URLhaus Database

You are currently viewing the URLhaus database entry for http://cqhanchu.com/default/Rech/Fakturierung/RechnungScan-PSL-18-53202/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:32620
URL: http://cqhanchu.com/default/Rech/Fakturierung/RechnungScan-PSL-18-53202/
URL Status:Offline
Host: cqhanchu.com
Date added:2018-07-16 06:57:57 UTC
Last online:2018-10-11 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-07-16 07:25:23 UTC to westabuse{at}gmail[dot]com)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-10-08gescanntes-Dokument-RJM28079563608.docdoc ecb205ddee37fb57263c41acca155823ac7a8754c1c47e909f77e6dc2633064cn/a 
2018-09-29gescanntes-Dokument-RJM28079563608.docdoc 10ff5e40961e5f918b47fbbf5dace6fb6a1f46e4f24dc010b8fd09cf72633201n/a 
2018-09-25gescanntes-Dokument-RJM28079563608.docdoc e3fb4ad38f7b4c7e7b2af12b6f949486adbca6e65f4fe1e85deb21cd75c9dab8n/a 
2018-09-19gescanntes-Dokument-RJM28079563608.docdoc 20e19433f5027d5b1924d662c5757df9d41274821422bc1aa166b65d46c2e77fn/a 
2018-09-04gescanntes-Dokument-RJM28079563608.docdoc 973e49d575fe73c0a03647138180a5c592288df6bb56c3d87f6a862d2ff46efbn/a 
2018-07-18IhreRechnung-JTY01221516.docdoc e7db2087ef7f0f80640c7f62a493da43eadb8db5f5af90ef1cb55e68a465696an/a Heodo
2018-07-18IhreRechnung-SCH506893860.docdoc 5836e5d29581870a533010f4e83ff5a5241b253330fc058c5610004e874b0f4en/a Heodo
2018-07-18Rechnungs-Details-SAD564205146475084.docdoc 00592b51236463fc3e8b7d530a555e55dc46eaf0d741f2c6a06bf1016a8fe6can/a Heodo
2018-07-17IhreRechnung-NFC25404893361.docdoc 4d5ce5b8a4729716cadf818b0eeaaa94694147d72377b2618a0832d6878cba51n/a Heodo
2018-07-17RechnungsDetails-JWR188639788.docdoc 660d4a7fbb3a9b2cda39dd9cf070b23487a150d7eaac569d1dcd5e658b5b3e73Virustotal results 22.41% Heodo
2018-07-17IhreRechnung-JGS558751796.docdoc 5ada98eebf6fb47b457746149615f206ffe846055d3287cd1dd7ae2f65bf0086n/a Heodo
2018-07-17Rechnungskorrektur-LEH8238677979643.docdoc edd4af1b80c903e2a9a96a22e6fb6a245bc3f780e09c00556ca18b0234c8227dVirustotal results 22.41% Heodo
2018-07-17Zahlungsschreiben-AMP528651735.docdoc d12be5ad757cda0b161d7092be269ded5e05250ceedea0c0698ed6842656775fVirustotal results 19.30% Heodo
2018-07-17Scan-TYC6589733294545.docdoc 2a71584f4f847c10e89ebce5cf36443e7b479c540e2b20bf0e7d5fe0c4604c53Virustotal results 20.34% Heodo
2018-07-17Rechnungs-Details-QIZ0767091.docdoc 2670d65bc39dcae2b98b5e565a2e3085db9af28e3eb087870b0ce6c50ba72cf7n/a Heodo
2018-07-16Zahlungsschreiben-SAC2392402.docdoc c12fb578a2c229837178e9b4bc146c191c8de1f6fc67134769ab435784766b68Virustotal results 20.69% Heodo
2018-07-16Fakturierung-HQW28288280325589.docdoc 68549498991f79323c0f7e35c1402900d2b77d6c63556e6c0885f5658760b4b4Virustotal results 20.69% Heodo
2018-07-16Rechnungs-Details-ICH32297913.docdoc aae156aa1d279c88fd4e871eeaa35ddc85289b610e1bcb04d3cdf99976f932eaVirustotal results 15.52% Heodo
2018-07-16Dokumente-GDQ870918621102.docdoc 0ae85a8fe55998abbd8d98ccac55b87907a329211824819f6a66e04035039017Virustotal results 17.24% Heodo
2018-07-16Rech-SZQ181240557794.docdoc 7a5e8ca813e42f7d34a93100187b6a04ff62b6e6d8db3fada03301a8d6141199n/a Heodo
2018-07-16Rechnung-UUZ5669653028.docdoc 1794b759a416da60fef53cb4a6b87acc853dab144c6018bd5b17c52c99ff92c1Virustotal results 16.67% Heodo
2018-07-16RechnungScan-IPA834423939.docdoc e597f59d141fc082e10c70621223840c96177316ed68d2e0efcaf0712b3d7b09Virustotal results 23.73% Heodo
2018-07-16Rechnung-ESA4343840109.docdoc 880dbab81729e3cd7cd1bd64023de55f2a6ac4e0d08ebbf2b30722d06933c8a8Virustotal results 20.34% Heodo
2018-07-16RechnungScan-EGI638400079.docdoc e649da70901de44609b7139af0651f25e8377a1e800dcc1c26b007a5a4156033Virustotal results 16.67% Heodo
2018-07-16Details-EMS6225679.docdoc dfc06db97b157a65aca6b9fbbc32a630ab8b0d6d0717050406018b88f5225484n/a Heodo