URLhaus Database

You are currently viewing the URLhaus database entry for https://myphamvietnam.net/wp-includes/g74e5554-71-095/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:415557
URL: https://myphamvietnam.net/wp-includes/g74e5554-71-095/
URL Status:Offline
Host: myphamvietnam.net
Date added:2020-07-20 21:43:14 UTC
Last online:2020-07-22 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-20 21:44:02 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:1 day, 12 hours, 16 minutes Poor (down since 2020-07-22 10:00:50 UTC)
Tags:doc emotet link epoch3 heodo link ZLoader link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-22invoice_XVM9_092731.docdoc 02c7fd8ed2ff395eb8c7eb3caca1e0cec299f4db7480e6d19829069ce541bc7dVirustotal results 27.42%ZLoader
2020-07-22INVOICE LXQ977_276688832.docdoc 17848a980123cfbb8869e7859b37b1f0e06e992a2ad751fde0a355d4eb377920Virustotal results 29.51% ZLoader
2020-07-22Inv RRF837_9222822.docdoc 639bdf650ed2329ccbe33f471cc8e6e8e24bc3a1147d446ff0ce5ea0e28ae9ebVirustotal results 28.33% 
2020-07-22Inv_ZCG314_032847212.docdoc 982b974a8a615a1e12c407d581f14151a8e9ba50cff41bd400e8be525e66b506Virustotal results 26.67% 
2020-07-22Invoice QDJ9382_361311.docdoc 4a77f876b6d9a044b69944ac284abd8838dfac4208cdefc8de51907727421d46Virustotal results 25.81% ZLoader
2020-07-22Invoice-LY9_77928329.docdoc 915ef2dcbb13060e972f99c4e495f50d5fb9144271000603ebb86db379223840Virustotal results 26.67% 
2020-07-22INVOICE OLGH53_664783468.docdoc 26af1552f2b88eccd42e79c091d65086151aa9a26779c42b2d0084e33ca2681bn/a 
2020-07-22INVOICE_TQ24_3508063.docdoc ebec7284e20fdc5a633b8f505fd018ebfdb512a595eaf179e5d77b60d33970b8Virustotal results 26.23% 
2020-07-22invoice_PWO3_413661.docdoc 840db3615ee06847a75a52b7ca20cb4149291512ac4f268a627f9a8c3379c1bfVirustotal results 27.12% 
2020-07-22invoice NV646_013235979.docdoc 0e544f6935b9f889755f2920a690cfa00909e4ac8c9732ad5735151f2490b407Virustotal results 26.23% 
2020-07-22invoice-AOGH1_221464.docdoc 41a0f5eacd46efb4fbcb759125506684df90da34071ae4ea585b5d15ccd3b25aVirustotal results 26.23% 
2020-07-22invoice WD1302_073208729.docdoc 7476dba24b28d2a074d7e75aea79591f98fbb95b065c91870b5a8198ab615f19Virustotal results 26.23% 
2020-07-22Inv RQZ5_2434330.docdoc f615f977969d02231be115ed31cc86bd74d0348b382f6da944231f573468b960Virustotal results 26.67% 
2020-07-21Invoice-P856_51550149.docdoc 062c45cd22faf032486fa920e68f639cfd2a7b640c0d36d297e6490118729c69Virustotal results 26.23% 
2020-07-21INVOICE 542_12867770.docdoc 43025670822df6a6ae1ba1f56baae65c0d563c0c12410244aeb8fb166be9f737Virustotal results 26.23% ZLoader
2020-07-21invoice-IIJ81_245075599.docdoc 112aa4be04d85780875343365b40f2fe9351e69dd4756d26a01f923251e17a49Virustotal results 25.81% 
2020-07-21Invoice-LTH46_557461.docdoc bdebdf81b9c2645e41964a4d14720c68258ea89382b1cee103369b6fb9a77103Virustotal results 26.23% ZLoader
2020-07-21INVOICE-QUY5518_96338450.docdoc d9238e5af649fe7ea0572f9699144985895a4c4576ebb77e0e198ea5120f4c20Virustotal results 26.67% 
2020-07-21invoice SIFN6794_413380606.docdoc 88b555290b53e0369600411c472821ad9907eb147dc87e60164918aa85adc3c3Virustotal results 27.12% 
2020-07-21INVOICE-ZBE3_056491652.docdoc b4e3c557317004de4b83d941a7dbd81648b8383245a1b95806b736eda61b53baVirustotal results 25.81% ZLoader
