URLhaus Database

You are currently viewing the URLhaus database entry for https://zhengxiaosa.cn/htuen/Scan/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:520970
URL: https://zhengxiaosa.cn/htuen/Scan/
URL Status:Offline
Host: zhengxiaosa.cn
Date added:2020-09-15 22:16:07 UTC
Last online:2020-10-30 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-15 22:18:32 UTC to ipas{at}cnnic[dot]cn)
Takedown time:1 month, 14 days, 4 hours, 54 minutes Bad (down since 2020-10-30 03:12:35 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-17E_PO_09182020EX.docdoc 9c119c1d39a1e41201dfbb087466fa543558f959d147c3e8ef77650beaff2d9fVirustotal results 33.90%Heodo
2020-09-17U_3192614659769.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo
2020-09-17QHGJ_UU1576724787CK.docdoc 30fae41cd15ad7341c7e91b9e003b523538a2b23f9afa8d601ec22cdb738526bVirustotal results 42.37%Heodo
2020-09-17BAL_W9YSNX4B1N.docdoc 0b2362700a49af3797e3a32128e561ba70c171de8406a65e5290362ab574c31fVirustotal results 40.00%Heodo
2020-09-17X_YZY_090120_KXM_091720.docdoc ac68b80cefce2e5cea6c8552e9098be831aa16d377071da37b2cf423abb857b6Virustotal results 35.59%Heodo
2020-09-17FILE_RYA_090120_DOY_091720.docdoc de84090016c1fe8302f9f5289d61ec3d1d2b16b64ff4fb055e43a341cebfdadeVirustotal results 34.48%Heodo
2020-09-17PO_09172020EX.docdoc fcc75ba7d4acb2ad490a81c60786cbc02465a0ede00deb9002980beb85a4b317Virustotal results 35.59%Heodo
2020-09-17REP_KO2494753264IC.docdoc 5550d9e16cad7854633fe0ca4c7315a5595cdb78147360f022c916fb27890aa6Virustotal results 32.76%Heodo
2020-09-17FILE_TK4532205880YE.docdoc 6274d6fc5f58fb23f021e998ce3ba08addb461bc1403267302e7e7a2abc376d4Virustotal results 32.76%Heodo
2020-09-17FILE_67761711.docdoc 1da1190d2c7472ff429ae35611b7120698dca55175d1c298e68f24f33fc4caecVirustotal results 32.76%Heodo
2020-09-17C_90952534.docdoc 71d6d6e89a4d037f612549e5ffbdf9a46da63f9781d662460c048dd573a33383n/aHeodo
2020-09-17E_751811334.docdoc 9af94d901782b57efcfe1221696091455a812897cb8a8707d72bd554841ce526Virustotal results 32.20%Heodo
2020-09-17FILE_35900463524979316.docdoc 786d28cd90e9a2bc887c9cbf4225a7fed95a3e28b07ced5f8c932e1f1e673b66Virustotal results 32.20%Heodo
2020-09-17DOC_461642792252496.docdoc ed4658f123918fc2a7fec141a0efd053ed8016aa8e8d779abd6377646fb04ad5Virustotal results 32.76%Heodo
2020-09-17DOC_KJ1966776784EW.docdoc cd7eff89ab25979594648885ed165b0e8cb844bf354d2cd77afb285047573fa3Virustotal results 30.51%Heodo
2020-09-17IL_R4IQ2N6PTKRNR0S.docdoc 3f70f108975c931a23d9f23fcbfe728d93f6f0b096014280234067b0c54d44bdn/aHeodo
