URLhaus Database

You are currently viewing the URLhaus database entry for https://hotrohitachivn.com/sites/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:520626
URL: https://hotrohitachivn.com/sites/
URL Status:Offline
Host: hotrohitachivn.com
Date added:2020-09-15 21:48:08 UTC
Last online:2020-09-23 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-15 21:50:03 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:7 days, 6 hours, 19 minutes Bad (down since 2020-09-23 04:09:23 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-17PO_09172020EX.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo
2020-09-17REP_UP0U73HI0H.docdoc c81ad3ff9f4ab6829b4f06308391cea0e98bb5e371462d2bad0bcee9961b99eaVirustotal results 47.46%Heodo
2020-09-17DOC_HRC6G7SWUAP9.docdoc 30fae41cd15ad7341c7e91b9e003b523538a2b23f9afa8d601ec22cdb738526bVirustotal results 42.37%Heodo
2020-09-17PO_09172020EX.docdoc 0b2362700a49af3797e3a32128e561ba70c171de8406a65e5290362ab574c31fVirustotal results 40.00%Heodo
2020-09-1747731398.docdoc 266182936e91bf387900a37c29c044541d8646676cd85790aa27214e6f210848Virustotal results 35.59%Heodo
2020-09-17FILE_PO_09172020EX.docdoc 1e676a39dffbe7342d83acebdfb5294bd995abf1b7f880bb03bdb4799a819952Virustotal results 35.59%Heodo
2020-09-17INV_BOFDXFYYXDTSDF36.docdoc b1c4f3f033c7084b7df61be8340d0190e40a7ed5742d46dccb477e27ee853c96Virustotal results 35.59%Heodo
2020-09-17REP_1636890475686837.docdoc 14650f22ccd9ac8f4effcb6415afc3ee21a1a681e0d621888dd3e28a30e9e237Virustotal results 36.67%Heodo
2020-09-17BAL_CAJBO9S3VIOX.docdoc ab673a4d98deaf332cd304d7285159dc8a473d8fb207d7746403ecf3e81371d7Virustotal results 32.76%Heodo
2020-09-17HNI9UEEHCK8S18T.docdoc 53dda9daf6fa01985279e8148de1c182bb9957da8b396b100bc5b6f1aa67f983Virustotal results 32.76%Heodo
2020-09-17BAL_4IHMZWJJLB8WIL.docdoc 6274d6fc5f58fb23f021e998ce3ba08addb461bc1403267302e7e7a2abc376d4Virustotal results 32.76%Heodo
2020-09-17INV_79853651.docdoc 9de91f69583b1765c182e6952a78af003dd26df75c249ca6c8091fa96fbc5fedVirustotal results 31.37%Heodo
2020-09-17FILE_497335636589678964.docdoc 9af94d901782b57efcfe1221696091455a812897cb8a8707d72bd554841ce526Virustotal results 32.20%Heodo
2020-09-17TGL_090120_QOX_091720.docdoc 9858faec65e0756d0003cfd8bcf4e322ebb83c537243e039ae6e43b4893c514dVirustotal results 31.67%Heodo
2020-09-17REP_PO_09172020EX.docdoc 5a9d0acacf9a1616330ac1559a2243f80f03ec322e564298c0cff70b28014a7cVirustotal results 32.76%Heodo
2020-09-17FILE_YO3673487501MR.docdoc a5ecfee423f7cf0ff0efb76f20542df38a7d88230a256aa5e343d1040950e5b8Virustotal results 32.20%Heodo
