URLhaus Database

You are currently viewing the URLhaus database entry for http://www.zhengjy.top/wp-content/invoice/m40f76061991418a33nvefxe6sqltbza/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:607595
URL: http://www.zhengjy.top/wp-content/invoice/m40f76061991418a33nvefxe6sqltbza/
URL Status:Offline
Host: www.zhengjy.top
Date added:2020-09-23 22:57:06 UTC
Last online:2020-09-25 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-23 22:58:27 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com)
Takedown time:1 day, 4 hours, 14 minutes Poor (down since 2020-09-25 03:13:07 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25ZMH_306896344760912184.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2Virustotal results 35.48%Heodo
2020-09-25INV_DBJ_090120_SKS_092520.docdoc 32e608f5734fcb68970d54ede47ece4cf463eced4316ce2fd04fb7869d2072d3Virustotal results 29.51%Heodo
2020-09-252831519876379154712.docdoc 16caa36f21f51e55b03a66ef15c29a8f7054a5fad88ff372ca0bba06dc40a971Virustotal results 36.07% Heodo
2020-09-25INV_0Y4TZMLJI4GMMC.docdoc fe2ee906d8d8678d7ec22ed99ec97b47b6bc55850eefac61f9ec622f2a049bb1Virustotal results 25.81%Heodo
2020-09-25DOC_PO_09252020EX.docdoc eefd694ad7a3c1d10441452c651459410143b5ce0d56e19d39c16c1114105d09Virustotal results 31.15% Heodo
2020-09-24INV_EFKS4YA900.docdoc 47e84b40c894119dda8c1abf4033b74ccdea7712d9ee871dde8360c87e7951baVirustotal results 20.97%Heodo
2020-09-24DOC_LEYH5HLM1.docdoc fe2c4c0e8452ed6b2c6e644296e472af18a988e142404e89061f6cb8f2420593Virustotal results 30.65%Heodo
2020-09-24REP_BBR_090120_OEX_092520.docdoc 8e4be7abeafb997210d1c39bf851ab0c4cd097268cf3664f53c72abc3dcce92fn/aHeodo
2020-09-24INV_70752236.docdoc 071b94219cf7f333e5e3c76753c74ec9a5d71f9d4ccf17cb631287fe3508e39fVirustotal results 32.26%Heodo
2020-09-24INV_RIC_090120_HTC_092520.docdoc d0d83818424904de50c76c45ef3c2bde9e3d7a9527fa2ad35524721ab65f0f2bVirustotal results 23.33%Heodo
2020-09-24BAL_ZFO_090120_MRY_092520.docdoc 7e1935fab86166df5d6770468bf12c57a50720c0b7ba90e21accf2ca8493ce15n/aHeodo
2020-09-24G_17315160.docdoc c4fc9ec7954c1bc71dc415464f2813e6151dd7c106526dfe3aa8d97ec3b8f9deVirustotal results 20.97%Heodo
2020-09-24REP_PO_09252020EX.docdoc dcffae4b2bca57b2e8b65609a127df9975ff71d81bc14a409f0058dba81ebb56Virustotal results 29.03%Heodo
2020-09-24FILE_T0Z4GZ0SWIFI.docdoc d25aed1074e6086a1e8ee4fb6885c8accddd96469d110e343f36d2e13aaebee2Virustotal results 29.03%Heodo
2020-09-24DOC_SOY_090120_SGT_092520.docdoc 02ef96f4a3c715053acf327bd61196658034d30887f0bb1a9769e4bfedfe0a41Virustotal results 29.03%Heodo
2020-09-24DOC_KZ0050241471AZ.docdoc 5bbcb03cbdf0fa9eb5854ee7d5c7d3669e469fbde2dd1cfe0b6c4767dd19d138Virustotal results 29.51%Heodo
2020-09-24REP_VUS_090120_MQP_092420.docdoc 9f420a6781e129b0eb85adb6d30b0e390b5c9e7625a14eae99752e7a5ed0914dVirustotal results 20.97%Heodo
2020-09-24PO_09242020EX.docdoc ea20a59b71ee8c21c84eece43e58023ef1be9265e0198df81b95d6af3b4d38e9n/aHeodo
