URLhaus Database

You are currently viewing the URLhaus database entry for https://hftk.ccc.edu.hk/wp-content/pASHFo/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:433605
URL: https://hftk.ccc.edu.hk/wp-content/pASHFo/
URL Status:Offline
Host: hftk.ccc.edu.hk
Date added:2020-08-14 21:39:35 UTC
Last online:2020-08-18 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-14 21:40:03 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com)
Takedown time:3 days, 17 hours, 17 minutes Bad (down since 2020-08-18 14:57:36 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-15INVOICEYYUU92895518924.docdoc b9d2bc9624f1e81b007fd1d89170294eb6eb29c779f83f4e75576a0fa3fa421aVirustotal results 41.38%Heodo
2020-08-15Invoice75499551.docdoc 62832607fcefbef56ee871dd3ef7d35bb36d9b2837e62a50dc05ccac097c6b72Virustotal results 41.38%Heodo
2020-08-15INVOICE_7541_886215661.docdoc 8f88dd80520ccf01a78eb649cc1a7918ff8a0c36019a7b5ecf59ae9c79afae7dVirustotal results 40.68%Heodo
2020-08-15INVOICE_0_4098687.docdoc 2486ff293e8a4ed2b40e6f8292e89850dacdf4d0cc14a085ae4b82cca605c08eVirustotal results 42.62%Heodo
2020-08-15invoice-RHX880-68011003.docdoc 39e1005ce7b833af7d15208f045080aff3d0cea6b1695169d52a4eebece6ed61Virustotal results 40.68%Heodo
2020-08-15InvSE773896003.docdoc dae18dd9a3dbbfc06b5e5c10fc7dc93c670a0c191d7cb7065e9d478503274567n/aHeodo
2020-08-15Invoice_WNUJ7_449234793.docdoc cebc1f02cb5c7f918e32b0703c5cea992c71ac183a21cbe3033ba9c9521ea186Virustotal results 40.68%Heodo
2020-08-15Invoice-ZGL2-739780957.docdoc 5028de3ce60c62f1e99fcc961491a81d8a3315f89afef5015243cf80d77872fdn/aHeodo
2020-08-15Invoice_KR82_757082.docdoc 40f8be090c2e10a4175b11315d5adbd548b1a079fb450c6ff18b82b5ad0d75ccVirustotal results 40.68%Heodo
2020-08-15InvBX8252689.docdoc 1fa982bca8d93cd9a5ed44c8adf3099360cb86476a38bcaa476ad2e23b32d854Virustotal results 39.66%Heodo
2020-08-15INVOICEPQBD33676254991.docdoc b50b82d54433037c2321938527d4485ff439d6f6d5871ca14b88b0c887a51116Virustotal results 40.68%Heodo
2020-08-15INVOICEYBF61197293172.docdoc 4ac2ea7a4562ab7ea7c23ad733c0e4d0767936120e16b62e0248ce2af1beec1fVirustotal results 41.38%Heodo
2020-08-15invoice_NE22_204123053.docdoc 94b9821024615e536b2196b18ad6a0c092e4030cc19a99f35d6cf7637a4a3eafVirustotal results 40.68%Heodo
2020-08-15Invoice-BVZX937-190448072.docdoc 911f2bfa86abc00f8fc2ea9dfbe597349baff6522fff47de22aa0ae77f31ece9Virustotal results 41.38%Heodo
2020-08-15Inv_PAA718_781741168.docdoc fadbd33657aa2e9150143d82b696f5792afa254e412b4954693fbc91b55641e1Virustotal results 41.38%Heodo
2020-08-15INVOICE-84-1487186.docdoc b3b1d9de78d806f5d6869abbcf8eca4d70fc0167946479c7a173ac9729ef799eVirustotal results 40.68%Heodo
2020-08-15INVOICE-6885-284863457.docdoc 7685045c26c2b57ea45d561d8f6b9d4746939825e90633a6e3d72480686c1858Virustotal results 42.37%Heodo
2020-08-15Inv-87-344557455.docdoc b00ef999bf0f3b740c17d0cf0c144ca54dbe9ef7884951408eaf44bc3b5817cbVirustotal results 41.38%Heodo
2020-08-15invoice-YK60-41799664.docdoc bae86b6997572490c22ffc81ad1e24ecce68f3d2124066b202be498fbd9b7d72Virustotal results 42.37%Heodo
2020-08-15INVOICE-K048-18167368.docdoc f958c9be7d193c83d67373d0100e6f714b2b9b1ef17458350baaaedbe2526d96Virustotal results 40.68%Heodo
2020-08-14invoice 6 1536780.docdoc 65531b466ac29ac2fbbdd69e1f6408eccbd82b4a998e13fe2ce4592ead35deffVirustotal results 35.59%Heodo
2020-08-14Inv RAI4 004647.docdoc 5ac2b940e6a9bb518d04bcaa38e706d0604dd1c60691ebf2730c04e82aa11524Virustotal results 37.29%Heodo
2020-08-14Inv-YUP585-217152157.docdoc b86c240ff73da180f757c89c445ffcabe432f5274d37075086d28f00b41871d4Virustotal results 37.93%Heodo
2020-08-14INVOICE_U388_41066869.docdoc 5a339bed662000c7482bef1785340e56fb3f3a495dde5df8e37cc237ac111374Virustotal results 38.60%Heodo