2020-09-17INV_28292745934900.docdoc 08ea41da443b28325813eaf4915479f7b46fb810c9abb7ff732f3da617f9aaa4Virustotal results 35.59%Heodo
2020-09-17O_58662593.docdoc 919424657e6e74b9e81c27aa8efe577743913599bf121e13c3be9bfe56405e76Virustotal results 36.21%Heodo
2020-09-17G_SHP_090120_BIH_091720.docdoc 9bf20dfb53d447d25176c2839e17ba601117c7a1a4f051777df513d7641ebd80Virustotal results 30.51%Heodo
2020-09-17REP_IQ5399668598RV.docdoc fb1da662dff89db69ca276e03a883c96c5089932488e637ff60637aa73d876b6Virustotal results 36.67%Heodo
2020-09-17DOC_09200800.docdoc acf3123bff44a378b2495fa2bdfdf41af5b6c5e63fdeb6f1ef3d0ab683ae0512Virustotal results 34.48%Heodo
2020-09-17BAL_PLT_090120_ZIS_091720.docdoc ff3fdeea7e84bb9d7ed41ba9195b3fd153b59b5b108babdf4946abd95d17aa8bVirustotal results 32.20%Heodo
2020-09-17BAL_LL1068013071JF.docdoc f5840dbc8eb309187a241b93a9b6b15c396337523fe34251556951191660659cn/aHeodo
2020-09-17FILE_WXZ_090120_KIJ_091720.docdoc 24b838aac8e817a378d69923bc4457869372cebb8b6db06af6eff5f41110c700n/aHeodo
2020-09-1797903056.docdoc fd0f987936c01acfb91bb84e9e9c3e6f425f55d07887f14ee595ec418d252849Virustotal results 40.00%Heodo
2020-09-17R_PO_09172020EX.docdoc dcf52647f987ed5fd370ecf3ddd3dedf9c3bcda6c29057f5464d8222839fc45cVirustotal results 40.35%Heodo
2020-09-17BAL_21222146.docdoc f2a510e8f473e3fcdd0bf937cf48caa1de525420bf83a3b465eeaaace00d0d09Virustotal results 37.93%Heodo
2020-09-17DOC_XXC_090120_UOX_091720.docdoc 1d9148e92ae63e33ea191906e85289c189b94e2d74dfb50606784a2ad9b957beVirustotal results 40.68%Heodo
2020-09-17INV_AU2947218039TG.docdoc 9e4278eac329ac03d6c9b60c69594f50d2efb41914b428309216bdfe5ae15904Virustotal results 39.66%Heodo
2020-09-17WTTI_KP9855318840HX.docdoc f0c89d19ca9b6c30286a2f5a0383fee0c9516589dabbcde5749a541cb666b41cVirustotal results 38.98%Heodo
2020-09-17REP_08WTBU1PBS8FO.docdoc bcf9a2940f9615487667d5d0edb9dfcb6e5917b328bc56ada5fe0d5b9f43a9c7Virustotal results 34.48%Heodo
2020-09-17INV_PO_09172020EX.docdoc e09973ac979e2a9efbdb59ea10416f8714545ff719579b21a48327219a3ec797Virustotal results 37.93%Heodo
2020-09-17REP_PO_09172020EX.docdoc d9a35783bb245b622048384501eb1c30e098c547b4d3079e0c8d01e06336464cn/aHeodo
2020-09-17WH7975272298RI.docdoc 1a945df2c4c5399840e2cdcc623c15e12451e66db694d71f26bd718dc8628993Virustotal results 31.67%Heodo
2020-09-17PO_09172020EX.docdoc 430ef6af760d2105f3c14655f66ff5dc191916c938a26256085965a4a536c827Virustotal results 32.20%Heodo
2020-09-177841963510.docdoc 32d3ded66cd762a234e91ee002a061e053d98f38a52d0fa5356bbbf1576c7880n/aHeodo