2020-09-17QB4047851441CU.docdoc dcd3e00d8637a9ba1d0bd4b50e2895294c67b06017af07497a032472d7ade91an/aHeodo
2020-09-17T5N6URIQ.docdoc 3f70f108975c931a23d9f23fcbfe728d93f6f0b096014280234067b0c54d44bdn/aHeodo
2020-09-17Y4TPXS6SPJD16VFQ.docdoc 08ea41da443b28325813eaf4915479f7b46fb810c9abb7ff732f3da617f9aaa4Virustotal results 35.59%Heodo
2020-09-17O341PI42J8.docdoc fa191cce995bce7e56b494fa94b13859f68f274e86a7aceadbac93d6778ad84bVirustotal results 35.59%Heodo
2020-09-17DT3768144829QJ.docdoc 39b976a0e5df67f8d4593b26c8291a2ca2c49113f6df6d8329ec5a07adb6e01cVirustotal results 36.21%Heodo
2020-09-17I_PO_09172020EX.docdoc 425cf69c1c8cf4327ace3bad807a83df91fcc0692bd45dca12e840eb562931d9Virustotal results 36.21%Heodo
2020-09-17NNL_39517691.docdoc 32824dd0392573b686def1bda2f7e63f82bec5181b405e1714f7590872500688n/aHeodo
2020-09-17XYL32CF08BPG.docdoc e943c361eeea788f3fbad581f7d9317d305cd0cb8b17c745b04479b16c52f735Virustotal results 30.51%Heodo
2020-09-17FILE_38992499.docdoc e0e9dac7a50485ca1030fc7dd02b0654cdb97f93294d975d06d9d8b8317d8e6eVirustotal results 32.76%Heodo
2020-09-17BAL_DUK8D5JDR8CKD.docdoc fd0f987936c01acfb91bb84e9e9c3e6f425f55d07887f14ee595ec418d252849Virustotal results 40.00%Heodo
2020-09-17BAL_JP1167773058LI.docdoc 51d460db7db57fd212907c9aed23bba4891c43175f73978da2c791c60a412c43Virustotal results 38.98%Heodo
2020-09-1792032149440040624.docdoc 3fc9e1303ad2b93db95a11ed49156bfcaff2b986b739b1f4ec66485445548ed8n/aHeodo
2020-09-173062281723919481.docdoc b01858672d33ba389a6a20f1c3d0cdf3987bb6f7d3009d178478ec6bf0fbd674Virustotal results 37.93%Heodo
2020-09-1726047158.docdoc 9e4278eac329ac03d6c9b60c69594f50d2efb41914b428309216bdfe5ae15904Virustotal results 39.66%Heodo
2020-09-17Z_PO_09172020EX.docdoc f0c89d19ca9b6c30286a2f5a0383fee0c9516589dabbcde5749a541cb666b41cVirustotal results 38.98%Heodo
2020-09-1713470104.docdoc d15ec5002184364b882e5c3dc5c4fad1d083eeac52de352b2d263205c92e3165n/aHeodo
2020-09-17J_CK0537518828EY.docdoc 83208fd10a9c71a12a3e48e4231e27e17a061f6c741c37ec8ecec9050be6a811Virustotal results 33.90%Heodo
2020-09-17INV_PO_09172020EX.docdoc bcf9a2940f9615487667d5d0edb9dfcb6e5917b328bc56ada5fe0d5b9f43a9c7Virustotal results 34.48%Heodo
2020-09-17INV_PO_09172020EX.docdoc 8bed6a4e027b38076c316eb5378c9d60d8fd9305217dba0e315e93974091667cVirustotal results 34.48%Heodo
2020-09-17ZO6186716899HT.docdoc b4306a30afe6746f29ea38b3e2dca0704d5d3d18107aa1b8ca555bd35fa918f7Virustotal results 38.98%Heodo
2020-09-17PO_09172020EX.docdoc a2d7a015bbf13ab37b0062c97dce2a11c02f0657166b6fb813780017ba5de723Virustotal results 35.59%Heodo
