URLhaus Database

You are currently viewing the URLhaus database entry for http://yangmassage.net/cgi-bin/http://Z6FFM5CXT0LY/0zMBmJSEkt09/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:452922
URL: http://yangmassage.net/cgi-bin/http://Z6FFM5CXT0LY/0zMBmJSEkt09/
URL Status:Offline
Host: yangmassage.net
Date added:2020-09-04 00:11:34 UTC
Last online:2020-09-16 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-04 00:12:02 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:12 days, 2 hours, 34 minutes Bad (down since 2020-09-16 02:46:19 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-05Dat-Q6487.docdoc 4c3f9a91ab8bd67a7de8b61f6d5e49c34a0c3ded123f63205f02d17ff570c204Virustotal results 30.00%Heodo
2020-09-05REP 20200905.docdoc 0b9a2df9ae8e7dd522a8250303134d9778a41e95d02c06cd0b6a060afdb62cbdVirustotal results 30.51%Heodo
2020-09-05REP.docdoc e598cf9a18d4db4fa8174ec8f921eb470f8b844063cec6fa35185f7f8f1d2b4bn/aHeodo
2020-09-05DAT-2020_09_05-ZB17333.docdoc ddd8c361d3ca02b5ca803895bb6f365200b244f91cbde23f27b6af134ebedf5aVirustotal results 30.00%Heodo
2020-09-05Untitled_2020_09_05_8452256.docdoc 4d9d90d94b53b4f6c108a22f33df509c8cfac067f9a6b6d83fd50b9b1157d8b1n/aHeodo
2020-09-05MES_20200905_JHZ644.docdoc c687016b2136760124efe54694e2980e93b56aa5278ec587b7290a01f02c93fdVirustotal results 30.51%Heodo
2020-09-05Doc 2020_09_05 QPX07867.docdoc 178548af9f561e5bf22a2a3bf689025f6219b073e79e56ea0b74f164dc02820eVirustotal results 29.82%Heodo
2020-09-051119437-20200905-470685.docdoc d4c076603f475a562c8771e360b65b734aba563731f4417b117ecfad4297d562n/aHeodo
2020-09-05arc 2020_09_05 TM3544.docdoc 27ad65edce895a8ac105708b7510859313c9f88cec6a66611b581bc480ad6676n/aHeodo
2020-09-05File-2020_09_05-EY0592.docdoc c1658fd6974ace7a621b0e46c9d3f1bbb8ad7d3ddeb3032082937f3133c1c063Virustotal results 30.00%Heodo
2020-09-05File 20200905 T594684.docdoc f71c39920ac9463b4be57b2c9ef5a795184d8adab4c0a8761d0d491ae6b5a140Virustotal results 30.00%Heodo
2020-09-05REP 20200905 MUM461679.docdoc 51da971ad054a7cc8d3a929c87eba819eed539387ca660dad760e7bcf2477562Virustotal results 28.33%Heodo
2020-09-051477322 2020_09_05 UYL44720.docdoc 62cc3eedb06b43f8a3e286b0a9f04cbf36fe240a532b217d91950ea20fa0ba9cVirustotal results 28.33%Heodo
2020-09-05C51236-2020_09_05.docdoc 1fde53646d2021d4bd959bcc2ee2b8c1db5ca4b112b58af96efc114ffd4dc6e6Virustotal results 29.31%Heodo
2020-09-05ARC-20200905-657.docdoc eda41409cac593fa280357f888dfed9313d45a2523ff59de058f32b76478d925Virustotal results 28.33%Heodo
2020-09-05Rep-KM144.docdoc b647104789174776abced7dc5a7abaa47fa349c4b21749ca3b6634e4f039da4dVirustotal results 28.81%Heodo
