URLhaus Database

You are currently viewing the URLhaus database entry for http://birongsaigon.com/Download/PAO229614903EAPSP/Aug-07-2018-69371110/BHP-LHH-Aug-07-2018/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:39822
URL: http://birongsaigon.com/Download/PAO229614903EAPSP/Aug-07-2018-69371110/BHP-LHH-Aug-07-2018/
URL Status:Offline
Host: birongsaigon.com
Date added:2018-08-08 05:47:30 UTC
Last online:2018-09-08 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-08-08 06:07:24 UTC to hm-changed{at}vnnic[dot]vn)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-09WIRE 05RMDO.docdoc 31d6d9c91e94893b5dffd0363c9cde679e752dc63603c6be80275690c5eeb391n/a Heodo
2018-08-09ACH 717751ZWQRG.docdoc 340f3db26a6b990dfddad4b6685c9b557b7dad1afc6902f1099e90a159753488Virustotal results 33.90% Heodo
2018-08-09ACH 287ELTMLG Aug-09-2018.docdoc 432e420e92ea7d24bd6ce29a64e707bb01de7fc178abbe4a1563be91acbce3c9Virustotal results 31.03% Heodo
2018-08-09WIRE 48GVJA.docdoc d325bd08af0075b3605c3497af5cf79214cda511507360b88eaa3e83273d3b8bVirustotal results 29.51% Heodo
2018-08-09WIRE 158961SND Aug-09-2018.docdoc 588e5e6cb175499bafa2bda78b59c81b2c53bd14a71968711d6847be7004055dVirustotal results 28.33% Heodo
2018-08-09PAYMENT 69230WMBER Aug-09-2018.docdoc 4e1b752854a3087ac35addcde982f4f9b4b254a3601642fb0142ebb3803dfa34Virustotal results 29.51% Heodo
2018-08-09PAYMENT 1UTDIEIS.docdoc c4417fc19a3e7eda5f143672d412b112c5a2f7c5a5ded0ba0c8f9c1604391756Virustotal results 40.00% Heodo
2018-08-09ACH 1QGLR.docdoc 310a2eee356a3bd699e2ece7fb399d0c05182b762eaeebe326ddfdfabab9b0dcVirustotal results 39.34% Heodo
2018-08-09PAY 60370QP Aug-09-2018.docdoc 16c52af73c5ae5f2b52196cc111f1b3c924b0dc4514765728826d8c20331e36dVirustotal results 40.00% Heodo
2018-08-09PAY 6913275RIUPQZXG Aug-09-2018.docdoc 443fd8e200ab67895e82fa035b5539009edfc39d6fb6dff24ec74276bf9a4285Virustotal results 36.07% Heodo
2018-08-09PAY 3WPTLZEFR.docdoc 878d58170dc994cafb826f76d5c7f3fdf3b85b8e9e5173db79b714b7dedb10feVirustotal results 38.98% Heodo
2018-08-09WIRE 371392QPMLRMI Aug-09-2018.docdoc 91af00d6fe0a0b4b75f3bfe6f37174ae30e4f129afe081ccf298eb256f255813Virustotal results 39.66% Heodo
2018-08-08ACH 8IP Aug-09-2018.docdoc 87f377899e7ddb72b1ee1d16d7726b36da047152e8aac4d30ea7e192c1c54931Virustotal results 37.29% Heodo
2018-08-08PAY 0448GAABPNE.docdoc 2a1958667f5230e2362380278d69c38a03fbbae21bc0e8135aa035bb81f81eafVirustotal results 32.76% Heodo
2018-08-08ACH 702532UKCWX Aug-08-2018.docdoc bdd46d06590aecaebf00b82502cf56d7a54dbc45a736d723a76ad54c702836c2n/a Heodo
2018-08-08PAY 536LCMSRBMJ Aug-08-2018.docdoc 7719ffce9acd3c3db888dc04273188fb87b1b3e5e1fafc65e8e47f61f56b254an/a Heodo
2018-08-08PAY 1CXXTBN Aug-08-2018.docdoc f548b38101a293d278ebdb65048018888719065ad3fd9f39681e5ce4a98e9ffdVirustotal results 36.07% Heodo
2018-08-08PAYMENT 0OPL Aug-08-2018.docdoc ca90ee3ceb6b5f53c97e5621978522340940c65ff05b26248b391c4971d098a9Virustotal results 36.07% Heodo
2018-08-08PAYMENT 4MSTWXVA.docdoc 0140aa6cfbbc6676f2a53f5bb1758dca2b9463528b61b22779eef7a9187c9d54Virustotal results 32.79% Heodo
2018-08-08WIRE 8K Aug-08-2018.docdoc c65994cfd058b0e4258701a0773a89c5b46314d3ef6459d2d12f4e8908c779b6Virustotal results 33.33% Heodo
2018-08-08PAYMENT 2414Z Aug-08-2018.docdoc 1925b795206b4791b5d89bb8ece497e16807c9d6e5d031778e6462dca775eb2aVirustotal results 36.07% Heodo
2018-08-08WIRE 36ATYBB Aug-08-2018.docdoc 2c95fb67001b1e52bef79b8ff4a0df234557c76b8ad255f853f4b83ea836322fVirustotal results 36.07% Heodo