URLhaus Database

You are currently viewing the URLhaus database entry for http://work.wangyu100.com/admin/open_module/verified_PpzZb7ffT_Ami55ISr/630051342_HEGSoUG0cnu2ZoV/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:415491
URL: http://work.wangyu100.com/admin/open_module/verified_PpzZb7ffT_Ami55ISr/630051342_HEGSoUG0cnu2ZoV/
URL Status:Offline
Host: work.wangyu100.com
Date added:2020-07-20 19:44:06 UTC
Last online:2020-07-22 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-20 19:46:03 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:2 days, 2 hours, 29 minutes Poor (down since 2020-07-22 22:15:32 UTC)
Tags:doc emotet link epoch1 heodo link ZLoader link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-22MES-2020_07_22-UIJ8172.docmdoc 73d6cf5248a0604eba81bfe1a1f55473820a97df0c5746014dd47e3d10071cb2Virustotal results 35.00% 
2020-07-22List.docmdoc cf53854628d9e95bf9c5b164c75908fcd42e2de87401607eaa617f331d376864n/a 
2020-07-22ARC_2020_07_22_0568.rtfdoc 0909752f9e8cf877b820f107687a6dc12e42ab76f995635a56116d94fa3cc86aVirustotal results 36.07%Heodo
2020-07-22dat XX253047.docdoc 0eeaea647018150c88d5f2e63cdcdba4dbae14ad5e23b7ac5ae1a632965674c7Virustotal results 36.07% 
2020-07-22Arc-5303902.docdoc e3a151fd0c1efbcd3873fb1cd5992e620ab4d82343fea02cdd59df1fd962bb2cVirustotal results 37.29% 
2020-07-22mes.docmdoc 8377d8c4302ad8a31a44fa320938d524ba143b4b076ad91fda4c5c1b73aa804bVirustotal results 36.67% 
2020-07-22FILE 2020_07_22 522.docmdoc 4e537fac2f1b71c8466b55b1539006dfebfcb9d8d01c793df2ba1198de425f12Virustotal results 38.33% 
2020-07-22Rep_2020_07_22_A15912.docdoc 3e4ddd1938e731730e44eb64c507528103d4584d6e9e3bd99c11b9d7dd4c14dbVirustotal results 37.70% 
2020-07-22Rep O6300.docmdoc 5f934443860f4ada8773989bf4ef1a4f9b25d5b0b8449222afdcc5ed0f44748bVirustotal results 37.70% Heodo
2020-07-22LIST.docmdoc e6254a296bbffaab1ec46e41702de1ad3275e27344d553604d3f4b19fba43060Virustotal results 38.98% 
2020-07-22REP-5724343.rtfdoc f7275664692ef040fefb14a865a8821366d9b10fb7db80143d16e9406b39965eVirustotal results 45.00% Heodo
2020-07-22Mes 0615.docdoc 64422cbcdfa35c85afa3650ca54bbad269e1ca4fb8adce2c539c0c8ae31503a5Virustotal results 45.16% Heodo
2020-07-22Inf 4480669.rtfdoc 5a99e4d57f0ba93bf755b2dc739d5cc5a69cff7c0ed440a453206a245737573cVirustotal results 44.26% Heodo
2020-07-22MES_2020_07_22_06769.docdoc 7e1e28f3605a3ed7b5c08f64e8b18ac845ca5545d5369a4d5bc62c4d496b6f10Virustotal results 42.62% Heodo
2020-07-22dat_20200722_IC8372.docmdoc a4730c2913b245ccb77ed0c4a10031a10360828ea6681eb4f9831c502bf0c2dcVirustotal results 42.37%Heodo
2020-07-22arc_2020_07_22.rtfdoc d17c29d68d4af4033a871a4bfee1affb3ba3b34aaf54059f3062fc0f78ce318aVirustotal results 43.33% Heodo
2020-07-22inf NET96350.docdoc 1a1a63c15492564a8a28122abb9e6e957ea626c145b1e2712a5cc9f4c10c7b9bVirustotal results 44.26% 
2020-07-22REP.docmdoc d594cc9f8ef872a0e9b3e12042504748ec68c52f4453d35eebfadc54a82d6a94Virustotal results 45.00% Heodo
