URLhaus Database

You are currently viewing the URLhaus database entry for http://aeinvest.com.vn/cgi-bin/report/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:453725
URL: http://aeinvest.com.vn/cgi-bin/report/
URL Status:Offline
Host: aeinvest.com.vn
Date added:2020-09-05 03:24:34 UTC
Last online:2020-09-10 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-05 03:26:02 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:5 days, 3 hours, 27 minutes Bad (down since 2020-09-10 06:53:20 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-05INV_67418133.docdoc 8b23e164f16ba0caed21611db9782895ac3a6a1f5b30a16e7cff6a2f8e3c3008Virustotal results 44.07%Heodo
2020-09-05Z_9376503517142814582841944.docdoc 908698080dcf9229ad6d3a5b3faa55ad9f3499129372a809d011b6d24ba9d445n/aHeodo
2020-09-05REP_PO_09052020EX.docdoc ef7cf4395e6f154ad0deda89d832839b0301a4973ac6c002652d2cf6cf185ee9Virustotal results 24.59%Heodo
2020-09-05INV_H7QRGORO.docdoc 7c88f52c679aeb917f52a42b5424f5aeb90901cd44d00fe9aa0608e4f2940cb4Virustotal results 40.98%Heodo
2020-09-05FILE_5095873387669171157715958.docdoc 2e997a833026463ee1ddc2b571d97d90c94ac88cdb614cc5e5803d48b640391cVirustotal results 43.33%Heodo
2020-09-05DOC_EYT_090120_MPK_090520.docdoc bb9c837b1bd4fe34cf3377a063261449907bae9ffec1af75dcfbe5fd01ec9a7fVirustotal results 22.03%Heodo
2020-09-05C_44453792.docdoc 78fe3a4dfe2181b8fb57b9b3a71c67e98d2227eed658230d2a7557db9eadd89aVirustotal results 38.33%Heodo
2020-09-05BAL_B89I0C3E5D0G.docdoc aeab03e8497908eee0038ab3c13bb6e72a8a085bebb429c81e1d6c6dbc28f0d2n/aHeodo
2020-09-0563674103.docdoc 3ea82d40a32c4a7efd0deecb56f9bd8d6ded9f90c47eff0dc2257c5d35204402Virustotal results 33.90%Heodo
2020-09-0550748911458775053417.docdoc c409cd7639c969f0ed59d092f2ae2232a491fda76e08a4abbf011a59a648258bVirustotal results 21.31%Heodo
2020-09-058VZK31GMIX8NV.docdoc 5da552ae322580d7638f987c1c33d95ddf6ce5515f9b5c96ce75ef88111fd5f8Virustotal results 31.67%Heodo
2020-09-05DOC_PO_09052020EX.docdoc 8d8cc6bdd5c9ff157d1d4967a626d0638a66654fc8ed2af24e807dbc11746e43n/aHeodo
2020-09-05BAL_HA9679077472ZL.docdoc 916a9fdb4940cd7596a9604a95e7af177de4c28e90bfa8c2c98d836e82aab78cVirustotal results 31.15%Heodo
2020-09-05REP_PO_09052020EX.docdoc 53ce3cc79fda9e0a7f82873c3b94b8dfc7d31d3eab577ee54707cb8c1ad10585Virustotal results 32.20%Heodo
2020-09-05INV_2XUU3EKTC05Q5SO4.docdoc 3de96a57dc1f01e5d74c2d3ec9b3b15e4426645cdaaad296b03adaa3f3c752b4Virustotal results 31.67%Heodo
2020-09-0527491740275160.docdoc 60b865bf47919000a88deabae15f03836f7a97fded9224d81a04722c88461f93n/aHeodo
2020-09-05D_PO_09052020EX.docdoc 13ad6c45f7189df1c3e34c5d0f1b0688a5c6bed6688be2ab02294bd75dcc80efVirustotal results 32.20%Heodo
2020-09-05INV_64762448.docdoc 2ea112ff513cfbbaf84731cbd3a3e700cfb6f87168673755d8bc47e616c7773eVirustotal results 31.67%Heodo
2020-09-05BAL_XKH_090120_XNQ_090520.docdoc 56c847d2b7384b5406bac28244f2abc04230c231e066dfb357bbf635c1d9d368n/aHeodo