2020-09-17MQ1929657368HI.docdoc d55ed14cb859a16cddd063eefbcc2fbc78b5e75f2b964eb1f33e1954ce9f0c71Virustotal results 24.14%Heodo
2020-09-17INV_28827140.docdoc 39c83fd21ce730714e93e6bbe85f21770a761285c3fd1b2b2473e00644785e82Virustotal results 27.12%Heodo
2020-09-16REP_7291817478654.docdoc 1ecaceaeb20649c823b3a63accf639925ba8e4c350b2509496c04dbd622d5d4eVirustotal results 25.86% Heodo
2020-09-16BAL_85746098.docdoc f656f7fc2ac175767aea79393803f493b18211403a390c2daf9c5dae720e26e3Virustotal results 25.42%Heodo
2020-09-16N_PTG_090120_OIB_091720.docdoc fd4fb3464a7f787ee4d5b1795fe7b4d8ffde4a1683fc6620602fb78ba52f52a9Virustotal results 26.32% Heodo
2020-09-16RQ_TLR7MHT38NHUPV.docdoc a9c8d3bb56d6abf69a804578bde7b85ae2717ff03d86c79d9f96d313d82552b5Virustotal results 26.32%Heodo
2020-09-16FILE_2293753730820.docdoc 6ba572ac222372c95a63401ec2b6710af0a9445d6c38efc7cf8397461ab1fd8en/aHeodo
2020-09-16Q_TJ6512290087YD.docdoc ba46d0a65699ff5ec5670d31287ae8d04710450b5d267d9e4a2fdf0e94078194Virustotal results 25.42%Heodo
2020-09-16FILE_PO_09172020EX.docdoc 2bc521550fad4a12b0bb8f34a8958db7b2f5b50e9f8579d30d814cee697ab694Virustotal results 25.42%Heodo
2020-09-162583289137.docdoc 98b7ab7a1185220c44567c8e6562c858a1aa47058efd0113421a2f4d7fa63231Virustotal results 25.42%Heodo
2020-09-16BAL_UEZ_090120_OTO_091720.docdoc 89c63f940c17124065f94ee04b40a3cf2f048fb270b93b38fe1b1e937ab4abffVirustotal results 25.42%Heodo
2020-09-16BAL_436953790.docdoc fcb293cfa69d4cbbc6afa71ad0a6456746863f91a54c2af300ca91c088f9c2f4Virustotal results 25.42%Heodo
2020-09-16JMF_090120_DYJ_091620.docdoc 66bd50b4b2f0524aff6b9f64fcad5a686d04778fc56eae470249da88f7c40077Virustotal results 25.42%Heodo
2020-09-16WDKS6YNZVIX2WYWC.docdoc e7631c5a69f76fea0835835a14a8e885f2f3b0c0dec2d577278e70d3776eb0a5Virustotal results 25.86% Heodo
2020-09-16MHVP_58941474.docdoc 73158e3c574c5cfbe98520ebb3b8c4270609205751d997b87414e5a43980f960Virustotal results 25.86%Heodo
2020-09-16BAL_17179027703.docdoc 7cad27b68df51d87f204a171a2f75a578b52e11f339a2bab138c6ada02b5a196Virustotal results 25.42%Heodo
2020-09-16V_XFJ_090120_FJF_091620.docdoc d7f12b14c351620ca64769a126560507c4746cc966510d04d0fa882e521128c4Virustotal results 41.67% Heodo
2020-09-16I71YJ7N18OHEB.docdoc d4d482bd99e2f75b977c3fe22ee3df44c1e3758bd61f0636d31c1e35c2d38be6n/a Heodo
2020-09-16FILE_PZ4369491423QX.docdoc 679e5f33c444b178b0da6da41a58b4590f05e7c464293e3b1d8f858dbe157124Virustotal results 41.07% Heodo