2020-07-21invoice-415_7031562.docdoc 9f9d6e57c9e3398ca955952e4fcf58321a7f235e18eaafe6aab3b3ddd4e88c7cVirustotal results 26.23% ZLoader
2020-07-21Invoice-ALUD0489_721727.docdoc 72a76d3c5a30ccf7584528d7bd29ac47062d468d56a417063c19573496089d56Virustotal results 25.86% ZLoader
2020-07-21INVOICE-VOE54_414119126.docdoc eac069c2098e2a08afb43c1f5aae5878d557e5cef94096cefa93bbe0d04c236bVirustotal results 25.00% 
2020-07-21invoice-N919_836848694.docdoc 3363f1375d1705778c34f83818742724c75fa3c3b13bc2fc131fd95b2d03c8c8Virustotal results 25.81% 
2020-07-21invoice-UJR5890_9928210.docdoc 56508ca86a568105ecfe6df473dd0a40bbb40f66270edb514d83e99e1e6ef0d3Virustotal results 26.23% ZLoader
2020-07-21Invoice PMX5_499463.docdoc 69f98944d3760e294ea601defa72bf8b0ac0c8105267a560426f3c2f3888aff3Virustotal results 24.59%ZLoader
2020-07-21Inv-ZH1_927668.docdoc ebf8a9a8c38f94a2fbf651cb07ad59f7f6be921f637492b72d966c0ba1b359a8Virustotal results 25.81% ZLoader
2020-07-21Invoice REAL7492_51948608.docdoc c7f1f379555ef08082a617234440aebf2a68fe7c55bf8280d333518d22adbb4eVirustotal results 31.15% Heodo
2020-07-21INVOICE-B5384_1852080.docdoc 9bd09fd88355a1b20c3268d29be2308057a659c4b96c85a618409ec4b57bd45fVirustotal results 31.67% 
2020-07-21invoice-JY726_9603702.docdoc 9ed17331261676ac56f81432fd0de1293bdc48863867eac50012dff696d69439Virustotal results 32.76% Heodo
2020-07-21Invoice_DP8141_889560.docdoc 33c53ca7807a817b61ed5b3a0a7e0ffe44059f5aac7475b14df784384aba5308Virustotal results 29.03% Heodo
2020-07-21INVOICE_JRA094_0591205.docdoc 5aa42a51f985e6af1419f2043fb37f51a7a1189fda28293d47fed2abb130c86bVirustotal results 30.00% 
2020-07-21Inv GKOZ6063_539350800.docdoc 4de9b5d8be922ee6f95a85aa378d4b78596a0df19e25a0388096ba0831feebb4Virustotal results 29.03% Heodo
2020-07-21Invoice-W382_750527.docdoc 11d9013218c3cfdd117b399765af57f2714a07774b29ab7a0a2b54c48284cbc2Virustotal results 27.87% 
2020-07-21invoice_GGJ5_3236860.docdoc a15083f68d55c92228c997e26d8596bb25b5cf8129f45e98d3c78ded130081f9Virustotal results 27.87% Heodo
2020-07-21Invoice_IWNW97_96769326.docdoc be14def968a7a7ba9caaac07b0784bf90fcc93c6917657fa2aae18ebc3813563Virustotal results 28.33%Heodo
2020-07-21INVOICE_O269_94830584.docdoc 05b1f0822783aa9419a3b13424fb6d31e224e8dad2c84ace8cafa7c1b42a1f3eVirustotal results 28.33% Heodo
2020-07-21Invoice ZEHS100_9011240.docdoc 029bef505d5de699740a1814cba0b6abb685f46d053dea79fd95ba6769e40a6fVirustotal results 27.87% Heodo
2020-07-21INVOICE-169_85796538.docdoc 369c8a3d8a6c68c6b0521061d8b81bdd6a24e898ebef804e811359220d51c31aVirustotal results 25.00% 
2020-07-21Invoice-16_49619170.docdoc 2a76ed46e142b56dacc929cf3fabf2287c2023d0e06e9f5842b23102f584c373Virustotal results 25.81%Heodo
2020-07-21Invoice DUG87_9077298.docdoc ee50b9e1ff6d4b77d99dded74e7e4383725809ffbc7f72c7071ef29911e69e0eVirustotal results 27.12%Heodo
2020-07-21INVOICE-QZF0_659668.docdoc 8f32874205c29ff499e75943e0f6c9b298417cca9166bee485e13f791d6cc4c3Virustotal results 26.67%Heodo
2020-07-21Inv NQ8_93810140.docdoc 6cb24de3cb231233f9a3fd81c726f49ff835992f50c34efc9419c8f2c7fa1d82Virustotal results 27.87% 
2020-07-21Inv-EOTD4_912955.docdoc 4526b97cee7e97d38575c3ccf35f4dbbdbb3b4acf4bc89a5d8afb139c28f7f30Virustotal results 26.67% Heodo
