URLhaus Database

You are currently viewing the URLhaus database entry for http://www.chenwangqiao.com/wordpress/FILE/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:304070
URL: http://www.chenwangqiao.com/wordpress/FILE/
URL Status:flame Online (spreading malware for 6 years, 4 months, 28 days, 12 hours, 54 minutes)
Host: www.chenwangqiao.com
Date added:2020-01-31 14:49:06 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2026-03-12 06:27:23 UTC to abusepoc{at}afrinic[dot]net)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-251474c4b932470ebb03f1ca9e1d27e6dc3de53933da60048aaa27f25ee404cf3f.unknownunknown 1474c4b932470ebb03f1ca9e1d27e6dc3de53933da60048aaa27f25ee404cf3fn/a 
2026-05-17a88e64eb169376b5edf16c5d7888426793965fce63c305814d3717336b4ac380.unknownunknown a88e64eb169376b5edf16c5d7888426793965fce63c305814d3717336b4ac380n/a 
2026-05-09046f6c069d27f094e3d212b0859f207739be7da3926ec99f7d0ecfe8dcf03e20.unknownunknown 046f6c069d27f094e3d212b0859f207739be7da3926ec99f7d0ecfe8dcf03e20n/a 
2026-05-01571b9c451a3fbbd0904a49842f64768915dd56d2c2db09dd3ff7bff58cc393ba.unknownunknown 571b9c451a3fbbd0904a49842f64768915dd56d2c2db09dd3ff7bff58cc393ban/a 
2026-04-232c52907d72bb8d43674bf36469a28271b1f49631359ae929ae1d36b0e9dccba3.unknownunknown 2c52907d72bb8d43674bf36469a28271b1f49631359ae929ae1d36b0e9dccba3n/a 
2026-04-143ca2ca79c118bde69262b067deb84b0dfd7408e74e668be99d80d7761430ca6a.unknownunknown 3ca2ca79c118bde69262b067deb84b0dfd7408e74e668be99d80d7761430ca6an/a 
2026-04-060ab14351e60dc4978d3683c368aa900a229ec43d3a376539eeb6a98aca3c1003.unknownunknown 0ab14351e60dc4978d3683c368aa900a229ec43d3a376539eeb6a98aca3c1003n/a 
2026-03-294e2d29195580357af8363dd362d20c3afb12fd1a85753397fd4fc6fe6ff5a009.unknownunknown 4e2d29195580357af8363dd362d20c3afb12fd1a85753397fd4fc6fe6ff5a009n/a 
2026-03-212ea228e1be9751e4b6ce657722c6e7fdc105facf566795d94e239cbb3a3a89ff.unknownunknown 2ea228e1be9751e4b6ce657722c6e7fdc105facf566795d94e239cbb3a3a89ffn/a 
2026-03-182c4618896e2978ccba286a8089b9ef4aac72d27ec3dbaab9c178bebe448076f8.unknownunknown 2c4618896e2978ccba286a8089b9ef4aac72d27ec3dbaab9c178bebe448076f8n/a 
2026-03-12a5929ba468812c04be161d597e4f77fa81c91d9e9adb98187ce8e735ce90443d.unknownunknown a5929ba468812c04be161d597e4f77fa81c91d9e9adb98187ce8e735ce90443dn/a 
2025-10-21226557bf82ba9b8382d0aedc120cf08ab6cd3f2b091a6464c386217e9c965c05.unknownunknown 226557bf82ba9b8382d0aedc120cf08ab6cd3f2b091a6464c386217e9c965c05n/a 
2025-10-133c9bf908c9df2b3ce1b36ca44d1e2b7545aa8c792723ea919cbd9c7d8134e7ad.unknownunknown 3c9bf908c9df2b3ce1b36ca44d1e2b7545aa8c792723ea919cbd9c7d8134e7adn/a 
2025-10-05e85a37550907a22cdefb7c35cde9fd814110f7693b7df0ebe6c56c16012730ae.unknownunknown e85a37550907a22cdefb7c35cde9fd814110f7693b7df0ebe6c56c16012730aen/a 
2025-09-279b9c6e9f4e8f051dd949495149030fd9de557e2426b28f6e801ce2060fe6a774.unknownunknown 9b9c6e9f4e8f051dd949495149030fd9de557e2426b28f6e801ce2060fe6a774n/a 
2025-09-1850f9c120e8f76e0d65c12f7740bd353caddf3d96c8143c6f9e9e159c3ba89ce4.unknownunknown 50f9c120e8f76e0d65c12f7740bd353caddf3d96c8143c6f9e9e159c3ba89ce4n/a 
2025-09-103fad3464e4f1cda28e2a99c75e02183f55818891be743d32ca7743c92392950a.unknownunknown 3fad3464e4f1cda28e2a99c75e02183f55818891be743d32ca7743c92392950an/a 
2025-09-02af0c32b7f30a65ce36cabbf1b20b33be31715b90c867d4d3c4977de624355b17.unknownunknown af0c32b7f30a65ce36cabbf1b20b33be31715b90c867d4d3c4977de624355b17n/a 
2025-08-26bce08d46c0299821a10f093c0ef59af94752c2a21ae4fa4f9a9810e12adb2a58.unknownunknown bce08d46c0299821a10f093c0ef59af94752c2a21ae4fa4f9a9810e12adb2a58n/a 
