URLhaus Database

You are currently viewing the URLhaus database entry for https://hftk.ccc.edu.hk/wp-content/DOC/41011060821991/tFyaJ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:445162
URL: https://hftk.ccc.edu.hk/wp-content/DOC/41011060821991/tFyaJ/
URL Status:Offline
Host: hftk.ccc.edu.hk
Date added:2020-08-27 11:32:05 UTC
Last online:2020-08-28 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-27 11:34:02 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com)
Takedown time:17 hours, 53 minutes Good (down since 2020-08-28 05:27:41 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-28O-080120 SMDW-082820.docdoc 7e0d6fc8bc7a69d5e27e2130c83b434512af52a5337145098c2426f62abf97eeVirustotal results 33.33%Heodo
2020-08-27invoice.docdoc b1f8d82d19d6020ac3606afc8e0699ddde66a03ce07d5d7f6b6bc45a238084f2Virustotal results 35.09%Heodo
2020-08-27invoice.docdoc 474fe5a4009da897047f91b9d9b8f40aaa5d674955f0815934507029c7038976Virustotal results 33.90%Heodo
2020-08-27August invoice.docdoc 76ff36beee5adfbdafc1d075a31c72a4248da042be28f164fccc219f820b90a3Virustotal results 33.33%Heodo
2020-08-27Inv. 40512838.docdoc 97dfe06b3f4e9ebb2beb149355b82886fe468ce91c30adb82a16097ec15cbdfdVirustotal results 33.33%Heodo
2020-08-270060951.docdoc d7c4c7378b94661a714fe656b5ec74214db2780401d214fb0faa2d6d7b627199Virustotal results 32.76%Heodo
2020-08-27Copy invoice #89279.docdoc 55729022c3684fd899ee712d0d0d3dbfeb5161fa842b101cd28dfcf85ead1a74Virustotal results 32.20%Heodo
2020-08-27763176.docdoc 249258e389c57dae809f34520051324f678dda2c946e37189377ac5ee3a7c8f2Virustotal results 32.76%Heodo
2020-08-27Inv. 0001118562124.docdoc 9293848a589af567094cd2bdce0ee80f984253bfc03742c8784009050f881b36n/aHeodo
2020-08-27Copy invoice #825052.docdoc 5bf845e70cde6a5112d1aec081e98995bc8494ce31682762bad07ec7c92a2889n/aHeodo
2020-08-27invoice #33293.docdoc 46311c56735daaa51d8a66e1083b0a7e9c481284ce049527d40b15584da4e44eVirustotal results 32.76%Heodo
2020-08-27August Invoice.docdoc 7b6888dbb025af550f9a973dc79ee2a0ec62237cb93a5e504b18761976eac998Virustotal results 33.90%Heodo
2020-08-27PO# 08272020.docdoc c2c840c18a5cd6eb5a60c30afe7695b1068bd8ebf0e5fbd5c6a166f9c15767c4Virustotal results 35.00%Heodo
2020-08-27Z9741878653HC.docdoc bd389be93c4aec08317b46159c7afbb0dc573ec9d6310e2d0deaa94f3f2b577dn/aHeodo
2020-08-27R-080120 THGT-082720.docdoc 7edd3c85a54dac34d665264c15e59c4129b3804b480c865caa8e08c21b401febVirustotal results 35.00%Heodo
2020-08-27Invoice.docdoc eabd205d0597750c6a3f5465e5e597bc6dc1628bdc539cae4cf2dc9cd206cd80n/aHeodo
2020-08-27INV_174715.docdoc 6c08a03c8d6eef6f9a917dbecc7d93d721545f0df5d5d17f49c166cd47f5ed5fVirustotal results 35.09%Heodo
2020-08-27Electronic form.docdoc 246c8ce88bce46537c2ee49415194017dccfeeeaf35e0a7189f1500c3dcd7764Virustotal results 35.09%Heodo
2020-08-27Inv. 86967751.docdoc 5d6f892d3a27c0036838a9ed0851de7ab16016a83452253649b704a2d3dc65f1n/aHeodo
2020-08-27Invoice 13038.docdoc acd783e858cf2fa74737eeaf680f84fb090e3c202b2cb3707b4a668873a77c99Virustotal results 34.48%Heodo
2020-08-27Payment status.docdoc a95e7a4e8ac930ca689c3f465c32f29386269c855a3ba16dbc98b3f891c5a67aVirustotal results 34.48%Heodo
2020-08-27August invoice.docdoc 80a2c53fb1f88e51e6d3f72da8a1d077864057d5da7ae5e68989ad1133abea2en/aHeodo
2020-08-27Electronic form.docdoc 06ef2c979eef460233e9b5440eaca628840f30d8d701c362da7090df649ac9c5n/aHeodo
2020-08-27TQ-080120 XVKB-082720.docdoc 3eb7f379c90d0ef72209f56f75159ec517d0e03c45fef2d299f6a7e1e6badc64n/aHeodo
2020-08-27PO# 08272020.docdoc 1b8c84e3789ad4f405432eb9b7082c5e30b69bfaba69802178a7d6c407b9128fn/aHeodo
2020-08-27Form.docdoc 77af4b1434a91855bf67d47b551fe759817002db6a435e8c5e561635300a6c11Virustotal results 35.71%Heodo
2020-08-27August invoice.docdoc ea52d249668fe5138dd642a6d9d356c71d688f2da9761be729ad4c7143529b0dVirustotal results 34.48%Heodo
2020-08-27Inv_406599.docdoc 6dc1fb576692231c12eaedeb19d6f481586673ad6666e1bfddebd6e0a8a3a748Virustotal results 30.51%Heodo
2020-08-27Inv. 430210933.docdoc 102c015e8a58faed4649eb3cb87e00480832721df09382df31e10a6d2ad5fc13Virustotal results 29.31%Heodo
2020-08-27Copy invoice #37845.docdoc 8969e1e9e29920ba44157da474d4851706f1f63a58b7cd36a87845beaea2af9aVirustotal results 29.31%Heodo