URLhaus Database

You are currently viewing the URLhaus database entry for http://zanxcx.com/wp-content/qwcrp7w/7py47472163887565275gg3596qdka/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:430287
URL: http://zanxcx.com/wp-content/qwcrp7w/7py47472163887565275gg3596qdka/
URL Status:Offline
Host: zanxcx.com
Date added:2020-08-12 11:07:11 UTC
Last online:2020-08-12 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-12 11:08:05 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:7 hours, 6 minutes Good (down since 2020-08-12 18:14:45 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-12BAL_PO_08122020EX.docdoc dd4525e6914fa0fd2f91bde41f2df30ef8857b9f08c19e0a106ec78098ab63c1n/aHeodo
2020-08-12DOC_CY8556892237NA.docdoc 1b43dacaa3825888c4583607901a5fad687f60840690fa8dfb7b5ab72e28c27an/aHeodo
2020-08-12PO_08122020EX.docdoc c99e3c74dfec6465026a494216c1ac797697cb816f37baa98d571a089dacb73aVirustotal results 32.20%Heodo
2020-08-12REP_VV186Z8NW.docdoc 4020a8982e70b51b150cd40a837ea5dfceb35f0a6c9f9858b3fae5e00404ae62n/aHeodo
2020-08-12DOC_72192570.docdoc 1f1a6a0dbefcc80a0303cdd5d9efc76784286fe3003a19b0e1ca9e0da6b7d030Virustotal results 30.00%Heodo
2020-08-12INV_1AIM7HPVOTJKIAT.docdoc 555eec27e492447bbe5bb1313613ba7edda123de03e384227bf9440ec1965da9Virustotal results 28.33%Heodo
2020-08-12BAL_MLRDJRHTSC4VZ.docdoc d49ceafe59b20372032a83bee0b04f5ea7bc91c92258d386bac309f97206627cVirustotal results 28.33%Heodo
2020-08-12DOC_53608566.docdoc ae3f98c31cbf01b3809feeb57990ae8270686b4e716f2c8971f8408ca1676532Virustotal results 28.33%Heodo
2020-08-12BAL_PE7917525520UN.docdoc 92fe2e08d235d92a0378e842d305b9250f77f306642def6eab93a7bba7e5d542Virustotal results 26.23%Heodo