URLhaus Database

You are currently viewing the URLhaus database entry for http://amoy.biz/wp-admin/statement/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:437997
URL: http://amoy.biz/wp-admin/statement/
URL Status:Offline
Host: amoy.biz
Date added:2020-08-21 07:26:34 UTC
Last online:2020-08-21 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-21 07:28:02 UTC to guixiaowei{at}huawei[dot]com)
Takedown time:10 hours, 27 minutes Good (down since 2020-08-21 17:55:12 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-21DOC_1516617270.docdoc fbd63265ff2f62db6c66adcef3562a678b0243b77f9be2a726d4bcf87f68a9c8Virustotal results 28.07%Heodo
2020-08-21DOC_3749947177.docdoc c6a5cc3476c048456af1997e698dc72231c1be3e590f6c9783e8adf136320f46n/aHeodo
2020-08-21LQH_080120_IGT_082120.docdoc 77460cc133315ccdfbdaf1546ce45acc79abed14bb832947ca2dd33c1425dd49Virustotal results 27.59%Heodo
2020-08-21K_EA4439464878CR.docdoc c8ec1a9b7d385d96166c22f142d0437768d0db460b1cbfcc53cd796bb0662569n/aHeodo
2020-08-21CRU_080120_ZEP_082120.docdoc 33da171c98a915b6b46ee6b15f06b10f57557c479fe659f138921a4578264ab1Virustotal results 27.59%Heodo
2020-08-21REP_PO_08212020EX.docdoc 3e8208734b44f5600a38c69cd3cd3275d2fe8dc82af7ec78c8619383741b66d7n/aHeodo
2020-08-21VE_PO_08212020EX.docdoc 7e98e23799012588113a6d4c049b1b61fc8e47b51c62af6f7f6ce336f28057c1n/aHeodo
2020-08-2121208474.docdoc a733a4e6024de8fb8639c32f10763eb1350346440beca5654a2d0dcb93ad94f0Virustotal results 22.03%Heodo
2020-08-21V_PO_08212020EX.docdoc 92ce63816306ff769b615c927a2677d7a4d1eecdbe7e6bc825ce4a446df1bc7eVirustotal results 22.03%Heodo
2020-08-21BAL_EKQJO060GYDXBQ1.docdoc 6eb69e6bf953f664d116b1f723231c894c54ff4b2482e3f9d1120b10fc541bd5n/aHeodo
2020-08-21DOC_QFZ_080120_PGQ_082120.docdoc d88027c8f802a9c670d326835d3153aadf2dd191cf9bf60148bc6532b6614402Virustotal results 21.05%Heodo
2020-08-21LP_FRC_080120_IOZ_082120.docdoc 433bd7014b1db029a665161fac7e7d4bb209d6f0f7792f575de1d3696e80c064n/aHeodo
2020-08-218836574705562.docdoc a8f4d3cce2e44d80f854033bc5abd85b25fef08d58f6cd0c2e3624ab6c5833bbn/aHeodo
2020-08-21BAL_XTD_080120_RTO_082120.docdoc 83912e356ffc063006637864e3ceed204efd7141ac92b7ff91fc4e3372c2552cn/aHeodo
2020-08-21BAL_JR3428653658FP.docdoc a4308cd5bf5a11d526bb77831b37c61fd990824875e2f12e11ec5a6ef1fbc863n/aHeodo
2020-08-21INV_HGP_080120_JIM_082120.docdoc eea83be73bb6b63138b070ecbc75bc0af0a8f6540fb9125735eda75701adc2b5Virustotal results 20.69%Heodo
2020-08-21H_PVN_080120_WZB_082120.docdoc 9bef601df3e482ea5b723a710c2086bab43312b7c275da979b1765cb7660f060n/aHeodo
2020-08-21FILE_12432542.docdoc 28f2d62905428be69bb94405cef4459871fb4d34be7d8e1cd99be4088802ce60n/aHeodo
2020-08-21INV_33273019.docdoc dfa53b1ba591b08dacd3b798dedee90d559b092102517b46cd1a04bccf51e386n/aHeodo