2020-09-05REP_274.docdoc b1d37441a65187f53492dcd30fe0d3fafb9de343694c7ac79d3ce5434cec9350Virustotal results 28.33%Heodo
2020-09-05FILE_2020_09_05_W582.docdoc 206feb1d69aba0e52a7d33975a49cc2a9443deb7bcf9fb4f8a6428ffcd95c97bVirustotal results 28.81%Heodo
2020-09-05File 8576085.docdoc 0ca5df179f725a9c12ba1385711972c7e55bc02359435e954db6e65f1e2036fdVirustotal results 27.87%Heodo
2020-09-05Dat_OA854.docdoc ee2869e612b62baacd8f12266c98e851549e6789343a4020cc424755ae55326aVirustotal results 28.81%Heodo
2020-09-05UNTITLED_2020_09_05_V561864.docdoc 2ddd8ba7251afbeee6c41576c377265c1a2a9f5370cd66683c24db0c89a0062dVirustotal results 26.32%Heodo
2020-09-05REP_20200905_D4711.docdoc 346db091f843b130bc229ea6a6cf9d569e0a9d2408e413dd9a5087bb25437652Virustotal results 26.67%Heodo
2020-09-05list_20200905_QX317.docdoc 4f193825cdb87bbefffaa5925f7b422f06f0add25d518ea4f874acc892641968Virustotal results 28.33%Heodo
2020-09-05801GRT_20200905_26829.docdoc 6914af81ae643d0106a7cb16454991e2b4d29053551e92e659456ad592120f57Virustotal results 26.23%Heodo
2020-09-05UNTITLED 20200905 T623972.docdoc f3c01505f223d53a856b4cbb5201b5cbad5706145be5e214e266f4570491a8ccVirustotal results 26.67%Heodo
2020-09-05Attachment-2020_09_05-AE3481.docdoc 2572ca226200ecc1019e9813f939d7484962a7f90ecc62921f7efb01e5bdefeaVirustotal results 24.56%Heodo
2020-09-05Rep 2020_09_05 0676.docdoc 83d89a6f47106112698cbbe3f9f407abbefeaa5304896f38e7bff037db8cf901Virustotal results 25.42%Heodo
2020-09-05Doc_899.docdoc d933cd9a8fdaa58bf021074d4dcbca7f3fed26971db346a66f8b2435afb70b50Virustotal results 21.67%Heodo
2020-09-05dat 20200905 C1367.docdoc 92bc3c4ef5b89ad046cb64e9cd6ee2eb8d1053b1b07620f1a0aa6503912b05efVirustotal results 21.67%Heodo
2020-09-05list_36767.docdoc de7201ce2995436691a764734f9d6dc4395dba5066dc1c6c469fb2684daa58cbn/aHeodo
2020-09-05Arc_20200905_UCT162.docdoc 072bf6d9f33086a40282befdb7fbd11fc1015d54c2cf4935ba1dcce2934cbd5eVirustotal results 22.03%Heodo
2020-09-05Attachment_20200905_NH603553.docdoc 3c51d26e98137dad5c907c872c1af3b0faea7094df4acb08d71d8873e8800a9dVirustotal results 21.31%Heodo
2020-09-05Inf-2020_09_05.docdoc a0c340e5b8f401a13ec7ea03f405623ed8532d1bdfc9f708d34ad94a2c14ac47Virustotal results 22.03%Heodo
2020-09-05UNTITLED_2020_09_05_726.docdoc e5b5640cb999ccd3a5fa07ef28ecdb37ea16dbe142bd3cec619837a9c0c3baddn/aHeodo
2020-09-05Arc 2020_09_05.docdoc ac03cec1ea7e2d4ba254b3225a617ff11bb93247cfd84340907d0533522327e4Virustotal results 21.67%Heodo
2020-09-04rep 20200905 2355.docdoc b4301b5b4f251bbead273946c32085189c6ca478fd25ce929a0094c5500642d5Virustotal results 21.67%Heodo