2020-09-16957920299386251130837.docdoc b114281a6664f44018353cae8a6f00cea1d34854e2942f01a9e027d2ab333b9dVirustotal results 38.98% Heodo
2020-09-16BAL_FQ7571555491CM.docdoc e9e98328d96157a0fd47c6abe8d1d60d8521171a61378aded651b274a0619993Virustotal results 38.98% Heodo
2020-09-16WO9771068785ST.docdoc 93700615599bac85fedeb07e6a55684a555f4e77b6592c03f1b9e4cf6df3857eVirustotal results 38.98% Heodo
2020-09-16PT1048995548ZF.docdoc 4254483388cd90e041291de79b3a3d26456908113cb0b2957401b5838c949c38Virustotal results 38.98% Heodo
2020-09-16INV_5049639205.docdoc 1c3544c3d12411b68e3260fa40e9dc0826c344c9a131928a04c7f8f517166645n/aHeodo
2020-09-16PO_09162020EX.docdoc 201b4b59a31c60055c285e64737d5bcba8974b4400c27f37765636deea097b30n/aHeodo
2020-09-16PO_09162020EX.docdoc babaf8e764b3bc4f5fef74de7d819fa533ebf675d69174df27c5e0ae20174ecaVirustotal results 38.98%Heodo
2020-09-16G_44109562238650071.docdoc 6820256b4c1c4c5b50146126f828d2317ef12e023043a390611fe9b036cfe638n/aHeodo
2020-09-16QI_03306876.docdoc c714262e7ca075c2816149ba0cf39cd465e11d7020a2675a228f4180df6163c8Virustotal results 32.76%Heodo
2020-09-16FILE_PO_09162020EX.docdoc 4de948e6257ef045a9344b48f4ddf5612d889f7d5cd462390c1e6fc333fe28fcn/aHeodo
2020-09-16C_31645698.docdoc 0c982fd7e6da85d772a410a46a6569667df380d6fd19d4c597ca1a0f30c140acVirustotal results 32.20%Heodo
2020-09-16MX0007558895BI.docdoc 724fcc39162e781ef870e6512016480ea6e96ef7e11c20a9b8cd25b1496636ebn/aHeodo
2020-09-16REP_2944299050787033239966.docdoc 39031955d734e86e67664eee812819b699a9bc4f869cfb4d28db7f4c99cbdceeVirustotal results 30.51%Heodo
2020-09-16FILE_JFU_090120_BLR_091620.docdoc 6ba958c1d5b047f3d205a8d70c0603727e7777113e1a94b4a6cd6da9a2981de1n/aHeodo
2020-09-16FILE_FIZWHCDJJMXPDMG.docdoc 453fc431889b51f4fb7acf5fc4e22eaba8197e7d496d65d45233adbc854431f7Virustotal results 25.86%Heodo
2020-09-16REP_5QZN158G.docdoc 55caf48be5ac9c86baa0a943d9733131878d5b4316acdaeb3f9fc054a2e3bd38Virustotal results 25.42%Heodo
2020-09-16REP_PO_09162020EX.docdoc 4cc531c7241824525205b57dd2b2ab65b3d2d37861becf043ff065f0a091dbdcn/aHeodo
2020-09-16BAL_PO_09162020EX.docdoc 8d23dd0aa60ef4332c6cee379e7719bb7275f27b1d8be36f48bc0c2e77a4a95eVirustotal results 27.12%Heodo
2020-09-16BAL_XXX_090120_QYJ_091620.docdoc b3f649438cba7dc8f34dbdea69bb67a356906ead944752b8abcc4fcc23b737e6Virustotal results 27.12%Heodo
2020-09-16DOC_427882653.docdoc a1a24cdd447db95aa10894a3b471875da732d0240e0b855117d5d31d9ca09500n/aHeodo
2020-09-16QU8836986973OR.docdoc 716dc594b3320a3bc8601253c2e46721df663c180acbb2b8e62c64f7362b06a4Virustotal results 22.03%Heodo
