URLhaus Database

You are currently viewing the URLhaus database entry for http://art.teca.org.tw/bosp3r/available-array/guarded-area/805187078-22GJqQpfNtl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:308422
URL: http://art.teca.org.tw/bosp3r/available-array/guarded-area/805187078-22GJqQpfNtl/
URL Status:Offline
Host: art.teca.org.tw
Date added:2020-02-04 22:02:07 UTC
Last online:2020-03-07 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-02-04 22:04:03 UTC to hostmaster{at}twnic[dot]net[dot]tw)
Takedown time:1 month, 1 days, 21 hours, 51 minutes Bad (down since 2020-03-07 19:56:00 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-06INF.docmdoc ace007f793e2872353ded84bfb5b4a505dcb23fd2bc9772920797b48805d2a39Virustotal results 27.87% 
2020-02-06mes-2020_02_07.docdoc 49d7cc27c44c30413b244e4b09b23f447b31f1b529d5ccd618e5271c7a6ad92aVirustotal results 27.42% 
2020-02-06file IL220.rtfdoc 8ac7ed36748d60e4e5b3dca6805c79094a27204108ab3ed019a23190df1a1c49Virustotal results 29.03% Heodo
2020-02-06Dat-151.docmdoc 0395137796e0f9fe7c273562138c7e5f0c988214841e6ed4cda2e3978a98f1bbVirustotal results 29.03% Heodo
2020-02-06Arc 2020_02_06 0887780.docmdoc 43f10fe26a0ef0775cf82202ccdb01f65cd38e6aab4086fa49b4b2391da9f0a8Virustotal results 29.03% Heodo
2020-02-06list 2020_02_06 QHQ85097.rtfdoc 3e2e9332429ca46e97d6d5b2d39864b216599b31498ebda448a3fc2adfc78a0dVirustotal results 29.03% Heodo
2020-02-06list_20200206_6236.docmdoc 33b5e2a31a3000b7a3251be5436e451986568c1a93ace24fab40817786f5a2e5Virustotal results 27.12% 
2020-02-06Rep-20200206-GQY848693.rtfdoc 9d589a2e6c2556df3dabf97bfb5d53fbf92b2303d2b44b92b864eea6df244f80Virustotal results 26.23% 
2020-02-06Dat 20200206 582979.rtfdoc 20a0926fb970d58fb5681385d5b8bbc67f1abdfe2e240c721e1034857c14cb9aVirustotal results 24.14% Heodo
2020-02-06rep 20200206 EVE824766.rtfdoc b99125a74c2d36d2875478ee03096a69ad74f272c1ced98d2e22ea0f2a3d3191Virustotal results 22.95% 
2020-02-06arc.docmdoc 186ad5a4edbbc67f97e4c4d0236f263ae46435a2687639dba2a0a91edd0d6ce5Virustotal results 22.95% Heodo
2020-02-06FILE_20200206_IF322118.docdoc 5c65f21a3869e1e15433c2263d8dff3827f622520c972b12f4686250b8e68018Virustotal results 23.33% Heodo
2020-02-06FILE.docmdoc 6359275fa65b551a691c324e03fa5c3c73ace835ca4f3d90087dc3332f76ececVirustotal results 22.58% 
2020-02-06Mes-20200206-VL80170.rtfdoc d0ba1020328bfa59129c6d94b6bfd8979bd652574b24407bcfdadc75fcf28fb4n/a 
2020-02-06REP-YLX690.rtfdoc 7713e180e8a62f6041738a796b29f6efeab8431f8b6425016a4242f64df7061aVirustotal results 20.00% Heodo
2020-02-06mes 2020_02_06.docdoc fa37e0cba4786db4ba847c2e4f9b4ee78aedbf0eea4491228705fc00980af4e8Virustotal results 32.79% 
2020-02-06LIST 2020_02_06 099.rtfdoc 346d01cf657414934f8c87af6f0ae07d23875f613db84e483f2174b6353ab405Virustotal results 33.33% 
2020-02-06list 3884.docdoc 43e38902740c39567550fd0e4c87c00947c5fe577765eb00051f0212c05d7cabVirustotal results 33.33% 
2020-02-06File 2020_02_06.docdoc 9e7490ea59c003826b03252f70bd3fc3a4c910d44aa5c1cf377a0cb24491118eVirustotal results 33.33% 
2020-02-06doc 3750844.docmdoc 9005832cf404bc1202dcad8865b5250a9826f2fa18a6e23ee0a7e705c1d63ab0Virustotal results 33.33% 