2020-07-22File 20200722 7235467.docdoc a2bca2dbf8410837475af5b8e83246f69c279f4b502019816a62568d1ea4fa46Virustotal results 45.00% 
2020-07-22Inf_20200722_GS581615.rtfdoc 1bdb2b1de2d50edf05da4c812df14641111026b9d2744a73573940fb7a564d4eVirustotal results 43.33% 
2020-07-22List-L17670.rtfdoc 488c696ee2debc2fb1afc0aab20d756276fca35ca9f91008fcb07568b79ede95Virustotal results 36.67% 
2020-07-22Doc-W242798.docdoc 79cb28f01264a585e6d085eff860653eb72ec7b1976323c1f310ff7bdf0b1598Virustotal results 36.67% 
2020-07-22doc 20200722 82792.docdoc 933c7f05b56492f880e1716a1240b0bf1679fb740c973b5adff2f3575ae2a3b8Virustotal results 31.03% 
2020-07-22Rep_20200722_XI689.docdoc fb1530a751799859585501c02c6cce39addd2e4572d8df0149ae14735eb2f113Virustotal results 32.76% Heodo
2020-07-22List.docdoc 6babaa931bc26a787edf3d1d3118c0a45416f2e9deb01bc741decf522a2bda49Virustotal results 26.67% 
2020-07-22Dat PA18929.docmdoc 9d678fbeffe8eb971ce79fed03f575d8712e98b080969dd2aac8e4ede327b43cVirustotal results 27.59% 
2020-07-22Rep-20200722-W556.docmdoc bda45a277d1d57050ac2f680f22b728a35eb2aa5d67471ea2b55817d66a982c8Virustotal results 26.67% 
2020-07-22Dat_U000.docmdoc 6f567c0477f01c7cb169abe9c9bbd5a18c39d7a68160438508adc626a2835d2dVirustotal results 27.59% 
2020-07-22REP.docmdoc b68476e293e35d7cbbf80b3561d23bad553eddd9b04a07ea072ab1ea17f1d78eVirustotal results 26.67% 
2020-07-22FILE-2020_07_22-379190.docmdoc 4ef2c8006cf9685f61441f329dbce4b1cfab1f70eb6709bf48168b31c42eba0dVirustotal results 26.23% Heodo
2020-07-22ARC.rtfdoc bf08d9f7924956f144f0211f6ea48722fea5cbcd8dff6c661dddc5a221e13742Virustotal results 26.67% 
2020-07-22list_2020_07_22_PG04663.rtfdoc 8a4dd2564fb906334e1702628a5b52b6ab20497d1a5522332c4879a1eb778c7aVirustotal results 24.59% Heodo
2020-07-22Mes.docdoc 64bd75d17119d13674e5414b25e5d2cc4fd8f76b0af8721fcaa0fba000570daen/a Heodo
2020-07-22mes 7496292.rtfdoc ff885175138132335dd7f3a840c5cf89cec412345bb6bb8311853367827526d0Virustotal results 24.59% Heodo
2020-07-22arc-2020_07_22-5312.rtfdoc 737f7e0557c9203033464070e06e23e7675c8325abd0083d1ebbdaca3f7eac2eVirustotal results 37.29% 
2020-07-22Mes_2020_07_22_746.rtfdoc 8aec85cd8e1f0f312d2a3442272e4634ea845690457c6a516b51378c868a1c34Virustotal results 34.43% Heodo
2020-07-22inf_8346112.docmdoc eed180c709224d892fa8a82e0c51bf623d7057a65ca483d45e3d005984dc6588Virustotal results 32.79%Heodo
2020-07-22FILE 2020_07_22.docdoc 84ee9ec33d16ade130e8842b327ab3d4b8480fada3bb6fb25ad854dea738e9beVirustotal results 31.15% 
2020-07-22ARC_2020_07_22_60738.docmdoc 67a974e69b33e54421899fd9e7ea3b833607832d2ad8f7c1d5723735f65bed82Virustotal results 29.51% 
2020-07-22FILE_20200722_J6288.rtfdoc 28e77291fea150f98e5ed9a57a4d4074ff204abc6e20218a7e67bb0e4b6e23f4Virustotal results 27.87% 
2020-07-22Dat_20200722_W8714.rtfdoc c07649d058f6470af27cb972b0a9306496e2641bf959dd66206f3feff56b83c1Virustotal results 28.33% 