2020-09-16X_3X0VDOU.docdoc bdf14c66a5a4843014c1fef6f147f6a7454f8f34223c51a2cd78f684c80e010aVirustotal results 20.00%Heodo
2020-09-16REP_PO_09162020EX.docdoc a77ef77d33744bee43471f6efd79797f4e3b790cb616c1a01e546f03a4e960f7Virustotal results 20.34%Heodo
2020-09-16DOC_GVG_090120_CXQ_091620.docdoc 6578fea012e69eb51d9527777ef8c0a05c0e125586536d0f865a2e0ca949f57bVirustotal results 20.00%Heodo
2020-09-16INV_ZQH_090120_WPJ_091620.docdoc e94ff7ee99e57be629d1e0f2be3bada9aa1ae3c87560e031697f35d0d1799945Virustotal results 22.03%Heodo
2020-09-16ZMI_9PFA32FM1H.docdoc 5927e1050bff0bafdd3d27911f79db68592ead3752725e920c682910c76a8eafn/aHeodo
2020-09-16ILP_090120_GCO_091620.docdoc 733150afe58d633a7748c6b98f7f64f72685083f5b0535ee970260073452bc1dn/aHeodo
2020-09-16PO_09162020EX.docdoc ae431c5920941951a5f48a3dfeea0729513e6fe01f6641fa747033213df45ed6Virustotal results 20.34%Heodo
2020-09-16INV_740144227484.docdoc 6b2eab389a7a3b060a0531979a56b8ed93a525cadb8535243ca02b29d3fdb1aen/aHeodo
2020-09-16REP_IBA_090120_ECG_091620.docdoc 3e62fb780c0ad60d1b4e8a1cf6e61782262a3376a1b6552c72c17df57d5375eeVirustotal results 20.34%Heodo
2020-09-16P_35387522607351782.docdoc 4e7eb87760d48d2a83d6bc71a58b4a5f91e388305156ab866c6752003da0add4Virustotal results 19.30%Heodo
2020-09-16843SD6WFYB.docdoc 1bb4012e89aef09b80eda22d99a564f0d3e923f96cbf25dc4a78ff6de6dbb31fVirustotal results 33.90%Heodo
2020-09-16INV_PO_09162020EX.docdoc aa77119b93a22eb88f6ca54e820ebcb3c8df83ce1fc35435eb00f52ff88c26b4Virustotal results 33.33%Heodo
2020-09-16PO_09162020EX.docdoc 38ecd62b04b76c28921cd29f65b7ccde2a36b4414a258682357c05b925825953n/aHeodo
2020-09-16PXD_090120_LHE_091620.docdoc 1b96135a2846d7a48ebfda9e2ca65dd11d6820c9fb6f1ef9a9b2b15395cf48c9n/aHeodo
2020-09-16INV_QCX_090120_NKW_091620.docdoc b75415103d2353ac48eeb8630f5fb9c840dc5b1653351fd68b9a18b4bd070b5cVirustotal results 33.90%Heodo
2020-09-16KFZTLG1AXEEZU1WR.docdoc f8033b99d4728d0e4ad633cd47aa7df527d0cfe6aa3808bbb2f120f4f6c7d931n/aHeodo
2020-09-16M_PO_09162020EX.docdoc 0db5f8d914e43863feb97b598b9d216663ef184121d7d2fedee37f04325c1dfbVirustotal results 32.20%Heodo
2020-09-16DOC_08558758.docdoc f875df5ff3a0ae34e7f9c96c6d419326c5411a29964693ced9a875ab952484d2Virustotal results 32.20%Heodo
2020-09-16FILE_PO_09162020EX.docdoc 67cb2e599dc74d3e6f8048e4f19b08bb8852579326ae869f8c39fa818ef144bcVirustotal results 30.51%Heodo
2020-09-16A_X2SIP2EH4MMQW.docdoc 4d66e8cc8f45638b711778d7d1b698c5b793f452d0a58eb0a71bb5a365729c96Virustotal results 30.51%Heodo
