URLhaus Database

You are currently viewing the URLhaus database entry for https://babysaffron.com.vn/jjyjk/report/o7kpll/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:431819
URL: https://babysaffron.com.vn/jjyjk/report/o7kpll/
URL Status:Offline
Host: babysaffron.com.vn
Date added:2020-08-13 11:25:18 UTC
Last online:2020-08-13 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-13 11:26:02 UTC to abuse{at}choopa[dot]com)
Takedown time:5 hours, 24 minutes Good (down since 2020-08-13 16:50:24 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13PO_08132020EX.docdoc d567a4097feddecd5e5cabcdde2f997521126535222bec36e0514da36a9886b7Virustotal results 32.79%Heodo
2020-08-13NDE_080120_KOC_081320.docdoc 8c8c709e2b7cfd3dce74062f2564bef84cafcc329cbfcafbc2c056c35cc38c50Virustotal results 32.20%Heodo
2020-08-1331164059.docdoc 5dfe99bdd766418f029d534146438a97818581f989d4b2ebf5f92179344000c0Virustotal results 30.00%Heodo
2020-08-13FILE_93382908.docdoc 0532eadbdda96ceadb7250d379491c1bb64d6d40b96bc71d551268896fd4bdd6Virustotal results 28.33%Heodo
2020-08-13PO_08132020EX.docdoc 8a0a74b31fb30ce1a4adbaa3945c4186c7d467268e76b9ca802905b7cf5fa54eVirustotal results 28.81%Heodo
2020-08-13PO_08132020EX.docdoc 479e00f4a39c727821fabea3c681e051bf755f4eb4c10e62f23055ca7f4a9353Virustotal results 29.51%Heodo
2020-08-13DOC_XVH_080120_WNF_081320.docdoc 4b99e8df8f724bfea2f32a9274cf4aa0f41b3e57a2b1ec753b17514149c670b2n/aHeodo
2020-08-13CKZO_QRJ_080120_EYT_081320.docdoc bd7871f1fceddc02727f3be310e4507aa75ac650a9319a03989d0a1c18bc74cdn/aHeodo
2020-08-13TMQ_VFY_080120_TMN_081320.docdoc 9544785ab882041f58e5879a9cbadb6d7058982180ead9e1eef44adf3b92fca1n/aHeodo
2020-08-1311675085.docdoc 96541ade20ee56d34128b8857fc782971f0fd6c62d70d5b4c899b0f35bde5ae3Virustotal results 27.87%Heodo
2020-08-13AQY3761HZYKK.docdoc 11115387b71ec2162713a34b3ced799ace3def99ab9e495234326a68ae1f6ef9Virustotal results 28.81%Heodo
2020-08-13BAL_396633871679927686264327.docdoc 430d07c2162af45022115ce4b557ab182afc95143b698568d50c41832c6b281bVirustotal results 29.51%Heodo
2020-08-13BAL_565970127657364521221.docdoc 52426d2c2644ab78cd7fbe3a9e0d19acbd34903d9f62d42fe2e999b964e3eea7Virustotal results 29.31%Heodo
2020-08-13HWF_3876851918121538304673.docdoc 0c4015de45653ee2f8fc6e338461a2377e14139b1ff879df5a2fe1d3c200a15eVirustotal results 28.33%Heodo
2020-08-13N_UN3622664128ET.docdoc 33dcad34dd7bf732f89c6d54880f01b2f952fd6f08f89062109af185e73d0e22Virustotal results 27.12%Heodo