2020-09-04List-HEQ141.docdoc d9a9da6db3834089876251db68e72db8a21ff82ee58ca338a43a055110f793c4Virustotal results 22.03%Heodo
2020-09-04INF_2020_09_05_499166.docdoc be5a076cc07b81d54fda54ef3c56f2d60ee214c3d1fe46de3dc59a1df619dc29n/aHeodo
2020-09-04Attachment 2020_09_05 47123.docdoc a68967c55063a216717a336462d01e74b4dbf73c0e3ad3b56bfe2c4ab10f3b38Virustotal results 22.41%Heodo
2020-09-04Doc_454125.docdoc bb32a5e79b853e76e64596002da4cf3b42d9e2c10db3f2b7fc7fd805fa43ff71Virustotal results 22.03%Heodo
2020-09-04Inf_2020_09_05_K551116.docdoc 0f264ea12ac1b1f96e80c683d7aabce629b15ded57f43e29a4faa7cbf057d673Virustotal results 22.03%Heodo
2020-09-04File-A13391.docdoc 5c812ff66278cf61e89871fd5d02ba1e06092920cbface28f9710fd77ca413b2Virustotal results 20.00%Heodo
2020-09-04rep-2020_09_05-EQI9196.docdoc 44f213e9ff99dece96ea33d94a4e46bb3e508480002c5e255d46ca711b44a9e3Virustotal results 20.00%Heodo
2020-09-04Dat-2020_09_05-776.docdoc 79b65c86df194fd9f4a7d42889a26c715ccfeca32a0e1eecbb9d65ebfac19ac7Virustotal results 20.00%Heodo
2020-09-04UNTITLED QKN516.docdoc 4833c57c4ff48c2720247aa3bc9c8d62222f9fe3d095924030c344bfa8673847Virustotal results 20.69%Heodo
2020-09-04Rep_20200905_1382.docdoc b177d6304e1239837128c14fc3423ded464e3877b918bdf27db3d2f40375c398Virustotal results 20.34%Heodo
2020-09-04LIST_2020_09_04_XW918052.docdoc 9f003b20287110dbbea8826454c0666aee189fbf57cb907e8cf072dfe3829b18Virustotal results 20.69%Heodo
2020-09-04Arc-292356.docdoc bd6fabb51f037d2253220c55129be8125a21f63b579dd69ca9d82604f0208b60Virustotal results 20.34%Heodo
2020-09-04Attachment 20200904 M5003.docdoc 9c0798c3e8889889ef70b039545920afb91f1508144606704a1889286192bbf9Virustotal results 20.69%Heodo
2020-09-04List 20200904 372809.docdoc aa3db031e17cd90af00951bc4d86c18c8e42328f47e9014b552993ff1b29c557Virustotal results 20.34%Heodo
2020-09-04Inf_2020_09_04_UF8533.docdoc 623ee20c1b2e5a53a0bbf6eb21f4b87cb0e6392e023f1e08267abc08c26e5bbfn/aHeodo
2020-09-04LIST 2020_09_04 7031760.docdoc eb98e413719e07262040b6d92f4ffbfd9cad979d4fd8e59932902374dd33cbd5Virustotal results 38.33%Heodo
2020-09-04INF_5822567.docdoc 4c213965b64b715680686d5c98d5d0129fdccb424a5e74f561c6969fa785d75cVirustotal results 38.33%Heodo
2020-09-04Untitled_2020_09_04_M535.docdoc b89bbae40784e6910424e848eb4f987d2ab547c7293f80702f105bc4a8a086f1Virustotal results 35.59%Heodo
2020-09-04Dat.docdoc 112b31f94d0408209223b109553273ff732fcd2f05b532c53d7ef7e4658bec80Virustotal results 35.59%Heodo
2020-09-04List-20200904-80072.docdoc 2fa57b312c1f1976a6e1237388978f53045e0bd342f5ecb46de197c6f2e4b5b8Virustotal results 36.21%Heodo