2020-02-06MES_20200206.docdoc 74491fc6dd7ba85729f150a091baf5019a4a9cfcfa8e7bb6d450c9edf7762fb3Virustotal results 32.79% 
2020-02-06INF A28117.rtfdoc 58f94895848e841464a8b36d26e332a50e9b082bd7df37c1c054168929b7b34eVirustotal results 31.15% 
2020-02-05rep_070.docdoc 335e92129e141d12928fdc17fbb6c1dfe8b6fa59b2ff2a4ad0c60f4f0637ee83Virustotal results 27.42% Heodo
2020-02-05LIST_20200206_1203.rtfdoc 061b77c1354bff1d5cafa4e10d903ee5feb16bb91c295298444e056ffefd1370Virustotal results 26.23% Heodo
2020-02-05arc_20200206_WNE121037.rtfdoc 85d825b74358c12b84824b2d46cf048e3dfe836a8c320d88d301331a46e62ec2Virustotal results 27.12% Heodo
2020-02-05Inf-2020_02_05-Y15182.rtfdoc 4ae4da24890dd5b1baf266b99dd34d8d2ba9e958cf57c56069ab7959d39f7a71Virustotal results 26.23% 
2020-02-05inf 2020_02_05 E6502.docdoc 47ca3de0e80a4e9571311ab0b2470ecc29d18c990b063b57aef1818e5a3c260aVirustotal results 26.23% 
2020-02-05ARC RLL841862.rtfdoc c0b9c90ce017a4e5196e744c7948464ff57431da4a1d820793c5aea57cc0a095n/a Heodo
2020-02-05File_LXP59417.docdoc da0b1e331a89bd28e4338a886d224c01e9194a764a6ded30bac8b16670a589b3Virustotal results 26.67% Heodo
2020-02-05Inf-20200205-NW3545.docmdoc 4bda34084014e21ceb2db8fb9003f36f4b3a7bd5a8bcfb9b1badbf13529a6d84Virustotal results 26.67% Heodo
2020-02-05FILE 2020_02_05 CNN2343.rtfdoc e9de053b8046e662771b320b25a49cd709591ac896fb6bd4c324ba0b13f37b35Virustotal results 25.00% 
2020-02-05file 739.docdoc ab556aef3f7baf74127e682541cd5bb674af38a62c4c1f89ff43f09388894af2Virustotal results 25.00% Heodo
2020-02-05Rep-233256.docmdoc e017e89646b0d091bc67504f4318ea078b5a279edd898f418ff735e40c432e28Virustotal results 25.00% Heodo
2020-02-05doc-L625170.rtfdoc 2ace029191f61ec162d3403a04de30018c667003664c72194a3fd133c86b6c72Virustotal results 25.42% Heodo
2020-02-05REP_20200205_6435011.docmdoc 6552a6b01beec690c8ebf79b58d1397c3e9449e2d59c4f17b1d0e24415fdc05fVirustotal results 24.19% Heodo
2020-02-05dat-20200205-UIC8131.docdoc bd69c2f2ba41eeccc2c9fb6372f3a09a5921e0adbc6eea30efca31833098f475Virustotal results 24.59% 
2020-02-05MES 20200205 AZE434402.rtfdoc e88dccaec3107938ce2733cf049c5ace8f7d614e24a96f1b60da298112f6b5een/a Heodo
2020-02-05File 20200205 OOL50543.rtfdocx 3002799efe2f36491f41e0c5e350a6c6ae06bdc8fbef3c1ddf753c6c2e206736n/a 
2020-02-05FILE 622157.rtfdocx 3c0292963e5af1dfc8aa14b1b0408c3d3e0873fde4dd75962bd380b5aa67eb36Virustotal results 34.92% 
2020-02-05list.rtfdocx 98a046c048e6dccb43c0c6c6ce35eda6d4792e013b3bb7abf69702d4736b8840Virustotal results 34.38% 
2020-02-05File.docdoc a464fbbd0fd6eb2e09bb5c04dd46379d3cf1c4f67eeb3f4e9f0b9f7896a2192fn/a Heodo
2020-02-05Rep_2020_02_05.docmdocx a25acb77ff59454781d30445e527d286c6b22fb2040cc8e0c0ae31e14c603e5eVirustotal results 30.65% 
2020-02-05MES_20200205_ELD5526.docmdocx 87bf983815a7bdfc6fda722fa02b1adef0c064fc60a443faed053662ba92a74fVirustotal results 32.20% Heodo
2020-02-04Inf-20200205-H21559.docdoc f2d5330b5aa423a1c21c6f960154447080fb0b6a7747307519ce8d57a310d1a0Virustotal results 29.69% Heodo
2020-02-04File_U743.docmdocx ec4146a69e81f690514da6199f759c184964dbe031f6ca7850b4af5d0d365150Virustotal results 34.43%