2020-09-16INV_ZPZ_090120_OLK_091620.docdoc c5be1178786e06c4c3265db8da35fbe4f74a96000fe5eb06874abeb6b85fbd74Virustotal results 28.81%Heodo
2020-09-16INV_9153348589588818.docdoc eba11506102b0d17ade3dd25ef88614226a2faa5c3710af2a89b5588f49844a2Virustotal results 28.81%Heodo
2020-09-16K_LM8220177293NE.docdoc 6f04f539195c899715c54e7cc3db85949143180e021314c0e670e09722d2afacVirustotal results 27.12%Heodo
2020-09-16DOC_TTDXMQD.docdoc 57f88105c170f6a9c0718d37fc98fc60ebc7eecbd83b74780b5284d5412ff8adVirustotal results 25.42%Heodo
2020-09-16INV_EMW_090120_GVC_091620.docdoc 722e0b21752c8eb64fbb26fcf4ef9ab58f89050b3b690fa97b068eae6a0b522fVirustotal results 24.14%Heodo
2020-09-16EU0771808097DY.docdoc 7cec88df6a841fbc1251142492e673c8a2cddc58f21d6fd402f8167ee96e194cVirustotal results 25.42%Heodo
2020-09-16BAL_SL3800554510HP.docdoc 4d6b056c7bab909b0af3f0a3a24f5b7fbc4453e31746d29c0c3d60122def5705Virustotal results 25.42%Heodo
2020-09-16L_557705919593.docdoc 3b610a0aa4890a007dcf6df33178a042c25d7ae68a3fdff4d368a5728f811a78Virustotal results 25.00%Heodo
2020-09-16SM1616663089OF.docdoc d4c8ce2687fd07ab7c3991cab5500c05e719381d7906228371f0457d260ded94Virustotal results 25.42%Heodo
2020-09-16FILE_3004A2I2C9AI48U8.docdoc 5b6ad999ba9c1fc2c8a7c9405f7e52131bde9eafabb19f737c031e3b6206d4b4Virustotal results 25.86%Heodo
2020-09-16REP_PO_09162020EX.docdoc 607bf68103d9158e576beb6c3a4b287bc5f5283c5871075a532d44efa448b9a0Virustotal results 25.86%Heodo
2020-09-16FILE_93316029.docdoc 9a29066aa3490e60be3e563dadcd9f7ef75e6eef752abd1bd40ab5323a57a83eVirustotal results 25.86%Heodo
2020-09-16FILE_WH0684232442WD.docdoc d413b9053b30e18ef4358645da23d5c4f74ab8d57d2d78a6e7d423103985b071Virustotal results 25.86%Heodo
2020-09-16INV_65860833407.docdoc 5764303dc206274cefe1d8317b60d9cbf0f363db9b2735feb2cab9133b8b8921Virustotal results 25.42%Heodo
2020-09-15REP_XME2C3WJM01T24J.docdoc aee8c2cd0f5858f9d9f402974a799cfa4ba52786593ce6681014c289e75f58c8Virustotal results 27.12%Heodo
2020-09-15INV_DZZUFZT5MG.docdoc b2a10928dc3d7419e3b9ec74228185d8a4d57a7dbec48722c9fef2178b7baa68n/aHeodo
2020-09-15REP_78878483.docdoc 5e96a02fb1ec1284bbdd4f122425a6f635312ee541211269b39acd5addd3dd5aVirustotal results 30.51%Heodo
2020-09-15BAL_549320587804551661.docdoc 350cf5c830bdf242f41ea336e2803b83af81ba91751cb13c418e5cff3674d95fVirustotal results 29.31%Heodo
2020-09-15REP_12477509.docdoc ed810a173660499c4d9356a3183b890ec5f2d2c6dba475ff95a77ac09d81378aVirustotal results 25.86%Heodo
2020-09-15REP_LD8JY8GRT2.docdoc eb6bbcf1755a8438e950e632c5e1330ff4c78dc8849914d2126abeb732ec4360n/aHeodo