2020-09-04file_L2530.docdoc 09525f62505c8bf7a99dd08caa65a18ab1c71a0f291fd666b3c53972aa9f1466Virustotal results 35.59%Heodo
2020-09-04list 20200904.docdoc 6d0e0c6c270e763b2d4e0f6e14fd373b7ca0688c6b0d27a4589f39d40c756d3fVirustotal results 35.00%Heodo
2020-09-04REP-0755006.docdoc 8a87e7dcaf07545941e8f4859526c55f0b840dc1d051e86b09200a3a49ba5c01Virustotal results 35.00%Heodo
2020-09-04inf 20200904 T47284.docdoc c9af36ca0fb3bda5fbb9b2b047989fe8f0464034fef0f22352c26edb9f8f050aVirustotal results 35.00%Heodo
2020-09-04MES-2105.docdoc cc4f7c86201d0618e4cc76f2030913800e738cb4a46496daa65e8f3507b3e12dn/aHeodo
2020-09-04Mes 20200904 56457.docdoc 4caf5eb87b69a8e37c3524c776870ace2c3a187f6d4956a9cf441148c4dc75cbVirustotal results 35.00%Heodo
2020-09-04UNTITLED-2020_09_04-987168.docdoc 74f31456977a691fa6c56243890fd997e0ed0e2793ec4b6e1df8e8a0c93a22cfn/aHeodo
2020-09-04mes-20200904-EIT864932.docdoc 5f507662f25de9c594d9c295a8fcd49bab262c3b83c2a470ca2a0303834b57d1Virustotal results 35.00%Heodo
2020-09-04list 2020_09_04 M905.docdoc e4006ffd7617f48dca3ed5e7220e159de2160b07f86452e1fcb7fa0f27ed1d9aVirustotal results 35.59%Heodo
2020-09-04mes_20200904_450.docdoc 0cac10e553ca0da14b7f6e1bf4c0586be92226b4edb922d9d7a79fd366142df8n/aHeodo
2020-09-04LIST_2020_09_04_AB2808.docdoc 0fd7dcfa200a1b0da02cc3578b15e97fdb192f4085d66ac383db864551155bffn/aHeodo
2020-09-04MES 0070215.docdoc b246ae5854fc909f2e54163de7a8e78ef5de5a8648ec2768c6533c0ad65a15d5n/aHeodo
2020-09-04doc.docdoc 088de2c93ca2a5d1c4e17cab469aa2ea619a58e4c03c744b338f74787e4dca86Virustotal results 30.51%Heodo
2020-09-04FILE 20200904.docdoc ac6a5c2f72c10af857d73db327000d07f01f791fe6638c339362584fe1293a4fVirustotal results 30.00%Heodo
2020-09-04Arc 2020_09_04 IL549.docdoc be6a2393d8d58557a21737649e0977851d793862f1b80f1d27a1ee2ee70b3154Virustotal results 30.00%Heodo
2020-09-04LIST-20200904-AUS967.docdoc dee17f41722ce96f3e95ac1ed9a43b57ddfef3fbcf6ae699f9adf0bdbdc15debVirustotal results 29.31%Heodo
2020-09-041553-2020_09_04-EEQ88580.docdoc c3850d62a95518f0ec62ce9f3f83163aa67b240ac7b21a8b6e1bf5e24005a4d0Virustotal results 28.33%Heodo
2020-09-04971382-20200904-N13642.docdoc cba83b613d73f634da924685c3cfdd701edddbc80bd28399548cbdee1e5f4df1Virustotal results 26.67%Heodo
2020-09-04INF-20200904-TV9155.docdoc d0faa29d011a7abe3a5e2d03346780cebd6a5dc766e52241014b96e58b4a99d7n/aHeodo
2020-09-04Rep-2020_09_04.docdoc 22541ac301b5c8fdf15f74cc06df0c5a237bfe5593f910699acdaa3ae869edd9Virustotal results 25.42%Heodo
2020-09-04UNTITLED 2020_09_04 CE0628.docdoc 6ba1180f37e95dd4238a52435a56d2cb1483ed9a34af53b44e0fecd5863244ebn/aHeodo
2020-09-04List-780.docdoc 2e6992209a57f96c89556ed36c0e872bf312cc0e79e673c6888fe3b263c1ce06Virustotal results 23.73%Heodo
