URLhaus Database

You are currently viewing the URLhaus database entry for http://bangkokglass.com/wp-admin/open_array/close_jgjq7fwy_j2go5/54728683070977_3VceX9m/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:420151
URL: http://bangkokglass.com/wp-admin/open_array/close_jgjq7fwy_j2go5/54728683070977_3VceX9m/
URL Status:Offline
Host: bangkokglass.com
Date added:2020-07-27 20:44:05 UTC
Last online:2020-07-28 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-27 20:46:02 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:15 hours, 49 minutes Good (down since 2020-07-28 12:35:14 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-28Mes-2020_07_28-491267.docdoc c8892e7948064da3a177d91a7d657f17747d2b8ebaa0da44eb2ae0940ce5c2afn/a Heodo
2020-07-28File_2020_07_28_I357.docdoc 4545350210bf1fd8b012fbac3ea72c145dc9d12457597946a9e2b1c167659bfan/a Heodo
2020-07-28arc-2020_07_28-WI05056.docdoc a37dc4182d7ffca273b56acbe0cdddcfec2f23b05fc1cb5fe0a551f58f7ecc7fn/a Heodo
2020-07-28ARC_2020_07_28_145.docdoc c886af6a164ef32164d83f2dbaa1d353aafb9289858ea9bb2e78674b4ed9e632Virustotal results 39.34% Heodo
2020-07-28File_J60570.docdoc 7c76382a386308e490c7bede412bce41103071c93c2908cb1ab8489eb302b31fVirustotal results 40.00% Heodo
2020-07-28dat_2020_07_28.docdoc 49a829db25a031f897c810bec82adf3f2af0166b1d5043dcec07db0ba72546b0Virustotal results 38.71% Heodo
2020-07-28Rep_20200728.docdoc 0086265c2f4da7654f02494ee0cbf199fc621cd86d4d0b7ed80b5af62252209en/a Heodo
2020-07-28INF-255.docdoc d23680d922e87a0b9bbaad4803126f3076c1208e1efe41f35f6b212dcf32a460Virustotal results 38.71% Heodo
2020-07-28Mes.docdoc 504fa30fd0f82b9b4ca1ebd125ab22a5aaa20e50c9b2082e7a9c0b0eca53473eVirustotal results 36.07% Heodo
2020-07-28file-FV1747.docdoc 7f901905cee7f7176e3a6118e01efc82181b58cada7801cc121f2d440c3781cfn/a Heodo
2020-07-28Inf 2020_07_28 8067.docdoc c7448ad9350a3fb4c2ad45057915f3ff99f9be1ac729df1c4a210feb9b9fd9e3Virustotal results 37.70% 
2020-07-28Rep 2020_07_28 5430.docdoc 8ad5258045f9c1ec73dd06d74b5b6157a12c15166fa0c8e2fc8106e78227af6dn/a Heodo
2020-07-28rep_7078893.docdoc 98512d3cdde2d7ee7c25a7498e0b82cfe878002aeeb60bc8d9c1c77aa8230541Virustotal results 36.67% Heodo
2020-07-28inf 2787368.docdoc 2550a5c3df58e8632ee9c585e783c4e58113931859c01984fb707b11b1627bd8Virustotal results 38.98% Heodo
2020-07-28List-20200728-20047.docdoc 330726fccc1b858ccb1e4a089c3e56c7fb91905f08ac6da536160d625ba3531an/a Heodo
2020-07-28Dat_2020_07_28_QMB6168.docdoc c777c2cbf20f13d04f0e4c21bd8ba2bc44cea5e4b2992ae58a6d6dfe6fb53465Virustotal results 43.55% Heodo
2020-07-28ARC-2020_07_28.docdoc 6387bc4484750efab15cb9bc530a51f91ce86e20e43c10d496b70b4e3afd99bcVirustotal results 44.26% Heodo
2020-07-28LIST 20200728 FQ9028.docdoc 016d35e74af3e0f39c21c51cc13daaa14078437e8b3b01d09f9ffb46f64551e0n/a Heodo
2020-07-28dat.docdoc f17c0f459fab0492c863e99c1a5792ad48d11acddb5e049a6b4c39f99ce8b344Virustotal results 43.55% Heodo
2020-07-28File 49291.docdoc 5d30cf78ec026213975d6d3450f121e6eeaa19836c38bbdccb18827071c6aa45Virustotal results 43.55% Heodo