2020-07-21Inv-BH2_37190770.docdoc aa31041b4dcd03e3ad1818d6ca5ac597b999aa6725212a9dfecec97c68100a27Virustotal results 26.67% 
2020-07-21Invoice-QPC0887_080896.docdoc 969b9fcc13e520a48a60d7e65714c495c99ac1a90075aef31a7486070b8bb171Virustotal results 26.23% Heodo
2020-07-21Inv-QBD8_3543455.docdoc 85eb4f995c6972a6e9cf041dda832b20a4b6125403e01e978390d32863a4967dVirustotal results 24.59% Heodo
2020-07-21Invoice-WQL634_977673.docdoc 2c45f3ecfe38e8675ea0ae2db824e82e654e82aaac7dcb957df5b0b95034730fn/a Heodo
2020-07-21Inv 8709_605280.docdoc f37d602c2d14ef7dade7cd13740d744939c846704065c8d20367a677ce0ad095n/a 
2020-07-21Inv VPG570_718868082.docdoc b7c0c24f3f9f552c499937cca5dcb7a8fbb7bbf600dc1ad43256647401ca3d04Virustotal results 22.95% Heodo
2020-07-21INVOICE UL5_517250.docdoc 7f53ea4c64012caad27163ff00c2aefd9e2dff6a4c5fe488955be018c8af4362Virustotal results 22.58%Heodo
2020-07-21Invoice-P0625_799052.docdoc e25d6ec52f1ed0b91dca39b33e9dd848d324c38938a9d5801490e71d7db15fadVirustotal results 22.95% 
2020-07-21INVOICE-IGNW19_111869089.docdoc eb0997857baec37d1cddca0ae3c7b6c59fb78566eb5faf16035fef12063a3a2aVirustotal results 23.33% 
2020-07-21Invoice-VFQU0_89753046.docdoc e0b1f74edfc82851cded4dcd2efe9482c8272105eb6853b36947bc7ef8510145Virustotal results 22.58% Heodo
2020-07-21invoice-L52_136496215.docdoc e41c70d31b0de9b543804face14735e0e40236bd3f45dd6561f2ab2f37bf44f5Virustotal results 22.95% Heodo
2020-07-21invoice_59_1383144.docdoc 391cf59d4b78c8ae4b705489a8806b14bd1e0e78a977ff7be86e69b6d7b76fbdVirustotal results 23.33% Heodo
2020-07-21Inv-PSHM738_03777394.docdoc 20e4dc6141f8e92848a4f49ae43ac4dfddc7b2f54ac7b257f20539afd9438539n/a Heodo
2020-07-21Invoice_ADX08_816131.docdoc badf4060ed3d5a8f760803d237a17ca4f7d135d25661f96314c2ff92bca1e58dn/a Heodo
2020-07-21Invoice-8_735573.docdoc 7c96c1803f8860f0ecafb733376ee2fd8fffdb3313a7b4dfeab712ff27242d1bVirustotal results 22.95% Heodo
2020-07-21Inv O4877_643715.docdoc 59fdc24661735c738aea0c5ce35581112339c50c9a16a48bdc26694fcc2aec0en/a Heodo
2020-07-21INVOICE DZIG5_119279874.docdoc d279829ce22ee6a6b6a7c259b4c7be73b7cad4a3ba3771caf3255dc6c4024f3eVirustotal results 32.79% 
2020-07-21Inv-FBWP14_6475095.docdoc 42dfaf38d76b820e0fc08cd9f255e0753717bbc652535ac71420633a72236529n/a 
2020-07-21Invoice-YL67_30429826.docdoc 4c0125f72c43063a474cd06d510baf4675597b0dc15dbc75808ba19e47c3b508Virustotal results 33.90% 
2020-07-21invoice-XFQ53_9868652.docdoc b2e6d17b72bbc1198dddd5144883936a9682e7393f1e55df7c55ad6bc65e0232Virustotal results 33.33% Heodo
2020-07-21invoice GL546_085530096.docdoc 38f0850e9bbc46f419acd8e723015f8a5c90bc3643e680ffac42cb2b88179c77Virustotal results 33.90% Heodo
2020-07-21Inv EACM3396_902807556.docdoc 295dab6cbdbbcb48ed5d8b1623aeec9031d7a1c617436d3805f32e3da8267efdVirustotal results 32.79% Heodo
2020-07-21Inv-ZTFG37_097576588.docdoc 9ac4e472b511c0b96a51fbe283a6c3866653e85769c59e6361242e240efcace8Virustotal results 32.79% Heodo
2020-07-21Inv-8_959504.docdoc 33a93dab74ebd140d4d77872dc8c32cc0a9f876e750bfe15994bc2884d42a458Virustotal results 31.67% Heodo
2020-07-21invoice_TC303_520699.docdoc 49a9cae346abb5e63a23f827e0b6385853b114cc143308d1df8fd50b9e90b80en/a 