2020-07-22Rep HPK4270.docdoc 04b189501cde3a8e14a2de3bb20b7313da30db8f0a7af0862cc14e400caebe06Virustotal results 26.67% 
2020-07-22DAT-504.rtfdoc 0c24abb426e9a3dac8679d113235fe206c6cf1010035c97791dd11b9132a567aVirustotal results 26.23% 
2020-07-22doc 20200722.docmdoc 80cb12a6bbe9b2c3065f9007e9740b9f7d75dcf2bc68651848cb08f4ce619b39Virustotal results 26.23% Heodo
2020-07-22Mes 2020_07_22.docmdoc ecec36458fac5fdf0031917d979c2539b70801bdee88e022ee090a48109e63b0Virustotal results 26.23% Heodo
2020-07-22List_566.docmdoc 8d70f6580cf02bcae5c4c14396951b6e6c1ea10bcbcbb89f835c29dc7d2c8cebVirustotal results 25.81% Heodo
2020-07-22List-20200722-0657.docdoc ad71158fd2fa3ad570d1764feac2737214e1900c2ddcce1c9b7d1e347a53e357Virustotal results 26.67% Heodo
2020-07-22LIST.rtfdoc 350d92067aa4bdb91f2f885ce60577427a73a14bebe3267e72f8716987eb6da0Virustotal results 26.67% Heodo
2020-07-22List 32180.rtfdoc e5e81d1d34512bdd8b9aab542cbd3b5ce38d6ab9d3e607684bcb4f0a691307d1Virustotal results 26.23% Heodo
2020-07-22ARC_20200722_KJ273956.docmdoc ffb87064fd80238bc3cc8cecd8d855f504e0e8ece871014875a625d3b0752eb2Virustotal results 26.23% 
2020-07-22mes R42671.docmdoc 812ed74f92912f98accd025c7c64b9c943032b3379fe1c9654a9deeac6d8b981Virustotal results 27.12% 
2020-07-21inf 20200722 GFT0661.rtfdoc c20821e80c5ce943d4b87b9416329f0502a4da3c97044c8fd7016172353e1626Virustotal results 26.67% 
2020-07-21FILE-20200722-EOV07064.rtfdoc f03863257ba6bfc7e029c245f3dd3f892fe5a6aed79b625b2c7314f3398b723eVirustotal results 26.23% 
2020-07-21mes_N7395.rtfdoc 3e24c4373b1e2ba1e3d16925cd0d4a1752452402ae4aaa8ad8ce498bbff5335cVirustotal results 26.23% Heodo
2020-07-21file_20200722_O091.docdoc 4ed6d7c9f2e9292974253fd9e5b4063a391c156768d50cf6a8deff4425a099b2Virustotal results 27.42% Heodo
2020-07-21LIST 004.docmdoc 97d6a51f311c9af7f316be2f4d5ed00901bc5eb08c6daffb87fcf98ba3bd851eVirustotal results 27.87% 
2020-07-21doc 554.docmdoc a8eaeae150c0c2f63c21f90adf8634bbd7653092f06a273410a5c26df3f0e25fVirustotal results 26.67% Heodo
2020-07-21ARC-20200722.docdoc 7b6d030461fbd94c985e17703889f54e8012d5ba9af413f3009e010eb28fae17Virustotal results 27.12% 
2020-07-21list.docdoc 6852b34db0c7a6150c1095a704236a1938b4ed46cd9d7bdfd412555ebf61890aVirustotal results 26.67% Heodo
2020-07-21MES.docdoc db88b385b97b7038cd233960f7f99ce350a72a3eecf6bbbcb227645f111d4e7cVirustotal results 26.23% Heodo
2020-07-21Rep-OHE134.rtfdoc 1a7ea77822d704fd09f8d01732909d19a62bc18b5d1d4a327261fd1daafe1418Virustotal results 25.42% 
2020-07-21inf_20200722.docdoc c52c38b76abbabdc92f8ae120296d6a44c5479c5624695adda1cd3aec00a0ca8Virustotal results 26.67% Heodo
2020-07-21DAT-2020_07_22-5431884.docmdoc bcc1834e956cf9ee218e2956ae6511170e810ad54d6738ed11f98620609a3e30Virustotal results 26.67% 
2020-07-21file_2020_07_21_80052.rtfdoc a498a07bd860a86bd937ea230aea64bdbc55c3040d90c13e57a2670608c1af3fVirustotal results 31.15% 
