e226c3cfb19cc939Virustotal results 38.10% Heodo
2020-01-31List-O75497.docdoc 6fd53c9b4fa1bcdf1ef2a095d2af6db48d7d4034e1d5c9e32b23c12853ab6c10Virustotal results 35.48% Heodo
2020-01-31arc-2020_01_31-JCC452789.docdoc 95e97a58c14852a0f72290721cde5276dd7d9255c97e0bf0c166a85955db30afVirustotal results 34.38% Heodo
2020-01-31rep-20200131-AK370716.docdoc 8ac6cda8c7b4094b736c508bc231f782f410a72cecec097edb943014ce610585Virustotal results 33.87% 
2020-01-30Mes_2020_01_31.docdoc 38ed0185799cc1cb1e2fcfea1f554229ad2ddee7695a8eee704426cf83a6b7e6Virustotal results 33.33% Heodo
2020-01-30inf 2020_01_31 GL520070.docdoc 710bca7eb8f1b38ff3ff591ffce42780c42d513d5db8e8edbed62b2a30a41145Virustotal results 33.87% 
2020-01-30DAT_JZ657988.docdoc 5d669f3035b344006960d92b8e182bc4805b2f45783fc1393e39b27498e25cbaVirustotal results 34.92% Heodo
2020-01-30List 2020_01_30.docdoc 72b6ec3c1e924a2f6b1bbf4f5359a7dff2c8d0cd96062fa882119a929ff9b6faVirustotal results 33.33% Heodo
2020-01-30Arc-20200130-F346980.docdoc 88d2169711b161c4ef3ad2a293d5d31f96681e8341468acf5a7d8f77296a0649Virustotal results 39.68% 
2020-01-30list-20200130-XZC8997.docdoc 754cbbb7ddc67e1475afc52e76a09e3c2f2caf788795fec9c7859e82dc81d9e6Virustotal results 38.71% Heodo
2020-01-30DAT_2020_01_30_LUW852.docdoc 2d3704d70a241dbcd409a1795470714a4458938eb29c160def982de82fe45c28Virustotal results 38.71% 
2020-01-30DAT-20200130-YH3433.docdoc 11078ef33eb1bccdd13fee326af0b5a51e5d9bfb1335c25004cf281c01ccfdc3Virustotal results 37.93% Heodo
2020-01-30MES_2020_01_30_388.docdoc eba2dba873ee77550f0381f6e0fabf8501232bc19b5540b15d442e85cf817399Virustotal results 32.81% 
2020-01-30FILE 2020_01_30 787.docdoc 2d865b1d71a6827ca4eb3b7f884d08cc2acbcea2e862ce53a15cea4128959e8cVirustotal results 30.16% Heodo
2020-01-30Mes_2020_01_30_E3878.docdoc 8fccb53dc5d9058d11d344f7fbd34609642b1b1d2a9e4699134d165ce6ab21a0Virustotal results 25.40% 
2020-01-30REP 2020_01_30 TOJ81977.docdoc ddf014e6d9e70bc1709c2ccde24524fc72092f929ea37df901ee88f152ae4c43n/a Heodo
2020-01-30DAT-2020_01_30-5066761.docdoc 6686a87ce4ec03815de4f384705a2a876aee4195ecaabf95d727a6d63030d4e8Virustotal results 29.03% 
2020-01-30LIST 2020_01_30 HP978.docdoc 093fe06865cc5cd449e9684d621efaf181505881f5e0e818b0ec9c4459ef1ba9Virustotal results 22.95% Heodo
2020-01-29Doc CY058.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29file-20200130.docdoc 20065bc4f4e7dcc823a293d8bad3d14c8bee9abcdd080265d4f720f910274c44n/a