URLhaus Database

You are currently viewing the URLhaus database entry for https://www.zibofu.com/img/kEnbwzvVT/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:308465
URL: https://www.zibofu.com/img/kEnbwzvVT/
URL Status:Offline
Host: www.zibofu.com
Date added:2020-02-04 22:35:20 UTC
Last online:2020-02-14 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-02-04 22:36:04 UTC to unom{at}ucloud[dot]cn)
Takedown time:9 days, 17 hours, 5 minutes Bad (down since 2020-02-14 15:41:58 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-06Inv-AL99_0055934.docdoc 9f32e4c7cc39fae73045b625140d782b1dcf5b5e592d899da32f46a708f4b9b1Virustotal results 29.51% Heodo
2020-02-06Inv W96_119687559.docdoc 0d52884323396c99de2994a867ebe7ccb325a7a33a6ae3317f4290517232a3edn/a Heodo
2020-02-06Inv_ST315_36915867.docdoc 4a24444820e9cbd0c73e0d97f291e4679d283f5c6fd44db547c58a37d62b4b83Virustotal results 29.03% Heodo
2020-02-06Inv-04_517048661.docdoc cf97fc92739f7d431c0d391d38dfe6096c9fb8689a40a8754a5bdcfba6f97fbbn/a 
2020-02-06Inv-YZ494_204138.docdoc 6c06954cbc088900ecf406f49cd3620cb6152c02121a754986fb65f7935bd043n/a Heodo
2020-02-06invoice-KMJK2967_669550.docdoc 6ebbb4bcb4b52533f8fbbcc0a2a7691cb7e670688b6930fb73868507dd71baf4Virustotal results 27.87% Heodo
2020-02-06Invoice-J8265_5074646.docdoc a22067b37f97aa4ed866b27ae8891c6af526a3b0ef093d55e638577cf66567cbn/a 
2020-02-06Invoice_OK59_047513566.docdoc 81fae48623d822ab3081546ad2888a2ecb9c1c93e996888dd154be91b9d8ff74n/a 
2020-02-06Invoice 3_481895208.docdoc f529e7394604d172959df3fb126f30946377ffcbed5a186bee86ce1ae13a2902Virustotal results 24.59% Heodo
2020-02-06Invoice_S490_207145.docdoc e10f7b95c27f399f5a1a28c5e94c61bc47ffb9f8bd9ab3bb562cf27be6460e88Virustotal results 26.23% Heodo
2020-02-06Inv_0241_5348317.docdoc d8a98e712d6775091bbcdbe1e2b1ed30135d7fcb59a9ec4ce71bd80823438c5aVirustotal results 23.33% 
2020-02-06Inv-118_780142.docdoc bb7e9b7e57b944f2a0191cc0ef6e8fcb0cb24c61758a836379f80137bfef9cb1Virustotal results 22.95% Heodo
2020-02-06Inv-ASBT2327_9268353.docdoc b0568d9ff726c394e4b6a7b7a59c6dcccfff57c4d618bb531c30dc3ffa5aaeedn/a Heodo
2020-02-06Inv 8_98469451.docdoc c137f96ad20933f15cbd33dd13a59de4aa1b0e84ba2d9ffeca8835eb21d271e8n/a Heodo
2020-02-06Inv-PD375_2524096.docdoc a71f70e5c9147e91776353601d4c7ddf221e1776266686d334717a70d113fe31Virustotal results 22.58% Heodo
2020-02-06INVOICE-F7152_8814630.docdoc 5f1d9dff136888c71d8b157e91821d73a94faa92af1bdc04912d223b7b1de32dVirustotal results 31.67% Heodo
2020-02-06invoice IFXT251_049689.docdoc aa1a76b81c26b3039f992fa97b4738751e8bd457072a3c63260ce986b96488edVirustotal results 33.33% Heodo
2020-02-06Inv Y5_56446810.docdoc 9eca08bea00fec73f8bdc769abf28f857d39de7d922c4d0dfd4017dc5981d2b0Virustotal results 33.33% Heodo
