URLhaus Database

You are currently viewing the URLhaus database entry for http://dsshop.zlygu.com/gBKzfAjYHo/Reporting/oxt45nx/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:429463
URL: http://dsshop.zlygu.com/gBKzfAjYHo/Reporting/oxt45nx/
URL Status:Offline
Host: dsshop.zlygu.com
Date added:2020-08-11 15:12:05 UTC
Last online:2020-08-12 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-11 15:14:02 UTC to ipas{at}cnnic[dot]cn)
Takedown time:1 day, 1 hours, 11 minutes Poor (down since 2020-08-12 16:25:44 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-12Z_EB9759991967UT.docdoc c99e3c74dfec6465026a494216c1ac797697cb816f37baa98d571a089dacb73aVirustotal results 32.20%Heodo
2020-08-12PO_08122020EX.docdoc 25f0b73743327325b14d463d442803004c258fc86d34e90721738869de61490cn/aHeodo
2020-08-12INV_13750609.docdoc 18f46635637fbd2308eef45d6dc7077d90f65163e5ab3f991d201c0d8f91587aVirustotal results 26.67%Heodo
2020-08-12INV_63385721.docdoc d4c552ce903e8455566a265fd7ba1a276db5bf2a88ad998b7c93e89989d1aeccn/aHeodo
2020-08-12REP_81664172440280.docdoc 7eba5b17df94761ce65d93039d81735e0a1525f6b3244704a023df60dd04c17en/aHeodo
2020-08-1290934691336.docdoc 975bbf11f28dfc7c66c6cf49572657178c8ee4acb9d48d403c01bac687b1eedaVirustotal results 28.33%Heodo
2020-08-12H_HV2631410252DL.docdoc 16d2a267cba033c59963d01757e9800048ac1fbcf7cb53595dad21ee5bb027c6Virustotal results 27.12%Heodo
2020-08-12SEY_080120_BTL_081220.docdoc 7d5046f3a9a3765884a6c25a9180fc3521778f6307e706c551bf48fec651192dVirustotal results 28.81%Heodo
2020-08-12996129164714772531710237.docdoc 0160fb33a3b7b03284dceff60e218282693ead61eeef4d2f8bd7387b09cf51c6Virustotal results 28.81%Heodo
2020-08-12817452341360633247.docdoc 1e1197d27bc4e2c81bf36570d41052b3f74d24df43ce0250b2d53d7b2269c20bVirustotal results 29.31%Heodo
2020-08-12REP_6715423179894385673001782.docdoc 121ffe67a99b7c122a7a9812f00830d7a5e9605d6e18ebd7d84e74f2c22a6670Virustotal results 28.33%Heodo
2020-08-12LC0190769967SD.docdoc 05fb55b118852bdde2c76754d2d2b2700accc08481280cc2309ab985aeb86c06Virustotal results 51.72%Heodo
2020-08-12DOC_T59A3ODR.docdoc 9492fa4f34cceef83ff1e6f77bc428777aba7ae617b195a3e6a06d84e5889b1eVirustotal results 54.24%Heodo
2020-08-12PO_08122020EX.docdoc c978e204a4343d19a9b1df57379618a391455fe0f0fd17e49fcb670670c4241cVirustotal results 52.54%Heodo
2020-08-12REP_82519682.docdoc 6f973501cc2dece992aa2f959f8e352e424e96f06abb300b4bed8bcf2ab4bf34Virustotal results 51.67%Heodo
2020-08-1237590929.docdoc 1d2096f4adcba717670858b98912615f7bc86bd95ef6b3117901aa4ae6383d4dVirustotal results 53.33%Heodo
2020-08-1234958873607.docdoc f9f228e552c3971983d4b5909776c052df083b9b41f65f764ceba0dc9d6219e7Virustotal results 52.54%Heodo
2020-08-12UYF_080120_SFL_081220.docdoc 455f02233220edb99d4f99f02ec20a5ad8b3a157bacaeae2dcac14f707613869Virustotal results 53.33%Heodo
2020-08-12U_PO_08122020EX.docdoc 8f78d106bc2f3e79349aabe3d812859febc3039e06dced8aa67b29e2421a9d31Virustotal results 54.24%Heodo
2020-08-12INV_PO_08122020EX.docdoc cbb96bc7d3aebe42ae0bf197554d7224fd693a6e864fdc3bc2f7b5e466986485Virustotal results 53.33%Heodo
