URLhaus Database

You are currently viewing the URLhaus database entry for https://vietnamvisahub.com/squirrelmail/esp/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:445134
URL: https://vietnamvisahub.com/squirrelmail/esp/
URL Status:Offline
Host: vietnamvisahub.com
Date added:2020-08-27 10:13:04 UTC
Last online:2020-08-31 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-27 10:14:02 UTC to abuse{at}digitalocean[dot]com)
Takedown time:4 days, 9 hours, 42 minutes Bad (down since 2020-08-31 19:56:12 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-29DOC_KE1F0JT5GTS.docdoc f1ed5734203faafd1922ea7eeeb1da3796b74c59e4384d52c76b8285c8847ffaVirustotal results 50.00%Heodo
2020-08-29TWW_080120_SSZ_082920.docdoc aada778a6ee21579478c37d9f766a74e2abfae033441a997ea715036316c9eefVirustotal results 34.48%Heodo
2020-08-29REP_PG5224456981EK.docdoc db5d1df258f52d33f22c630cbe8f27f55e548e910d8b851365ecc612bab09177Virustotal results 35.59%Heodo
2020-08-29DOC_8777816561341997683.docdoc 38980ed51fea682ccd94c26e1c48ca4b80f688f626265074b929ade1f3fe97feVirustotal results 35.09%Heodo
2020-08-29DOC_FN6089462960FN.docdoc 651697a7ad4735c29617111afdad056545ae1047760f46b4266c80cbd4b784aaVirustotal results 33.90%Heodo
2020-08-29TJ3727887628AA.docdoc 01371d2802721d16a5f83938f491a4b8896161541b7f5cff1fd68a20f93f29a6Virustotal results 33.90%Heodo
2020-08-29D_GDCPSY2WIAZI06.docdoc 90117293e042457260a21831780730f0d186e8abe74fe2cda3f29051957cc19eVirustotal results 28.07%Heodo
2020-08-29BAL_NL3728428780UM.docdoc bbd7d9170384c24b88d84a764d2156cc236521e2c52879e5d369598c6c425ca2Virustotal results 35.09%Heodo
2020-08-29S_PIIJFUQVW.docdoc db1d3d2b15cc11493eabf3ae9ddf03d01861c1699b81a760eef10f48a9c4a2f0Virustotal results 29.31%Heodo
2020-08-29BAL_VA3RPY9FAY7BVA6.docdoc 2b8c2b9a9c7d844ed52ed9144f940f325bccce6ad4c74c524b4470ee94a583ffVirustotal results 30.51%Heodo
2020-08-28FILE_33239188.docdoc 933af4898a9ce638e04dbcf02e075e9f7eecf02ab22cebc4488517cd415e1c71Virustotal results 27.59%Heodo
2020-08-28REP_XM4846383575NT.docdoc e31a7e9c02b687608ce8ea7d693175ee228377227a654732f47f303c1f3446ebVirustotal results 29.31%Heodo
2020-08-28SO3446339285RL.docdoc aef46f7e71936aca8da4fff081f587fe6293f09dac7b27fc70f372088eff86f5n/aHeodo
2020-08-2806549881.docdoc 167504fd75c887fa1e091030f6f8899e57917c86c6e455c8f7fe99b378bb5f71Virustotal results 26.32%Heodo
2020-08-28L_15860555.docdoc 3e8f3a7d0d0ce8e8ab7b5363b9c12f3219bd75974ac09118344ccc9c2b727727Virustotal results 32.20%Heodo
2020-08-28H_65892851.docdoc e5cbe16ff82c0a8778906a889f99a6cc41def9921e1944cf107eab74e277559bVirustotal results 28.81%Heodo
2020-08-28BAL_PO_08282020EX.docdoc 3a81d48dd27d252c1d0dbbbe11a02671bc68c7b1970611a1bde4bcf3beaea556Virustotal results 29.31%Heodo
2020-08-28REP_PO_08282020EX.docdoc fb2ffb3aa6e2a0f7a272c7bae05e700460c73f88daef8b34d0ae4332116d3ee2n/aHeodo
2020-08-28INV_918144411053102.docdoc ee29512c5b03c9ed1e61787453c9f50c1e5afcc40d8f85035f0ecf15a42d590dVirustotal results 29.82%Heodo
2020-08-28FILE_XQWOZB9.docdoc 68f960235494adcd4e722b280c13566979b98be7be465bbd4633e46714865c27n/aHeodo
2020-08-28REP_HNL_080120_YEW_082820.docdoc 45c6cbf3a848206d33f3a4d92ca9ac6f3511b39227d46e433887c00384ed6f56Virustotal results 28.07%Heodo
2020-08-28E_95015501.docdoc 0c51eee9c5ca9e421ccb8f2eb140242b588a143fa3ef4e057f065c6c0a8961ccVirustotal results 28.07%Heodo