2025-08-176f880b1d35cb5dc1b5366eaf82b24ece954e883844cc7baa20010444888f7acf.unknownunknown 6f880b1d35cb5dc1b5366eaf82b24ece954e883844cc7baa20010444888f7acfn/a 
2025-08-09d2a13d3997313160671c3495a303a228454bab3be4d9f2895a689e791bb32c41.unknownunknown d2a13d3997313160671c3495a303a228454bab3be4d9f2895a689e791bb32c41n/a 
2025-08-01b907418481a35682224c09b73a0e16b49cb0b574f6be4bfdc4687082d953bf55.unknownunknown b907418481a35682224c09b73a0e16b49cb0b574f6be4bfdc4687082d953bf55n/a 
2025-07-24b922b2a96505d2cf51e03141cbf183659f4c2aed4d7bfe627d7ae7e4eba94b7b.unknownunknown b922b2a96505d2cf51e03141cbf183659f4c2aed4d7bfe627d7ae7e4eba94b7bn/a 
2025-07-1682c3ed01e4860de0efc025fd1268d3b264e699382251158f5ac396b804c71a52.unknownunknown 82c3ed01e4860de0efc025fd1268d3b264e699382251158f5ac396b804c71a52n/a 
2025-07-08fb68dd8c0b3f7e65e0283f0bb85a34f0452c1c8873c9dc568aa68a7ec81caa05.unknownunknown fb68dd8c0b3f7e65e0283f0bb85a34f0452c1c8873c9dc568aa68a7ec81caa05n/a 
2025-06-30b1d6ac1d31d188d28c5c08ffab423d77bd7ef820d30f6a41a88a408bc2357bd4.unknownunknown b1d6ac1d31d188d28c5c08ffab423d77bd7ef820d30f6a41a88a408bc2357bd4n/a 
2025-05-06aaca985f6cf6955ebb32cfc59f3364ec68ccf1d44b0f281996d228f2145f756d.unknownunknown aaca985f6cf6955ebb32cfc59f3364ec68ccf1d44b0f281996d228f2145f756dn/a 
2025-04-284e732d16b8b492da776592d18d1fc691a828376306eacc082fe24462f0e41843.unknownunknown 4e732d16b8b492da776592d18d1fc691a828376306eacc082fe24462f0e41843n/a 
2025-04-27928727bace66293b4815f1e2d316ca1d8a545597bda78f17ebae7b450e9ef8ad.unknownunknown 928727bace66293b4815f1e2d316ca1d8a545597bda78f17ebae7b450e9ef8adn/a 
2020-02-0101FRBJQM.docdoc 8ef3a86989c9654cd7b0914ab743459ad98702ea960612c66e331f858a791eb0Virustotal results 45.31%
2020-02-01INV_USKCQ0UTSPHS.rtfdocx da2dfdde77d319fa7d1a1326ca2ce99142a8d194e609eba08264875f442e240bVirustotal results 42.86% 
2020-02-01V_AD4155743784LT.docdoc 33a89c876ed4c1f54ac3ebf60cd427562e652b39263734b693beb3be9e6c67ebVirustotal results 40.62% 
2020-02-01INV_86121577.rtfdocx ac59c732daa8085badba3321495b6415cec136aaceaf03e509380f2d2742866bVirustotal results 38.71% 
2020-02-01PO_02012020EX.docdoc c117593f754a9dafdfb9c3bcaf46d70eda6bedf7ee811038f00aad85aa541355Virustotal results 37.50% Heodo
2020-02-01X_NYJ_020120_PHP_020120.rtfdocx d6ac1c0ee85cd1a5225863f4efa078bae13e3b4555885fc96d9fd47213a479f1Virustotal results 36.51% Heodo
2020-02-01SW_U3KF0O61AA5.docmdocx 5403de32b87a8204b4a1dfb11eb188a2a0614d3d7e34794fa33bccee7e84ebc1n/a Heodo
2020-02-01REP_PH3968833966LQ.docdoc b8971baa01aad5e89311994ceba0253dc8760e258b596d9c533e8e63c61256b4Virustotal results 35.94%Heodo
2020-01-31A_51351110.rtfdocx 2ff7a8002b4398fe3ca4905a4abef5b229f8d8f3faa9aa284bf542bc9ad56188Virustotal results 37.50% 
2020-01-31RP_ED6190268228IG.docdoc 78189db51d029cba090eb74853c255ae01f91ae08c6215195b58fa1442c247e8Virustotal results 31.25% Heodo
2020-01-31REP_PO_02012020EX.rtfdocx aaca1876480ef4f80a4c0246d615c1db9513669dc964510b8318981d22ffc798n/a Heodo
2020-01-31BAL_88279992.rtfdocx 9acde9478f827a67975691003ecb6ff2b7e1c319a38ba4ae94e40804654cacd0n/a 
2020-01-31M_62305344430.rtfdocx 77863724dd91af4ef0faf3ac63c9c34e7506270efef4ab9927609445c80609e7Virustotal results 34.92% 
2020-01-31XP73L6Y2Y.docdoc 9ca9749660569bd45851774becb4204394ea2ab1cb510d28d7bc77060aee9c20n/a 
2020-01-31NN4778291977YF.rtfdocx c65e54d8fe1847d0d081c3058842c5b0254a355c41756816944d2fb8fcf08a54Virustotal results 28.57% Heodo
2020-01-31FILE_PO_01312020EX.rtfdocx dd7ffb73c534ea606a7282f2d2126ed0feac359939a237270440750165714eecVirustotal results 29.03% 
2020-01-31REP_2084777097.rtfdocx 016dbd08c5dbc49e0cf280e181921d553878d9f12402e9d4e0def07bd60f0339n/a