2020-09-04UNTITLED_2020_09_04_GLS291.docdoc f7347d7eb634ea2c2bdeb69d026c099ca12acf563a5b6681e6467ce9c7260619n/aHeodo
2020-09-04121881-20200904-261732.docdoc 6b6138015363422437174a3e66d6fe9830722c6af61b695c5bef3200fe97a98bVirustotal results 21.67%Heodo
2020-09-04MES 691520.docdoc 1c67628b01a329488b609ce13ceba3610a0d79cfe6bdb3d6750f714ffc97f27fVirustotal results 27.12%Heodo
2020-09-04MES 20200904 S18648.docdoc a6326ff0b5ee0bb1e125460656d05cee7600dd664d68b825b2f27059f5f22906n/aHeodo
2020-09-04Dat 2020_09_04 404.docdoc 57f3008f32e87ac39577db793a7b1137b95ef8f7423e8e6857da223f9969240dVirustotal results 26.23%Heodo
2020-09-04LIST J1819.docdoc 3707b5de1e09741a173a932af10c341420b9303dd71c5e228345a8a9076edc11Virustotal results 27.12%Heodo
2020-09-04File_2020_09_04_6461.docdoc b7755557dad3aeec317596adb01ad1e78baf190e8c236e588d7bcb6a6681ac3fn/aHeodo
2020-09-04rep 8659551.docdoc 8025b46a7ad5a9b8f354866d31c2e8c41c319004e2f26825a94dea7c75465df8Virustotal results 27.12%Heodo
2020-09-04747UFA 20200904 X55198.docdoc e514ee40aaf58363f83b55c5bb9e01e591be5d5fbea0402363bfe659405e331aVirustotal results 25.00%Heodo
2020-09-04INF-WEG3612.docdoc 53919179b57227860a2520ddbfa45a9e7623735668070e5475b5cee6e42311aen/aHeodo
2020-09-04inf 2020_09_04 N213.docdoc 390dbf28e54b33d822c2790277611076c2a2520346d27caef4371d09546e1dc5Virustotal results 23.33%Heodo
2020-09-04doc Q54048.docdoc bfc004f7ac8d0c2e241dc8086e3e58fb542fcc47b5114ab614fa893199328acfVirustotal results 23.73%Heodo
2020-09-04429_UP304443.docdoc a44af5b41212998f1fbe2710a20194236275ea73fe20d136c36ab549738d00ean/aHeodo
2020-09-04Dat.docdoc bbb72c4df6c036dd3b187c18c6ba7bf547ed934e658bdcd5d3c23d14d244c2ean/aHeodo
2020-09-04Mes_P10419.docdoc d9c975b6db619552db6df9461b3c0947dbeb829698591386f2c86994a414e005Virustotal results 23.33%Heodo
2020-09-04Dat.docdoc 8dbc5aa0e47afc92f01ac0be897f8cfb5650e25857c1c7bdaf605dfc90a0d5f5Virustotal results 23.33%Heodo
2020-09-04ARC_2020_09_04_PUB2402.docdoc 1b9de5149166550851ee26d1ff101cb636ab70e0162faf31397c1b3d9efb8ac5Virustotal results 21.67%Heodo
2020-09-04MES 2020_09_04.docdoc f757b9a11463c3bb26ef5c9486e4ede7cd2899709fbbf17ba17042e2b75109e5Virustotal results 22.03%Heodo
2020-09-04INF_20200904_2003.docdoc 4e3917d545fe670b0ea8dd1cf91701595c3cbe5ab87b5c53a826514778bad6f6n/aHeodo
2020-09-04ARC_JBV667942.docdoc be658261ea85360800d4b052f23fd96dbadfe7171d308a38dba22b5fe4efadf0Virustotal results 41.67%Heodo
2020-09-040782849_391.docdoc 4abe421f4bf82588ca7772c685416eab8133054e1ae9fcedc245167e272b6105Virustotal results 43.33%Heodo