2020-08-28FILE_EGA_080120_SQU_082820.docdoc 0e70e3ada8da3918452f2a0823826578e3d48efee5e4f45744a65d2b3b26e4c2Virustotal results 27.59%Heodo
2020-08-28INV_31437352.docdoc 894b67e8fdc469d458ec7f0970172a3671d53635c004c3ba4c3f85a650c55ea1Virustotal results 27.59%Heodo
2020-08-282DVZ9QPZS2Z.docdoc 754f9647f634f6a834292d07b6090f68152ad23c2e206f71ea869dd8168753b9Virustotal results 25.42%Heodo
2020-08-28P_695805928470498595256888.docdoc 7e0d736d186b93f5aa23d35a91d88f8b17f3efd87282f263809327c56b084359Virustotal results 27.59%Heodo
2020-08-28REP_PO_08282020EX.docdoc 1803fa537b36e16132a5b47171a58d1ca83f5254575e790017e36517709a1a01Virustotal results 25.86%Heodo
2020-08-28VC8215973799LQ.docdoc ebbbf1104be5c5f4f000285e72aa802cdac327750e71a35a101e4ecac224d1d2Virustotal results 28.07%Heodo
2020-08-28PO_08282020EX.docdoc 74fd5e51184bd860adf8fa2da123bfc7876d06d7ac5007da67eb4a56f54640a8n/aHeodo
2020-08-28REP_3085126613751980.docdoc 1324cdee7c8703547e61f73304abbfa0e134df0a5ffd1d9cda593e4a1b9110cdVirustotal results 32.76%Heodo
2020-08-28FILE_136213185.docdoc 3ddf3600b1feb4c4e8a3ae126b798a2e61ff41794ff84e9f28d87080811c4899Virustotal results 31.03%Heodo
2020-08-28BAL_PO_08282020EX.docdoc d1511a600b9d22d7d714df89c667ab913ccfe116fad6aa3759320416e83f6e23Virustotal results 28.81%Heodo
2020-08-28B_70626922956404450.docdoc a4117099377670eba3962f275ddd4d5588e792f7bbb92134f206d72bdc6968e6Virustotal results 29.82%Heodo
2020-08-28INV_WRQ_080120_YFZ_082820.docdoc c4cda086323512134f845db4fcbec97b3eef21782d3378e21ed8e054886dc2ecn/aHeodo
2020-08-28DFT_080120_VPC_082820.docdoc 897badf4396e30453715e24d47447d219f4fd288e60ae52935136278138dedcan/aHeodo
2020-08-28REP_TV2350157623QX.docdoc f35f09ee31dc9ba4c3d871882fadeeb10ed716f5a87be56e6129b111b6e5e34aVirustotal results 48.28%Heodo
2020-08-28BAL_27611296.docdoc 8658e7ea7f3c4c680d6ddeecf93b59b9bfd3298d79d6f0e7a5c3d9aa1623d961n/aHeodo
2020-08-28PO_08282020EX.docdoc 88050d35083b23cbad8c80519f05c4c66eac22c93834338cbe483737e6b2951cn/aHeodo
2020-08-28INV_PO_08282020EX.docdoc 2507d621fe85fc30dc544957a545cbf5ce274ab84800ad014786c512d4a988a9n/aHeodo
2020-08-28BAL_QA0144696100BW.docdoc d08315a0a97b0c8716273b13bc52e85c717f2f90d04b0b1dbe88b33e08d90d66Virustotal results 34.48%Heodo
2020-08-28PA_59IGCVEW2J.docdoc 642f0b1333a6ccce34906af2c3332ee52c9580f7b91ce7e4fb658e0915b43e73Virustotal results 33.90%Heodo
2020-08-28Z_28543018.docdoc dd585fa2ba0d6fed90358f7f48b7a7afb9b551a59e451d038ef343b132e816ddVirustotal results 32.69%Heodo
2020-08-28DOC_KQ6017253938YP.docdoc 4973fe95424cea1f65a76c293b7cf977293357df6a74e80b2be159884bbf727fVirustotal results 36.73%Heodo
2020-08-28BBH_FY8755604619JJ.docdoc 8924cd43cae04cf71c93149b8d2a6729ae28edc120bff304e833416121085341Virustotal results 33.93%Heodo
2020-08-27REP_ZE6253518396AZ.docdoc 56a5251ecbef61368cccbef64fcec4d5a5d2355f2187f9a26708901b205441e6n/aHeodo
2020-08-2735576190.docdoc ccac07133f39ba8959ded1de431ebf94504a7fbd3dc3ab932adbc13030533638n/aHeodo
2020-08-27INV_PO_08282020EX.docdoc 5ea25ce6387f4fc4d741273dda0eefc709a68ab1fe384cffee188f091a2945fcVirustotal results 32.20%Heodo
2020-08-27DRRE_PO_08282020EX.docdoc 6e90df31ca22290bcfbe1534826b71d5f71962a9c1841911be1bfae3fc033d39n/aHeodo
2020-08-27INV_LZ3808359554UZ.docdoc 41944366953e90e2ac766eaabd79ffe7025801a5561368e1d9e382f9288c4d3dn/aHeodo