2020-07-21Arc 2020_07_21 X511032.docdoc 0974a3c01f3b2bdfefa2c3f955522a50e05bea86eac7c7da493d7548b1b5c758Virustotal results 32.79% 
2020-07-21FILE-2020_07_21-177.docmdoc 94afe20839c1b4794b268af701170510a03aca8ba4c42d4f37056f048b4f4312Virustotal results 31.15% Heodo
2020-07-21LIST_2020_07_21_303.docmdoc 8d842d76f958c70be828a217a80c8398107c158a2320c0d36f3b75512b8deca9Virustotal results 29.51% 
2020-07-21dat 20200721.rtfdoc d678baaadbc56de5d5136a2bae9b233710d4016b9d09094c907e6a1442f7fca7Virustotal results 31.15% 
2020-07-21mes_20200721_DT930879.docmdoc 193921b13cb10f97c4211e6694ee26cf2ebb7d6eff920ca64cc0d96252fc3487Virustotal results 29.51% 
2020-07-21File KTG078.rtfdoc 3e9d864db108ff21b3dbc6aee0596264668e95aa02677c5e98cb40bc9bf40998n/a 
2020-07-21DAT-233.docdoc fa34ecd729ebdf64de47192d76713cce9390f4f77b2b0640ea2ed67fa54f4d5fVirustotal results 32.20% 
2020-07-21Rep-20200721.docmdoc 3d808e9e116ecad94d0839d1a951f8aa24c96f6dfaaa774a889edbb38c857b56Virustotal results 31.67% 
2020-07-21FILE-2020_07_21-LWS1355.rtfdoc 262962b5fcfbc2fd14aa121ea6d5731ee54807c1d8f5cb14aedfa6437d1b764bVirustotal results 31.67% 
2020-07-21Arc 20200721 790360.rtfdoc 3a27b053c2c3fafe4a45dec9f48127084b6f180a0fcc3ca2a08a3bdede5e1ff0Virustotal results 30.51% Heodo
2020-07-21MES 20200721.rtfdoc 4702bfa3cce588e00e72da6918a41ca19da01547f668f0d07950765028a333adVirustotal results 30.00% 
2020-07-21REP 20200721 BKP559626.rtfdoc a9e912c0733016338d181ec06475e1f30f28fc2159ee482787e913fc65085cf5Virustotal results 30.00% Heodo
2020-07-21MES 2020_07_21 UO6790.rtfdoc e03def51cc78a91e3c97945ebbf083bea9efa86f55fde07a8c4bae905c1b8671Virustotal results 27.87% Heodo
2020-07-21List KEA728784.docmdoc d1f13cff50c5950b6842f81fb632405df63e1d6a953d4d912b3f5ecfb1afa55dVirustotal results 26.67% Heodo
2020-07-21Dat-20200721-48339.rtfdoc 15617b37ed587c9af7ec3de8d4aabd3de95ded6604f652abea14822da2c94ce0Virustotal results 28.33% 
2020-07-21Rep-21610.docdoc e6e56699f2eee72f34f915a3535b5cc541d94ff1733222954c162b2f34a063a4Virustotal results 25.00% 
2020-07-21Arc-235.rtfdoc a82dd2141315d36a0f9ba74bb443a40e0495cd089323254c35d0c4686249de7aVirustotal results 24.59% Heodo
2020-07-21Dat 20200721 V361.rtfdoc 55a103c16b3c4d8958091e55cfb62091fd2d209e07ffba0a5c88252946b8ae39Virustotal results 25.42% 
2020-07-21dat_GJ066593.rtfdoc bde282cb96f5986ecffac2e217f661fa0f00c92f1e4b2a788aad9cbd53a2eb51Virustotal results 25.00%Heodo
2020-07-21LIST 20200721 6676.rtfdoc ad614712ee0ad71a7408a527a3a2051489b0ff4f08038b7a676ad967ea160fb7Virustotal results 25.42% 
2020-07-21rep-JHW5177.docdoc 23bf0066e26b5b6e2403af2810c57d5ee5c0e04cfb175df6c134826cdb68bce9Virustotal results 25.00% 
2020-07-21Dat-381348.docmdoc 38a052e49569227f531849f52c6e801e5abb2c68a7dd2c5a9fca8e92ec6b0211Virustotal results 24.19% 
2020-07-21Dat_20200721_189.docmdoc deb29a892e444cde34fe7642bacbee1bf74d35fcff478966636eec77c5e28646Virustotal results 25.00% 
2020-07-21list 2020_07_21 ZN6231.docmdoc e4ec2e54b07ab9d2efbe99644cc82bfbcbbe04e644ec0f2a84738d51eb3434b1Virustotal results 24.59% 