2020-09-17INV_39834553.docdoc 7bfbc615a14c1b8e533da21f2d1838f5e3c52ada91bdcbe8b6574195850b9bf3Virustotal results 25.86%Heodo
2020-09-17OS7634013494ZN.docdoc b1e7a7277e944331a98e7ae6a5910af8b595bf329d5da053469800cdf447f2c8Virustotal results 33.33%Heodo
2020-09-17FILE_60171796211396735858.docdoc 528a62bc2a5bb42529a57abc0367b0a612ebe84f846906aa5a6737e759d6ae84Virustotal results 25.42%Heodo
2020-09-17OJ6911341932ZR.docdoc 39c83fd21ce730714e93e6bbe85f21770a761285c3fd1b2b2473e00644785e82Virustotal results 27.12%Heodo
2020-09-17INV_76056313.docdoc 89c63f940c17124065f94ee04b40a3cf2f048fb270b93b38fe1b1e937ab4abffVirustotal results 25.42%Heodo
2020-09-16J_WDG_090120_BXB_091720.docdoc 1ecaceaeb20649c823b3a63accf639925ba8e4c350b2509496c04dbd622d5d4eVirustotal results 25.86% Heodo
2020-09-16DOC_7152391971386300831.docdoc 66bd50b4b2f0524aff6b9f64fcad5a686d04778fc56eae470249da88f7c40077Virustotal results 25.86%Heodo
2020-09-16FILE_55TN46N0HJGRJ.docdoc d1df096853342d0030f71b7be3c608ee35fd1c81bce971a45e00b001a7d85d3bVirustotal results 29.31%Heodo
2020-09-1634567924.docdoc ca5204766a181d5961896a0f4c506ed00718fad078c3a951d9343e52ad7f16d4Virustotal results 28.07%Heodo
2020-09-16BAL_XS79WPF7N9YZ.docdoc f8be1cb32fdc9776f4b599f4b99eb0315d3fccebbdc850498b96f6a65fe9e02cVirustotal results 27.12%Heodo
2020-09-16BAL_E8O3LMIX7G2N3FS.docdoc 1a487a6af75caefff2748862adf7200a692c1e5f6453c1d86ebceab252b5bd66Virustotal results 25.86%Heodo
2020-09-16S_8JY2KHCZ2MGLXSU7.docdoc 7a8024cf777ab45c5c969c5efff3dd4f289bc22baf1c91bd884fc2d29435c884Virustotal results 25.42%Heodo
2020-09-160DPXLZJ7N0L.docdoc 53838205956eab8a004b3f1cd4ecb92e6cfc4eae4cb978b4dafd2a8560c5186cVirustotal results 25.42%Heodo
2020-09-1677157467.docdoc 98b7ab7a1185220c44567c8e6562c858a1aa47058efd0113421a2f4d7fa63231Virustotal results 26.32%Heodo
2020-09-16REP_MO6044211578UF.docdoc 8f96a4ee289f6093a2f1afe8c584cba4a802c054ef22fde70d451254191872fdn/aHeodo
2020-09-16DOC_1XFVXXJSTC6B9MB5.docdoc fc4eb4fb15308d6878f61e096934ed77f56f5f25b48dc2f5f30f0f02cf23a0ecVirustotal results 26.32%Heodo
2020-09-16DOC_IJ3766586060FZ.docdoc f656f7fc2ac175767aea79393803f493b18211403a390c2daf9c5dae720e26e3n/aHeodo
2020-09-1623973506.docdoc fd4fb3464a7f787ee4d5b1795fe7b4d8ffde4a1683fc6620602fb78ba52f52a9Virustotal results 26.32% Heodo
2020-09-16N_7891025737.docdoc b3f921be965718a9741b8f63d9b29dba0345f98cdfda7a0cabae90ffabc8043an/a Heodo
2020-09-16REP_HGB_090120_LXZ_091620.docdoc 7ad1bb86cc5ab4b2563548f2fc53faf9ed64e5216c895c9a425aea815a45b6b4Virustotal results 41.38% Heodo
2020-09-16G_13454357.docdoc 9ca5390e9af21757dc77575f56e9d0528c527843951ae719c3aedd2d8680ce7aVirustotal results 39.66% Heodo