2020-08-27C_PO_08282020EX.docdoc ea1ce5f9d12c67465b28319cf9b23a41cf938fe17878362a3a58f68bd85a9703Virustotal results 33.33%Heodo
2020-08-27REP_46621688.docdoc bc591a14fc5b3d958ddf47dd0ab1ec96d1d8c2a5e2d3325f5f5814672df4f17dn/aHeodo
2020-08-27KY7826327883ZS.docdoc 493671484f84dad38024d17bd7abd744b827836b03d67c3d1ae8f24e2617c29aVirustotal results 32.76%Heodo
2020-08-27RE6224481492NI.docdoc aebbc22ec298ff9ceec0324b8ec99931c2ad41c220935c5baed852233de7d61fVirustotal results 32.14%Heodo
2020-08-27067830130610492128022.docdoc 35da2a043122e43ce1a120246b4e1087eeb78de3d7ba0ef7cf2f33b0a7f470dbVirustotal results 32.76%Heodo
2020-08-27V_85797834587129550802.docdoc b9e2a8c85d83c0a54743d72c3e4f2433957898eafc163f465c6b2450a30f4447Virustotal results 32.76%Heodo
2020-08-27INV_CB2591346835TT.docdoc f8c0ab3bc7ebbd986e72a712fa194d1c05d9ae0c804a39442e5beebcda5934ffn/aHeodo
2020-08-27Q_PO_08272020EX.docdoc a95a77a3739d37fad99204a70ad398923274bc834a29efe0e3ba63f61e9635d3n/aHeodo
2020-08-27H_PO_08272020EX.docdoc ccbec7c415a115075ab4ecf2249d256febfc1e2801884c31156837c8a3e5f8d6n/aHeodo
2020-08-27BAL_PO_08272020EX.docdoc f0ea286853f8400fbb5b1b42414974133b5b477aefa7003271be47856f8603e7n/aHeodo
2020-08-2709595248132537.docdoc 34d6470d5f0e11c1f120811badd92af472d94598fb4e476c55dd91434b63377cVirustotal results 32.76%Heodo
2020-08-2742427736908319.docdoc 16c7a22b63e70322f5531e616e5cca7114e5b92a37ff13669587c767b02b58e8Virustotal results 33.33%Heodo
2020-08-2714967452.docdoc bc43939828fd6a1666c50e5e4976c5f62968fefcf20351b2e0d36354e24afac6Virustotal results 32.20%Heodo
2020-08-27WC7129295160YF.docdoc bb699717744f27bea319547bf28c60bf7f8f2e77ba8b4af89e00f5b6aaa09f5bn/aHeodo
2020-08-27T_KN2164279172DG.docdoc 72a047a55409445c1767467b0e67391b0fbdb99be5b2e6a5457df52c7e2ef398n/aHeodo
2020-08-27REP_8YJS7HY4PXMECQ.docdoc ff0302507e7b8d9f6cc614e90bdb200ec5bee9f579514c9ab4c50c78703bc172n/aHeodo
2020-08-27DOC_484433658111.docdoc bfe6821a2f994aaed80a8810db2aa42952e2566bbde4acdf4803a58fb16badd9Virustotal results 37.93%Heodo
2020-08-27INV_EA2796206717LW.docdoc 1aac85793b05d579947f7b36180f1fa8da727aa218e4b94926bb87092336eb53n/aHeodo
2020-08-27C_51009565544219.docdoc 952538ff917ab5d3ee99b631731526300164f3b607818d2cd99d019ca5add14dn/aHeodo
2020-08-27FILE_ZC35SR9X1B.docdoc bf913198774af473c451fa304746ed1434412a8f1c7706b2e5f12c6cf1827249Virustotal results 28.81%Heodo
2020-08-27PO_08272020EX.docdoc 23745a515c547cd80f85106940b7feb4f83e248a7cf96b2a45c2ad63214e161fn/aHeodo
2020-08-27INV_2001199917.docdoc 991d1c5d354ae5640d55186accbd371791d03c05853b380edcd80ba40e515861n/aHeodo
2020-08-27INV_889780175611.docdoc 38923432e3f3c288a95ad269e276d83fc311457e325def95858c499997a5e00en/aHeodo
2020-08-27K_22879962.docdoc 7ced0edb2d9b79fb24016395d6078ba03a2ac36fe0c76f2619e0fa66c8bca3a3n/aHeodo
2020-08-27FILE_66758492064398824045397.docdoc 8b1e85e899250ae238664c29df61c908610d31299f75ab0da17ab24d8e89725eVirustotal results 29.31%Heodo
2020-08-27H_PO_08272020EX.docdoc 59102c908645acebebbe3a0565e89b326f3ae44dd1f0babf9d10a47a01e1b46fVirustotal results 29.63%Heodo
2020-08-27DOC_85655479.docdoc 43adfc38793761eb64cc935275743618e593fea7c5502fada3b1212413e8be8dn/aHeodo
2020-08-27BAL_98982095365580723887.docdoc ea0a1a0d3fa914cccf886468a3e20c38d9e1808a2092bc923150fd33514292d3Virustotal results 28.81%Heodo
2020-08-27XIX_080120_BZL_082720.docdoc 4f8b5df5c453f4ad794513fdec008b16b762eb19519f909235c00e694cc0589fn/aHeodo