2020-07-28file 2020_07_28 5317.docdoc 9daf8a671b527a71c8a7a17a95ee2828e782aeb81f3e718acb747945a617bb2cVirustotal results 43.55% Heodo
2020-07-28Doc_20200728.docdoc 1a96354d5160003954ee2b2cda62e5aeb5d637ff5783111aa169ec5c84b4a422Virustotal results 43.55% Heodo
2020-07-28ARC_20200728_C891.docdoc 4ca4d1e4470fc34af7ba6930b887d43ae19fcd3a58253e8e08dfca1543e49c7aVirustotal results 44.26% Heodo
2020-07-28INF-20200728-H27292.docdoc 6f752dcbe61a11bdfe7b1b0d52104ba5efec6539f9588696876a091ae7feba58Virustotal results 45.00% Heodo
2020-07-28list_2020_07_28_8548068.docdoc 21dce6efb379371051277359737d8c090f5bd3feb2322f04fadc8c1da068432dVirustotal results 44.26% Heodo
2020-07-28Mes 2020_07_28 56503.docdoc 1285ab067041ccc47554c1b6a78dd2ab191d2426e7242817235a92f1f674307cVirustotal results 44.26% Heodo
2020-07-28Doc-2020_07_28-9413.docdoc 88f424caef167c363184d8497774224063f29ad00f73366ac8d1cfe921b19741Virustotal results 44.26% Heodo
2020-07-28MES_9356.docdoc ff97460ec476ba0b1dc6bf5044dc590c950725e79412fb75bcb38f37bf94e227Virustotal results 43.55% Heodo
2020-07-28REP_6096.docdoc c8f7207b776cd41fd7bbd4a9c1bba2c4c1161dc9a1e132d8754d87743107e43dn/a Heodo
2020-07-28list_MX74506.docdoc 0eac07138b228f378cdcf932ae99d43434a3a644db3255f402e18a63335e9ff4Virustotal results 44.26% Heodo
2020-07-28ARC.docdoc ae7f037dd7436f637bbb6f62f4a44f2dcf5ddbe56fa25edd87e054d203e34d27Virustotal results 44.26% Heodo
2020-07-28MES A7181.docdoc a07b7087aa9e62580d3df6662c97f7827de42955fe766f0969af529daaee016bVirustotal results 43.55% Heodo
2020-07-28Rep_2020_07_28_D274836.docdoc 9d32f23c8c61faa7b6ae9f24670750fe5414927f4755d59c5bb178b8bb4e0dean/a Heodo
2020-07-28Dat_20200728_S975279.docdoc ed42839bc1ce973dc9b130fc3bf6f29300210d2351b6caae9b715bbaa5a50e8eVirustotal results 44.26% Heodo
2020-07-28Dat 20200728 E812.docdoc 65750bf28b7d4acf01b9eb045e261c88920a881299f29c97aff7ff4d42be2104Virustotal results 43.55% Heodo
2020-07-27LIST 2020_07_28 307661.docdoc 80c2733aec99f5aab73c4555949f84ae4ebf7369955d07fa9a0c4a8d06265fe3Virustotal results 44.26% Heodo
2020-07-27INF 2020_07_28 466.docdoc 89c0676d70b229ef63b2b04b4a00aec67e5b583e4d8ca3eb06434f7fffae1dbbVirustotal results 44.26% Heodo
2020-07-27list_2020_07_28_QXA920039.docdoc 9b9fc48b3a867f41ceafcad4eb30f015f67a30ad192aae45018b530c6f4bffaan/a 
2020-07-27Rep 9409.docdoc 6318006343841f00c3c81c36a2259fc2744780c8d0ea1de93d8920116f8dd2acVirustotal results 43.55% Heodo
2020-07-27LIST-20200728-82738.docdoc d5c02f77a90c627c04faa9dabbeb7271d11a7df0749d07af987994c830ea0657Virustotal results 45.00% Heodo
2020-07-27DAT_2020_07_28_120028.docdoc f9e21c32753d07b9af540aa838505f4aab10a1fc3e670affaae3c322976891ffVirustotal results 43.33%Heodo
2020-07-27File-2020_07_28-5558.docdoc fa3daccc5bb500ad9b60a7054441ea832c9f792285acbe3dfdb188763bac9019Virustotal results 43.55% Heodo
2020-07-27doc-2020_07_27-37332.docdoc d53a4cb7864f052064e6f1ac8c44d2b19adf97f76c8649ae19690e73fedcd67cn/a Heodo
2020-07-27REP-T9545.docdoc 8bcb81a90d9831d9b0ffd723b83b907cbf0011de32de2cb18c01cbd66b11d47eVirustotal results 41.94% Heodo