2020-07-21FILE_20200721_M809221.docmdoc 44d93b12f57a0d476e774d58da761e56ddd20f6d299acc2390a9111082e448deVirustotal results 23.33% 
2020-07-21Mes_2020_07_21_963.docmdoc f2fe3a5179268cfe7049da41ac5d13a2c6f4a46bcb8111dc46f3ab2ce225716fVirustotal results 24.59%Heodo
2020-07-21Doc_CF56686.docmdoc 77381e8fde74067c151274bc344395ef59df227e209ec80c0d7879aacbd5d654n/a 
2020-07-21dat_2020_07_21_LV181320.docmdoc 590404bb24804914ea53c3480612bebc506f54e56553ef7b366d545a4eaac100Virustotal results 24.19% 
2020-07-21Rep 5314998.docmdoc cf3b2f4e9f81af42df9884f8f3042a4a704fe949060f1997368c664d6db623ecVirustotal results 23.73% Heodo
2020-07-21List L204.docmdoc c915922a81a8064f3c80285e3615bd5aaeb6452a92f4588fe03bdc81caa840a9Virustotal results 24.59% Heodo
2020-07-21INF_2020_07_21_QH699.docmdoc a8d9eceee2cd3735b96abf3528e7ec3e8e2d8ceb8991c00c7ff479e9034655f5Virustotal results 34.43% Heodo
2020-07-21File-439721.docdoc f78e874b4d5c5dedede72b85b571f2b04d8edba617b6634d95c2af181e6e4dd7Virustotal results 34.43% Heodo
2020-07-21Rep.rtfdoc 793132996a7b6875055c2bdbde2173f37e68ce5f04ab651acad13f84ab89cb82Virustotal results 34.43% 
2020-07-21file_666.docdoc 276568f9c3bb230aabe183dbfd02ad1c36b7aa141d382d34a839a611a422c07fVirustotal results 33.87% Heodo
2020-07-21File UGD690827.docmdoc 754a0bebe018b079d9d9260256ea2106b4b5ad9a654c8b8a1989bf6e3f4568f7Virustotal results 34.43% 
2020-07-21MES_2020_07_21_045225.rtfdoc 5816bc271d88617e627d64210b8ac9df417f8072b362af861ade766137eb1564Virustotal results 34.43% Heodo
2020-07-21FILE-2020_07_21-3239742.docmdoc ace014e43d78870f28d2a732d72b60fe0c602b71dcc8771989e5cfc0bb1e0befVirustotal results 33.87% 
2020-07-21Mes-20200721-UI554.docdoc 3bc869822322f3e700ec706660323daeca6ea90553d0bff45ce1fdc1ad6dfcfbVirustotal results 32.26% Heodo
2020-07-21Mes_2020_07_21_0398.docmdoc 122b0d68ee819b2ceb91c0b2cdcc0327860dadbb29f884a776968a58c9480ec4Virustotal results 32.79% 
2020-07-21Rep 20200721 1518.docdoc e2a49ec64650e56e967e8b0c31b7e21ad3f1ab14516c6dc02605aaeb90f7b87cVirustotal results 32.79% Heodo
2020-07-21DAT_20200721_GJ94666.docdoc cc33fb732d79d3537ea595440f4b1629db7afd01f88df1ef22827dd587bccb1dn/a 
2020-07-21Inf_20200721_394326.rtfdoc 276dfa20b9cffd3ac104aeafed599b2f70a9fd0e8d4faf1d86ffd46e8354a416Virustotal results 32.79% Heodo
2020-07-21list 2020_07_21 YPM59506.docmdoc 176237b901fd642cfb1c3a9fd8c50cdbf0d5ec30df6c98142d3a0e48839f9d51n/a Heodo
2020-07-21ARC_20200721_1819640.docmdoc 1236dd4116a2c4ba4427175d0a3e88c848f70dc6219f6b22f1997ae3ba80ba14Virustotal results 31.67% 
2020-07-21Arc 2020_07_21 WOY324.docmdoc 4e34674eaa422795c92ef9cb66994e18a57553e217b4bb4de69c1369608e36e6Virustotal results 31.67% 
2020-07-21Inf-2020_07_21-7796760.docmdoc 49b857e2068f710d1facd444264c6d8804ecc9e2ba9660953b24bbf213cc66baVirustotal results 29.03% Heodo
2020-07-21Dat_20200721_NPT631200.rtfdoc 33e64096db5340fb26c5b5d6f9b1dd89674d3a77a96a25fafcb878d9929fc9daVirustotal results 31.15% Heodo