2020-09-04Attachments-2020_09_04-E6274.docdoc acb81dc6508ccc95393a57308575ed700b2dca51e4f0658f6ce9dacfd214dd3fVirustotal results 40.68%Heodo
2020-09-04REP 20200904 7740.docdoc ca1b62ba1f6df4e6e7ee6b0ae0cdbf41303c29e916602d32ba15df885ce8d527Virustotal results 40.00%Heodo
2020-09-04inf-587.docdoc a7f7db7e743de3993fe73005b54d739c61d8b922446cf434ecedcca82c63e922Virustotal results 40.00%Heodo
2020-09-04LIST_20200904_383045.docdoc 05558fbc6250f15d45880b5ebfb3798d415fad3e982b503fd6b61e658d902aaeVirustotal results 40.68%Heodo
2020-09-04LIST 3136863.docdoc ede8d998dc31e2c855d01100bae27909e6fad8672e5bb1e7afced120b025c6a4n/aHeodo
2020-09-04Inf-2020_09_04-GX437.docdoc 6c3530951ad2bde0a96b5bda4698fb3638e360f5176d3f6aa4f9ea0570a3f45dn/aHeodo
2020-09-04DAT 20200904 0160.docdoc 886d63b614006458acc2c30f3864476e896c318a90248243fabf63f0e992f712Virustotal results 40.00%Heodo
2020-09-04Attachments 20200904 UPH419.docdoc 352ed1583217d011b59331d9df7069fb05bffbee3823ffe2603a5cd74f16b850Virustotal results 41.38%Heodo
2020-09-04Rep-20200904-4845.docdoc 90d7013803edb798ee2da7fcf3de07420ccd536dd01c96d0c787a80c0923f08dVirustotal results 38.98%Heodo
2020-09-04Attachments_20200904.docdoc d771bd380512ca62d90490660909fd428aa582bd97ee49d263deaa6334170f65Virustotal results 40.00%Heodo
2020-09-04Dat 2020_09_04 R878.docdoc 3b921395ead4db8129425113780d7d7391058b9a70f1bfadaa36d56c48de30edVirustotal results 40.00%Heodo
2020-09-04INF.docdoc f9cb536060fce2bb170aa95f67947db48d9b7e43e2095dad2337eda509017040Virustotal results 40.00%Heodo
2020-09-04Dat.docdoc 9cf29b7fcce905e807fd1e4493af36f7f0e8618912601f1a85cf52af6d38d6b8Virustotal results 40.00%Heodo
2020-09-04file 2020_09_04 4826.docdoc eaab7e71c3da44a79d28d2bef0582eeadb430df7d20febba2eed46323d6dd3eeVirustotal results 40.00%Heodo
2020-09-0419038-865.docdoc 9fe427f893f6601d49765213f47af2ea3766457661b26cf705d4f30c267f3a73Virustotal results 40.68%Heodo
2020-09-04doc 2020_09_04 804.docdoc 7eba76e504a537e3600311969b0b159744d8f78d48891c9f06dfd9aa9798b9e3Virustotal results 38.98%Heodo
2020-09-04list_2020_09_04_4658.docdoc c9760ed3a6abb462e2d429280f83f0e912114c2b1923fa1fec74b3ee350afa78Virustotal results 40.98%Heodo
2020-09-04inf-20200904.docdoc 0bed9ceb6c02ac01c38804705e397d72379abfba81c416c2deca29e08e32bd54Virustotal results 40.00%Heodo
2020-09-04FILE-20200904-768580.docdoc 69e91274a22bb98b54013be9509ad757c17fd9ab44d80c5a8585ec639ea6f04bn/aHeodo
2020-09-04Untitled_2020_09_04_INR043024.docdoc f5ace8d328883020ed6b37dfb50687886670fba064afbbbbf6e9e695ce35e490Virustotal results 40.00%Heodo
2020-09-04arc_2020_09_04.docdoc d5dd39004e2b61389e29b1ed7ea6c403b60570377807a019ba5b3a1676d4c2a4n/aHeodo