2020-07-21invoice_GGXD0_60690386.docdoc 19d54ecf09138dbd9153771a0928e858bb5afc3ca208c3a58c9bd8aa5934b110Virustotal results 30.65% 
2020-07-21Invoice_RYN6888_162176.docdoc bcbd3e8aab56417bcded9dbddfa8631d609998e5cdbe1e9dad903c4b5c96c156n/a Heodo
2020-07-21Invoice-UPK878_953675.docdoc d8c5f529c0cf82794d77beba3b49c00c66f725b4da0bd5f7811a277afada113bn/a Heodo
2020-07-21INVOICE-4_739177640.docdoc 9c2c7521e3396e71dc5881e83792ef7a57f81ddc505d6447277d5005fdd9f4d1n/a Heodo
2020-07-21INVOICE-XSL336_4739433.docdoc c2b7ce868cb7abb3c1adecb23d86d5d693477b90b2bcd59245545d29566d5e73Virustotal results 31.67% 
2020-07-21invoice-WYR3816_2948411.docdoc 95521126899057b8f8f629b236e7c4a56130094ebfa8491bfaa84b99928b2fd1Virustotal results 31.15% Heodo
2020-07-21Invoice_B09_963046221.docdoc fbbc68006312482fe86858f0e436bf863dc02c9fba333d31bb62dcc0c2a343a3n/a Heodo
2020-07-21invoice-HBQZ318_43357628.docdoc dd9bae32fde6363708378ec794fb75ef81499ddcd68be7c479d84a28dccf2a30Virustotal results 31.15% Heodo
2020-07-21INVOICE 80_8829747.docdoc 802ece20f9e8d8e21ad7959dca63e0ca0a5f7d073b9248adac42e190bdfafc92Virustotal results 30.00% 
2020-07-21Inv_FYR1_727689500.docdoc 2bcb718f3f0181d7746b521fb30abee06f111b279e6e70c2b0e457c9851ce024n/a 
2020-07-21INVOICE UEQ899_045981964.docdoc 744400e8635a32fb24f676ee340a20773e68142cfb176b193e6cb597e1c7a6c4Virustotal results 27.87% Heodo
2020-07-21Inv-UHBL595_22793623.docdoc 46c571e4a3c0650164805d6adbe4935af2ca63f1775330650ea21acbece001b4n/a 
2020-07-21INVOICE_LA41_186940.docdoc db32797cc8ce065ae1bbf6869c86073d12097b7705bd660e444f2864c9757d18n/a Heodo
2020-07-20INVOICE-EXWG457_380331.docdoc eadd6a9bef9985d2e1f90b731523e212fd80b42953b3ac6268899d6a6665bd0dn/a Heodo
2020-07-20invoice-M5311_859896599.docdoc 0ccc9fd33485568a01fceb6bc4e8732cd88550e973a57a38717057493286968fVirustotal results 26.23% 
2020-07-20invoice 67_34465222.docdoc d7b77575dc085ecd7c3c5afe2429e440bd01846d67a014b55f3d5e6cc210dfa5Virustotal results 27.87% 
2020-07-20Inv_DECL2214_020777.docdoc 7cd0b2fd4048010cb7ed72aef859cc7897cd53cd2cf8c4d5badc4829f118e15cVirustotal results 26.23% Heodo
2020-07-20invoice-EG9_0054162.docdoc e3adb47f05453432dccff91ea890a33492db51e8a5d6703d28802f10fb97a052n/a Heodo
2020-07-20Invoice_DOZB59_769499.docdoc b3b3bfae0d4830bd0f191a5b3b55563436a50788544094ae2e6f125c9421edebn/a Heodo
2020-07-20INVOICE_FG843_26917695.docdoc 2d4ebd61b9718d586f773e3289b189596b6214d57567293cca070baf78b166f5Virustotal results 26.23% Heodo
2020-07-20invoice GZN981_89480273.docdoc 1f5101ad07f1ed4e352c975491a99dd52ef81bd3dc14023da2c3288cc4109333n/aHeodo
2020-07-20INVOICE FK8860_33975053.docdoc 2224162fae6f22374bdbbf3a47666b0f90817f3a194f8a4913afa4e569f4dc2aVirustotal results 25.81%Heodo
2020-07-20INVOICE KNGB0_676629270.docdoc 11c9e956f8fa0bec583438196b1457adb98016e8d2acba18d76e48d74b35e9efVirustotal results 26.23% 
2020-07-20invoice ET29_071559.docdoc 140c9851511a6c3eb7e7e60f35611364d0d30d1dcc7c59b884c36274b5c67a5eVirustotal results 25.81% Heodo
2020-07-20INVOICE N1629_105266.docdoc a5d423dc9e62fcc2aa20562ec31565738746dd74ca4f6f99b4e337f59935a8f7n/a Heodo
2020-07-20Invoice_FB57_59165250.docdoc 3e69b7174200a10cb8bc8f7ea400c726561e7f19e2bcf99a5300d998ed98fa43Virustotal results 26.67%Heodo