URLhaus Database

You are currently viewing the URLhaus database entry for http://phuongphamngulao.gov.vn/wp-content/VNWiFup/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:310362
URL: http://phuongphamngulao.gov.vn/wp-content/VNWiFup/
URL Status:Offline
Host: phuongphamngulao.gov.vn
Date added:2020-02-06 20:18:20 UTC
Last online:2020-02-13 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-02-06 20:20:07 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:6 days, 8 hours, 13 minutes Bad (down since 2020-02-13 04:33:27 UTC)
Tags:emotet link epoch3 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-02-079qf3487260900.exeexe 724dd5dad3c8c253663db43557712ac030b8228f9602030ff21ec61a5f9cb198Virustotal results 18.06%
2020-02-07gayveqtm7507723.exeexe 871a746d11b27ba7e2c85b0fd28dc65df6b43c7861e28209f88263fbf9fa3d61n/a 
2020-02-07vlomn8ft237855.exeexe abaa0de725648982df315407c687940ef24d512d340fac25e7fdd8d4605e677an/a 
2020-02-07o66126747.exeexe 15fdbc77e9921a59c4e57fd420e148c72f2d78d8d726b5f0b2c5c197ddd97352n/a 
2020-02-07b9gj6.exeexe 9f3a7920195183da05e9a04fed4786e9dff2116b3b16f2e0909e83e0f93cc7a5Virustotal results 13.70% 
2020-02-076hg2xoj8l72302023.exeexe 41b0c8adbc542b8e6135dd44dace5d0f78e40229a019c30d42e466492da9f173Virustotal results 10.96% 
2020-02-07l1zsmg0vs45.exeexe 51d8ab00aedc93c84b5a75153bc73a8bab2fbe65a511c48c435250ee30a86c30Virustotal results 13.89% 
2020-02-07u6n307268.exeexe 72ca930b941e822371e72370fd0f3601923d792fce4bb14036267be1db4d5981n/a 
2020-02-07q5rzfq0yx8697983.exeexe 591cf4c1c69ceb50241d570fdf6e820aae47d8d58b9da8a53b25db3f052b9d5eVirustotal results 9.59% 
2020-02-07tu1n25710899886.exeexe d83942e751cd4bed21111abf7b4730b511c99938ba20c4429d38964bfd34481en/a 
2020-02-07m90tsc97.exeexe 723b5ee356423389acc0f0396235a3bf7cb883aa754575a027038a78bde771b4Virustotal results 8.33% 
2020-02-074qs2587.exeexe c7dac1c91e0fc4b32f8a5dde1574ad71948b251cfc0468b180c02090527e0df1Virustotal results 7.04% 
2020-02-064l2kh6ux7906859122.exeexe 3934db6eae48290034434281b37120d930db48c5e05d3e226b197d3d4c953098n/a 
2020-02-062gl1t3e3476.exeexe 998fc8806348c060288c0bd5b7f8081441796f40db736edfc3ab6107c80e24b7n/a Heodo
2020-02-065olo1es34.exeexe 60fa30050fa0cbac8a928ec715af11e443d97916f79e4e1110052310f8dce35cn/a Heodo