2020-07-21mes_20200721_NCV98176.docmdoc 99c6c8f02c2fef792bc8a5a6406b0baa294156cb38b8df191f98cfb5a90547f5Virustotal results 30.51% 
2020-07-20dat-HRA8118.docdoc cce8e5e706869261ede523822b673dd52e48d4351de8600f5ac209a7f0189629Virustotal results 29.03%Heodo
2020-07-20ARC 2020_07_21 SRS2536.rtfdoc e00291bcd00edfbf9f8f55a1f34576b512404c036b744d0ce846397f8a83bb1fVirustotal results 29.03% Heodo
2020-07-20file_20200721_3301.docmdoc 518def77204a86e55289809beda7c491b0f9ab290b10d7b4bae1c670a0f69c8dVirustotal results 29.51% Heodo
2020-07-20ARC-20200721-44236.docmdoc f83e32a15080c0f31451809377046083d52daef3354edecea6db6ccf4158a43aVirustotal results 30.00% Heodo
2020-07-20doc-607.docmdoc 107cf68ace70917126432b415c7a9b4a18e3f87c304c1ea780b1fe0950167c29Virustotal results 29.51% 
2020-07-20doc 20200721.docmdoc a6ca24bb5b1de30cd63ecceac1727ca4102ed289d65fa05c550c4485e6ca372bVirustotal results 29.03% 
2020-07-20List 20200721 100.docmdoc c0696d196c346305861f4e358f48f216dcdde4251309abed3547504007cb858cVirustotal results 29.51% 
2020-07-20Arc-S076.docdoc 616dde6dc6e22e28f4149e26996578dde114b40f896cee3cb36165d52ff70857n/a 
2020-07-20Arc 2020_07_21 102916.rtfdoc 1269bdbbc40be92cc1f13918a692b34fdfeec466bd7d872863ecc405ff38f77fVirustotal results 27.42% ZLoader
2020-07-20Arc_XV3402.docdoc c6050ddd07c6d8c4aee73c52d0e50d6056ebd5f3e82550d8c771fc4353d489feVirustotal results 28.81% 
2020-07-20Inf 907038.docmdoc eccf2d10cb44fb11136e2edaf7af5de351637d1479888142221354abf8986760Virustotal results 27.42% 
2020-07-20file.rtfdoc ec87e9999c894cdef59c964d06c6de6c7a7134d373b4e754180d90dd5fb23f64Virustotal results 27.87% 
2020-07-20file_2020_07_21_RIQ078.docmdoc 8d861becdf66c056d51b6b585d1d2c98ec75e77bc3af28d354edb72f3ebb65adVirustotal results 27.87% ZLoader
2020-07-20DAT 20200721 131543.rtfdoc 3a26f638eddb01e30b8a712291a03088645dd9d2986cbe415bc1b87cd8eb70acVirustotal results 27.42% Heodo
2020-07-20mes_20200721_8689.docmdoc 6b5e8002c323071f83df953f977caf3a477d1a0c7178e0795674d263bc2dab15Virustotal results 27.87% 
2020-07-20Inf_2020_07_21_A41549.rtfdoc 3aedca3992d77371154f015834399c14aab576050a53efa01fb5714e01beb841Virustotal results 27.42% Heodo
2020-07-20doc_20200720.docmdoc dc9d3da24212096b6029163166558cefcd8b37aae588dd461d9b5c02700700afVirustotal results 27.42% 
2020-07-20Doc_20200720_15397.docmdoc ba9dea8d19d91af5e263e8bb98b6ef25c7f8d994944b6d6a0ecae3fae653199aVirustotal results 27.42% 
2020-07-20ARC 20200720 SP6850.docdoc a1064f658ecf514ba982b19196bb1ea0b7f1e85661c20777b3e93093510db141n/a ZLoader
2020-07-20ARC 20200720.rtfdoc dc83903be08352444bfd3116d33bda30da619c60371f037e0bd56f82a2a768fbVirustotal results 27.42% Heodo
2020-07-20Doc 20200720 627.docdoc ed29b479d20901bb285c8146d9a69a73a34eadaa4f6c86aca69aeefe96f4fe0fVirustotal results 27.42% 
2020-07-20List.docdoc cbe8fa6812edba1a4e2b1fe7c30f6cbf05f21e5935e95ecbdda6d3f5d3b6de9en/a