2020-09-16REP_IMG_090120_SCY_091620.docdoc d4d482bd99e2f75b977c3fe22ee3df44c1e3758bd61f0636d31c1e35c2d38be6n/a Heodo
2020-09-16RKQVM8SH7E0BQZ7.docdoc 7b1127e502c3d59ec345e24f48984ba9a6e5ccb5667e317f7c3f5a8ffef69004Virustotal results 38.98% Heodo
2020-09-169682241850.docdoc 1e5ed60832baaf0e362870373615cff90279bbbc4e544c76224f7528687276eeVirustotal results 37.29% Heodo
2020-09-16V_3285288482940267.docdoc 9c5ec196eabe90d83815fe7015b5334c7fd6bbd350de085a69e022a0fc32ad8cVirustotal results 38.98% Heodo
2020-09-16REP_TIV_090120_HFO_091620.docdoc e9e98328d96157a0fd47c6abe8d1d60d8521171a61378aded651b274a0619993n/a Heodo
2020-09-16XLX_090120_HEQ_091620.docdoc c88d8beb44c5609d538cae9b2bba76ebe5b09aefbb561fd2801356e147f179ebn/a Heodo
2020-09-161LER1M3G4VTP34.docdoc 02451c13f63ed93c6ed0c0e4a3025100834fd59eeaa78acff45d726c056b2293Virustotal results 38.98%Heodo
2020-09-16BAL_IHHJEBSLAS.docdoc 3cddfe22684c82c3eeeb0d3c0c8745719dcd417db42c4ea6774c9a10d1a88f3bVirustotal results 38.98%Heodo
2020-09-16GQVUT6BI3.docdoc 6820256b4c1c4c5b50146126f828d2317ef12e023043a390611fe9b036cfe638n/aHeodo
2020-09-16YB0727865491BK.docdoc 25a6131ae25ca2ee10362cdc735535fed0c9bf3698dcb965b751015139477987Virustotal results 35.59%Heodo
2020-09-16EP6758711151ID.docdoc 0745a0b546e98bc288370d0b4faace44a060f1abb905403e159b812b2d694a7fn/aHeodo
2020-09-16FILE_PO_09162020EX.docdoc a424bb668e3635e2ea396355dcc0b960f919760ab25aab75f0e36c95feb46c12Virustotal results 32.76%Heodo
2020-09-16941524743073224.docdoc 361d848b59beb5b40b7839f66735d926f31725d38136435f01499fb0e4a66463Virustotal results 32.20%Heodo
2020-09-1691818901.docdoc 6ea61af5d34641a3a6eecc37d727e2c75ee124fce8aa622e4c1c9adf2fa2541cVirustotal results 32.76%Heodo
2020-09-16143302592951656316.docdoc 8f20ff26311834e143d010f2fa23f292d4d619b34cf2639d9d4ef2a7e4df9d8fVirustotal results 28.07%Heodo
2020-09-16TO5645711987UL.docdoc cfd2873377699ee9677793786de5f4e61b92743b992a3514810515fbb759d724Virustotal results 26.67%Heodo
2020-09-16LPH6QCYIM.docdoc e04f91fce52b82ec7b1d0b6c78767a725e28cf4ddb1044dfbf301bbd4cd14ddaVirustotal results 28.07%Heodo
2020-09-16DOC_10981991.docdoc ff0be8f9b0efc6b14928e8ea89ffb82ebe82f74db08241df5ec7713c073dfe91Virustotal results 27.59%Heodo
2020-09-16YDO_090120_RUF_091620.docdoc 0e0913f7c913e70406fdc7b5e47f2455d7152c4e461770cc1b9bee581491fab9n/aHeodo
2020-09-16BAL_4668111815858086.docdoc efce81f38adaeb415686961fabe12fa2cb0e24ea08e1ed62aead85ba816dab80Virustotal results 29.31%Heodo
2020-09-16DOC_14113221.docdoc ba11cc626e1527c8dec4bf3fe20af2a338030cdb646252a4e170d19512d19d89Virustotal results 27.59%Heodo
