URLhaus Database

You are currently viewing the URLhaus database entry for https://thongtinbhnt.com/wp-admin/Scan/pvz0nwpcb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:515924
URL: https://thongtinbhnt.com/wp-admin/Scan/pvz0nwpcb/
URL Status:Offline
Host: thongtinbhnt.com
Date added:2020-09-15 14:39:37 UTC
Last online:2020-09-15 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-15 14:40:03 UTC to CloudFlare Anti-Abuse API)
Takedown time:3 hours, 32 minutes Good (down since 2020-09-15 18:13:01 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-15INV_YDP_090120_ICD_091520.docdoc a0717611fe03a6c29521881be56f81ec03ade7808b63895b52565ad690e95234Virustotal results 30.51%Heodo
2020-09-15DOC_HI0182092783ZE.docdoc 7596b6c44ed87c1a5add7150e54cc661c822db7eb7f87f717b9df75c4a6a3fa9n/aHeodo
2020-09-15XAE_090120_QCC_091520.docdoc 0c29e2bff58991b1a187acc3931b6f1d2c3932c499fb7cdded850cfcede1b31cVirustotal results 30.51%Heodo
2020-09-15KRI_090120_ZZK_091520.docdoc 920c6c5caca9705a67c7133db7edb7a9c9752f138bf9e2ce372169cca625b083Virustotal results 31.58%Heodo
2020-09-15REP_153760940601697145236286.docdoc dfdcac695a22834514fe719292115117aac5b41e1701ab6ba9dfa35484f5b71bn/aHeodo
2020-09-15INV_44978524.docdoc 857871926554fab0b9e7c348f8075046340f99238c5d624926f3d8ed6d71d5bfn/aHeodo
2020-09-15FILE_PO_09152020EX.docdoc 41b26a08cef23f1d783c98829c4d5a4c38e260d9de966fa86c20ad488bf7d765n/aHeodo
2020-09-15PO_09152020EX.docdoc 444ecd76408121efb70dedd5886e0d2042b0afcd9ad85a940eb6e027f7651082n/aHeodo
2020-09-1559541521.docdoc 6b838dce48a2c790edcc3d3552a367f8ea3996c037a05e786df007bae459787aVirustotal results 28.33%Heodo
2020-09-15FILE_QEOIGVVQ.docdoc fda02bec817e33a0eb6c4f769013fb985dedd41c73e728f9db5d7ff9e76cc93bn/aHeodo
2020-09-15BAL_PO_09152020EX.docdoc e13fe582fb3f540b7bae68b1aab1cdc1f9e872dffc0f73bc14f04287c66cc813n/aHeodo
2020-09-15R3MPCX64WL1IAQ.docdoc 8ad7a5caa6b158c4360d923395c49afde530904dc87113346b3ac80e48eea1b7n/aHeodo