2020-08-12XDZ_080120_OWE_081220.docdoc 4c3eddd6a41f348b80609e91f83e3a9e22818758105ce3db1de70777baeae682Virustotal results 50.85%Heodo
2020-08-12FILE_5506029114090714.docdoc 358176ae69d49cbdc29ce5f8965efe9952253949970d9de4e8f09f46c488e6ecVirustotal results 50.85%Heodo
2020-08-12AJZ_ICM_080120_QMZ_081220.docdoc b06fa4a03274712b0d1bea0d2a5d1afc2c71541acb80b1054d31b661b67514ean/aHeodo
2020-08-12INV_RA1386586214KP.docdoc e4d1deaefa7f905c5ce7490867ae09ff2d50fdf4162f102e276653c1c46eeab6Virustotal results 50.85%Heodo
2020-08-11REP_MM0964004716VL.docdoc 5a95e436c4df9dfb41496c96489d1bddf6db2c7d54ccf0761eb61ef1af9c83a0Virustotal results 50.88%Heodo
2020-08-11M_2464419018258.docdoc 896db11ae3dd47bbbdaef6de2e44964142461c89f1fd377015b96affcc75cf60Virustotal results 50.85%Heodo
2020-08-11REP_PA1256186634VS.docdoc 6ef92d63f441bea978f148ae6b93fd26d8feb4716042101e28ebacd3101f6eb1Virustotal results 51.67%Heodo
2020-08-11DOC_OM0061580613LY.docdoc 1aac25866333e7f77dc237137353a0a65ce189972d87658229eae96e3037bc68Virustotal results 51.72%Heodo
2020-08-11DOC_97841902.docdoc 1d09b28a4d454266d52d7d2e5b9aeab2bbf43839ec33c9a7221eafae3c28c067Virustotal results 51.67%Heodo
2020-08-110COZD6M1VE0.docdoc 6c5380e193b725ec3ea512a3146d8c0925c7c489800dad57d1b4b2f940751d22Virustotal results 52.54%Heodo
2020-08-11PO_08122020EX.docdoc ca30b2272a56997f03e6470ff7ef67a05a07abaaa5a436b29c936f7fc34e2dfaVirustotal results 50.82%Heodo
2020-08-11BAL_KI3YJZB1GCBC37.docdoc cbacf0f510ec4c1a5cacd10259c0e6075f65050b602e47fc67409aefcb6af60en/aHeodo
2020-08-11DOC_PO_08112020EX.docdoc 667d0ee592ac9e54d6758d19535eef977352049d274f48289266578e4f7f3974Virustotal results 45.90%Heodo
2020-08-11G_83844627.docdoc 0dc77319f898db1037b996e421c171d0ddbd13166a8b589ab1da97b8bcfc99cdVirustotal results 48.33%Heodo
2020-08-11INV_0653841120133328972522.docdoc 3f9ed468a85787c4bf29a327c525e87f3ac3fed5b4079b2958f3617ef3d3a1dfVirustotal results 40.00%Heodo
2020-08-11REP_PAN_080120_MSD_081120.docdoc 8e5f3490181127db4ae19a0c19a2aab3233016bcc64272ec836a68426ed0ae89n/aHeodo
2020-08-11PO_08112020EX.docdoc 16004f742c9d51196b4a45e665c360f8eecec87448f703ca65f1ca9fd2748debn/aHeodo
2020-08-11INV_84732786.docdoc 2e6ff6d6098f2b63d436caef9146a587a4906131d0cb324b675b959be4d88598n/aHeodo
2020-08-11REP_CBH_080120_MKZ_081120.docdoc dfe95319cf0ecc8daf385929ff7c7cadb747e81a026fdf88dbb55eaf43b38491n/aHeodo
2020-08-11REP_25315570.docdoc 819a2c8717a367ec5a69f4a0ddc0eed9f469fea2415f8b0e3defc94d21813f41n/aHeodo
2020-08-11BAL_ET5536890754YU.docdoc 156c89b670d37466329fb682dd618caf3bd58f87e765cca5964284ab364e311bn/aHeodo
2020-08-11C_ZX9539458251DD.docdoc 5a7268af14b85f336d44d0d10af1c59a02ce7738a4966e2ef96a39574a42b7c6n/aHeodo
2020-08-11969434647079110.docdoc 5ca1aedbc7b3e63e13e3b3263321e12f1d49d668c331db20a1f996b3fd362894Virustotal results 32.20%Heodo
2020-08-11S_XGI03BTV.docdoc 3cbbd9298f3b6d77456b687dba10ecf5f45614573ed3be647167c5e96ef16552Virustotal results 30.00%Heodo
2020-08-11SBT_080120_VBZ_081120.docdoc c81e2afb18ca2f18cd62b5cda110e668e5aa9480cfc9e4aecaa86367dbb22d9eVirustotal results 30.00%Heodo