2020-09-16BAL_EC3050991909HS.docdoc 4a42864618e8b860f0cc23b81a63cfeb95e60a000bac0acb3edd4294f8531329Virustotal results 20.34%Heodo
2020-09-1607486079.docdoc a1a24cdd447db95aa10894a3b471875da732d0240e0b855117d5d31d9ca09500n/aHeodo
2020-09-16FY2717685204LL.docdoc f0749e49548ed365eabff1c6369218f385c6265fb99cd738210128d73b3232d6Virustotal results 23.73%Heodo
2020-09-16REP_O4S31IJQ7K.docdoc 4127d459a04c32375faea92c1b93077f9a79c1c7ffff36dd050303fe2c295bccVirustotal results 20.00%Heodo
2020-09-16DN7391629239FH.docdoc a77ef77d33744bee43471f6efd79797f4e3b790cb616c1a01e546f03a4e960f7Virustotal results 20.34%Heodo
2020-09-16REP_KUV_090120_DCJ_091620.docdoc 8b484c91782994539291e7b9d577270efdff9bd2f8c25bfcfb043e3edd0f1e7en/aHeodo
2020-09-16PO_09162020EX.docdoc e94ff7ee99e57be629d1e0f2be3bada9aa1ae3c87560e031697f35d0d1799945Virustotal results 20.34%Heodo
2020-09-16UJR_090120_CVZ_091620.docdoc ba7b3a0a6b1d37bb71adbceb6c77e589b2645f816957e7a2555934d893ed8033Virustotal results 20.34%Heodo
2020-09-16PO_09162020EX.docdoc 4a540bbe5b28ae60eb0653093f20bc61ff4d341954306fda4239dc26a7a342e1n/aHeodo
2020-09-16E_406305614.docdoc a28a23ca128d4219c14856421649e8be9836b60650040fba71022341d239b6faVirustotal results 20.34%Heodo
2020-09-16N_QZ3593750926TW.docdoc b465429729fe580c1862844b5e743b4913418b2bde007ae65a8b150f3defe751Virustotal results 20.34%Heodo
2020-09-166682402079742573421.docdoc 4e7eb87760d48d2a83d6bc71a58b4a5f91e388305156ab866c6752003da0add4Virustotal results 19.30%Heodo
2020-09-16REP_DHFMFF0BJND7LHHJ.docdoc a7f50bf321bf73c7af879ec128a67f16868adbb11239f8c21520fb3ba193eff8Virustotal results 20.69%Heodo
2020-09-16DOC_GGS_090120_XTG_091620.docdoc a6706614d0da8c58be5ac61af02a29dd4542a4fd130464ee3bec6b26be18416fVirustotal results 20.34%Heodo
2020-09-16BAL_ZUB_090120_FPB_091620.docdoc 1bb4012e89aef09b80eda22d99a564f0d3e923f96cbf25dc4a78ff6de6dbb31fVirustotal results 34.48%Heodo
2020-09-16FILE_ID2720692805WH.docdoc 0b1f822ec4210b6345a48fc8f51bfe50d3713137557385c9ea7116635bac1f6bn/aHeodo
2020-09-16FILE_PO_09162020EX.docdoc 0dbd4a1c724732ed63f98689408f3fc72fe81f5c82ceca3ac7c45f111965e4b3Virustotal results 33.33%Heodo
2020-09-16A_X7SU3JJJEP5.docdoc 241ca0de87ac0e619a76345ffa45d1e37b557a2c451d073341b49f96ebb62575Virustotal results 34.48%Heodo
2020-09-16BAL_MLM_090120_KJS_091620.docdoc b7ef6487132afa596eee56ae8e75e130b2cb003eb1f2b2a765401d651fa6a61bVirustotal results 34.48%Heodo
2020-09-16INV_861215779058034153448847.docdoc 9b7b60825eb2ba0fbacb8419b73d618db0a10d1e8b7e45a946aa8afd771038efVirustotal results 32.76%Heodo
