URLhaus Database

You are currently viewing the URLhaus database entry for http://vaytiennhanh.us/default/US_us/STATUS/Invoice-07-12-18/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:32112
URL: http://vaytiennhanh.us/default/US_us/STATUS/Invoice-07-12-18/
URL Status:Offline
Host: vaytiennhanh.us
Date added:2018-07-13 12:06:13 UTC
Last online:2018-09-08 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: JayTHL
Abuse complaint sent (?): Yes (2018-07-13 12:11:50 UTC to hm-changed{at}vnnic[dot]vn)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-14INVOICE-2018-07-14.docdoc 18336cb26a106e3fb0646b7f64e30a5b07b1401372864fa5bf7f45496b8387c8Virustotal results 25.42% Heodo
2018-07-14inv-090-UEN-834038/669.docdoc 914e00532725e890789051c9c675801994bfce13c77220038e4b9328ebea1501Virustotal results 23.33% Heodo
2018-07-14INV-WNG-6325673.docdoc 842111f8e91e342984b988ae11ec91e0a9e5a6d45b384f7aa08a070391f0956eVirustotal results 25.42% Heodo
2018-07-14inv-02-Q-5283882/4.docdoc 51c7ae9380e90b4bbcf7367c7a10a7a26e04ab55fecb1d58317079d7c3620775Virustotal results 25.42% Heodo
2018-07-14INV-00-CE-325198/711.docdoc 85988ec3c37a1397ba058fb9464cb98e05a5dc42c41d71950f43ac4d037c33d1Virustotal results 22.03% Heodo
2018-07-14inv-KZR-3275942.docdoc cc0a345e8f33b676e64bb8624a12b7831880bb9d27fc7e30923f239307976410n/a 
2018-07-14INV-0723102/66.docdoc 449b65ac30c74ed4138ba5aef349317e02726861617efd211d2309456d5230cbn/a 
2018-07-14invoice-20180714-835166.docdoc c97faa7193e55dbc5e3de11cda54c0f02ae680cf7d4e4406a0d75ec92f9994aan/a Heodo
2018-07-14INVOICE-DXI-689988.docdoc 21f9473e8c55d95fe53e09438e0dcb975e3ef6c65b76a32b772a0facfc7adee4n/a Heodo
2018-07-13inv-09753280/34.docdoc 9a8ea0fab28c0d5134d3651143e325935114e02105f99f0ffcdd153b487500f7n/a Heodo
2018-07-13inv-033-O-520795/383.docdoc c9e30d2ed8bff5da98238bac6465ec87788f9a6fab6ba789c1ab9051881ff1d0n/a Heodo
2018-07-13INV-2018-07-13.docdoc 484bb8b6d936b2e00f2537317bce13b65a449855d45e874019801aa65dc0dbe8Virustotal results 23.33% Heodo
2018-07-13INVOICE-2018-07-13.docdoc 8dab1710c04151c3a152998ba6fedfbc181eb16298e422c0b329f499a728272fVirustotal results 23.73% Heodo
2018-07-13inv-TM-243158.docdoc 902bfa7d5b815c1a7cfc362d191a817f0f50930c2ab6228e2788e9a551fd052fn/a Heodo
2018-07-13inv-04-OU-6639009/949.docdoc 07aed8cb8bcbe6688ba0d835d0a1f4dc477b935aa74e6ef08e87a085284d8768n/a Heodo
2018-07-13inv-GS-0312685.docdoc e2066792c82300571669d1d4143bfc0b4cd7bc35a92cdef40ff05ca17f43f5dcVirustotal results 23.33% Heodo
2018-07-13INVOICE-01846758/5.docdoc a400ede2168b23f126e8d79626feb6b1ac8d7b18d69c5e33d5e244730ccb066fVirustotal results 23.33% Heodo
2018-07-13INVOICE-03185205/35.docdoc d2bb88c934e3232b3aff7f12bbdde3389320eed32a33fa8ab6637e47e90ce216n/a Heodo
2018-07-13invoice-ADT-686016.docdoc d467a3178c51a31b27920b50c259c047535f85e719dba9446f00ddc39b2e2061n/a Heodo