2020-02-06INVOICE-TWG7_7101556.docdoc c7b6f46f5a55f557c829d3a1e6d171b7fc2577517bd72b3219b805304f56a2fdVirustotal results 33.33% 
2020-02-06invoice_NHU82_988961233.docdoc 1065371a2d78cd0aab5f8bf32772f611df9ef917c441a35bb0a84d051c8647f2Virustotal results 31.15% Heodo
2020-02-05INVOICE_RZ4_277546.docdoc fbc7e227ec8bd45144bdd33ac13c8a9b563282ce2c47bed6f613e71ed22dea4bVirustotal results 26.23% Heodo
2020-02-05invoice_ICM8_727715273.docdoc 10f919530c917ae446dda34a70e6c51343f7cd00368b4fc1078c909c80df7d22Virustotal results 26.23% Heodo
2020-02-05Invoice-KGA42_0533208.docdoc 4152d52f1411482170163f5c1a548319cf7bf6b6e3b95a2d5dce87a21ef76708Virustotal results 26.23% 
2020-02-05INVOICE-XNG3_748452.docdoc a2de78a3a39c2c5d3d3c617de7f83a6ee2ba59eeb411de1095a208d4b21ecffen/a Heodo
2020-02-05Inv_9285_912554.docdoc 710cf49cc2e88e70dca61cf80d2b6fed3cc9da29c01dc5067cc97110df25ff96Virustotal results 26.67% Heodo
2020-02-05invoice-03_690755.docdoc 80ff1f7758139fb61d82afe12894afc778068701ba7fc6acc78f1e05b8e6d90bVirustotal results 26.23% Heodo
2020-02-05INVOICE 82_077137.docdoc 2592177b8fc2dad7890e1d568a33bde6b00c015fc0c96dbccf47299f5f0953b2Virustotal results 27.87% Heodo
2020-02-05invoice QIR59_84868273.docdoc 96d1b5d403e6b4250eec9ffc4b8167f47fb96ad00208299b8de9f645762ef2bbVirustotal results 26.23% Heodo
2020-02-05Invoice-FV966_071525385.docdoc 3d86715a18dc19cdf1364d58ff7deee2c387cde502de5b43166a7c0d98b2a24an/a Heodo
2020-02-05invoice_IQGR440_121041.docdoc 446c9664a7a29f18d084223fe43663b01df9ebf01ad93cd95cacb6f1e64e68faVirustotal results 27.59% Heodo
2020-02-05Invoice 4564_580790.docdoc fa5927f2181dbeaef9cab75616169a02fe02b41df92e598cabad444619c3befcVirustotal results 26.23% Heodo
2020-02-05invoice-GLF93_772934.docdoc 6e6b6b51d4a9dd7f74e82c53490f95ead4a4d2a9a4adb06f1cbd991bc2b225a7Virustotal results 33.33% Heodo
2020-02-05INVOICE-5438_06227649.docdoc d753eaf7b22aea01dd44dfba5b9fc26ebb5677f4a713b4afa69d8c34efe836f0Virustotal results 33.33% Heodo
2020-02-05INVOICE-FJO720_488232.docdoc 471942cfd9aa93923bc0f054e64201217913ae24a3e192919207202918c628fcVirustotal results 32.26% Heodo
2020-02-05invoice-WDUX5_79612409.docdoc 50ed2de7492f944d8a34c9d454c3757a58d26078f91dd5de90ac595eb6279dc7Virustotal results 42.86% Heodo
2020-02-05invoice-TEGJ68_78163316.docdoc 25d98e7b0341be2da85f8fbbe279863673a1b0744c9773c8f6bcaa0c0666c935Virustotal results 34.92% Heodo
2020-02-05Inv-3_5307849.docdoc fe95a5f68fe689f22c1ba6e479febd867fbb29760f0063700ad27d7d8b482d67Virustotal results 34.92% Heodo
2020-02-04Inv-21_61431186.docdoc c01faf044c1df797bde7ae50e931236add55e532401115f33435ad6802eeb184Virustotal results 33.87% Heodo
2020-02-04INVOICE WRVS62_7058803.docdoc 71cb0a76ffe68d03665445da985c3949ee036259e2d5cfd300e18bbc6b17a5acVirustotal results 33.33% Heodo