2020-09-16FILE_89791997.docdoc 305d99490d1652cba0e4ee0e78bbc8ecc201e44033a823f4cdbbfa5c43c41c51Virustotal results 32.20%Heodo
2020-09-1619384270.docdoc 588439f42539c073b150e685ee9d555a0012c8bfbd92b3bb4091b6ba21ed3d6dVirustotal results 29.31%Heodo
2020-09-16X_4046895081830766053851723.docdoc eb6bbcf1755a8438e950e632c5e1330ff4c78dc8849914d2126abeb732ec4360Virustotal results 27.59%Heodo
2020-09-16X_778664052703618731234.docdoc 8e6f30327f622ec5f0e0af698a465ea3e932a184bd57077e5561244208e45f8dVirustotal results 27.12%Heodo
2020-09-16CIJF_WUD_090120_PFR_091620.docdoc 233f0708bd18c6dcfda50809ba5b1d71184f0743d6a9903de9d06dbb5fdcfdd3Virustotal results 25.86%Heodo
2020-09-16INV_PO_09162020EX.docdoc 7cec88df6a841fbc1251142492e673c8a2cddc58f21d6fd402f8167ee96e194cVirustotal results 25.42%Heodo
2020-09-16PO_09162020EX.docdoc b08ba532b43fe11e03765134c030e9f47fcd626ebc014e8b2d1d3cf4cd7f1074Virustotal results 25.00%Heodo
2020-09-16DOC_VVV_090120_HHU_091620.docdoc b0ee242bd63c84fc1dc0a0688e6c44566078121fa2b637d55dc0584e5952c27aVirustotal results 25.00%Heodo
2020-09-16R_PO_09162020EX.docdoc 507e2356293102846a1fa73ec4869b6f98ecb3ef5b43f4d5261562eae848b613Virustotal results 25.86%Heodo
2020-09-16DOC_098695257463347527030.docdoc d4c8ce2687fd07ab7c3991cab5500c05e719381d7906228371f0457d260ded94Virustotal results 25.42%Heodo
2020-09-16REP_XNO_090120_CUW_091620.docdoc f8b89f97feff5649f70d133e5a998bb941c042aa450267dafba9ed28a95b7f59Virustotal results 25.42%Heodo
2020-09-16J_SQC_090120_ZWV_091620.docdoc d4b79b30c6abd6633d513bd08d8b3b9b3de6f0705245b72b3e2ee09e0d03746fVirustotal results 25.86%Heodo
2020-09-1603221806.docdoc f8a35f4ee5b56117d206ece5cd25afb33aba58cbfb3c32748018d4424f212bddVirustotal results 25.42%Heodo
2020-09-16WV2555816077RU.docdoc 1e8efc4f5bc3f4c1233e6072bba8d608c2c37a722e84f3a69a5776225d962922Virustotal results 25.42%Heodo
2020-09-15NCB_090120_XVK_091620.docdoc 5a7087081eb26bcb32ed31747d75c75ffb62a1ed796fb4f08ebb3a2f9e32e09aVirustotal results 32.20%Heodo
2020-09-151970564101.docdoc 1b3feab547c227fce46787527a728a57b05f236dc7f3be77bade5b9e661017b4n/aHeodo
2020-09-15DOC_GR7886699144SF.docdoc 879cb07fa12e39fbaafbeef54a8c988ee57a673fb57a02099a1f6bb733318c44n/aHeodo
2020-09-15FILE_98963433.docdoc ade1729cdf53dd56b39ae9440ccb71670f42e5f8fd2b0a564f11aa404c2d427eVirustotal results 30.51%Heodo
2020-09-1552986132.docdoc a643c8295a70cc3882662f7eac8da65ca398f824961fcd9a47454364138218e0n/aHeodo
2020-09-15YJT_090120_ERC_091620.docdoc 6f04f539195c899715c54e7cc3db85949143180e021314c0e670e09722d2afacVirustotal results 24.14%Heodo
2020-09-15SY_V29J1Y2.docdoc 722e0b21752c8eb64fbb26fcf4ef9ab58f89050b3b690fa97b068eae6a0b522fn/aHeodo