2020-09-24FILE_KUL_090120_DBB_092420.docdoc 520c035bd0bd60fac0008ee46cd8e3eab4dbdc31d8270d9559efb1e7b5016c7cVirustotal results 29.03%Heodo
2020-09-247316229333856581804209123.docdoc 0043af7d182b9d6145aa3d75f6ced14fbddfab10b615e6997bd426d3a23da6a7Virustotal results 29.51%Heodo
2020-09-24REP_XK0733285444QX.docdoc ce2603e03a1742baf5735e994899aecaa1075b7d6a3a811070455dc802e8df15n/aHeodo
2020-09-24M_QVL_090120_UMV_092420.docdoc df802c906676713581817048e135afe20200029ac5ff1c840ba82b5bbcda75caVirustotal results 22.58%Heodo
2020-09-24M_MTRVLTQPB.docdoc 32bbcef052b442f62a2fbb0c5dad498dcb779148f31f2e51d4f7a38245024f8eVirustotal results 20.97%Heodo
2020-09-24NHA52ACTE.docdoc 8845dd7a737d5dc44971ca503bd120028edc33db789f8155a39c0651c11caf72n/aHeodo
2020-09-241M0DQE8RXO8NNH.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 33.87%Heodo
2020-09-24FILE_QT7270112902IZ.docdoc c84034e8688e0d58d35845c4ad72561fdedd79c6ec344ec1dc7ed759a126a7fdn/aHeodo
2020-09-24A_ZBH_090120_EQY_092420.docdoc d038ad9d31d6764ec9e5ad2246c2f2a99e0c06ca8798bd54e73deecb05dab14dVirustotal results 30.65%Heodo
2020-09-24W_DUCZIAIKJ4D.docdoc 418535f82699ce0df10d39ac2798fcce30da6070fb7b9b0f28562d1146f49e69n/aHeodo
2020-09-24004030152.docdoc f97b2fe462e15ffbe47937e6d6ad815595fdb180d137a7ddd92f9f41e5a6b5eaVirustotal results 28.33%Heodo
2020-09-24MRP_090120_YVL_092420.docdoc 322437c9e679266325e5e5e4e5192b3480e02f680d56fbede6b807db9def583an/aHeodo
2020-09-24REP_63697067.docdoc 3f0693ecde0d7c9983bda3bfa22fbb8243695bf8a48ae127e121813ae527334en/aHeodo
2020-09-24BAL_EL6023199121NI.docdoc c53bc4b67b9b49868bbb7d3a8323cbd2b411a41077e2b691eb9e66516dde0e4cVirustotal results 29.03%Heodo
2020-09-24FILE_PO_09242020EX.docdoc 251086a8d6a3f83e2b9ee3ee013730af40923e3ba194b89a3610e20becc05a1dn/aHeodo
2020-09-24BAL_04853078.docdoc 35fdf71d1156a709edbfc6250568a61a62afb183218e5fc5ffc1249ab07bb4b3n/aHeodo
2020-09-24CWB_090120_YBR_092420.docdoc d6f4d312b2434777abc97c10e41bb86186836a8a9a2e08b5365e301afae8d0b3n/aHeodo
2020-09-24FILE_53352721531099355653.docdoc 0124d3e8aff15d102fb833f22f02e06f09205ee29cc4bb8c1bd2568234eeb319Virustotal results 20.97%Heodo
2020-09-24QN8094951246LC.docdoc 969fa2b3b1738ba0cfebb842c241a5ac4558eda516437f5237a3257cc0140091n/aHeodo
2020-09-2459341201.docdoc 699130456adedce5c03d39cefc3df4b0cd5136c6b5ca856bc65252a8c686ee94Virustotal results 22.58%Heodo
2020-09-24FILE_FEAIXPLC2QBLG.docdoc 994c514f41d20931aa98bc87ccd2de05af9f8245435c55b0f29f7d2062c9b5f5Virustotal results 21.31%Heodo
2020-09-24HMUP70E9.docdoc 04c40043a6f85ced583227c163faec46ab1ea268357293dea65e35744895955cVirustotal results 21.31%Heodo
2020-09-24INV_UAM3ZWDA.docdoc 8b209e2d294b8c5b50bd83d9fd9184268ce21313f7d5876d74c7e10f48ac946eVirustotal results 20.97%Heodo
2020-09-24H_50975242135789116605.docdoc 60443647991cdcd0fb310b965e853672e8c5c83a64629a83d7ee568b23e44296n/aHeodo
2020-09-2499979727.docdoc c1b41bcc38633ca3448055479dfc5bbca852649dbca3c9b90c0f8d884c9dd705Virustotal results 40.32%Heodo
2020-09-24K_4C9R9UN1TKYHL1GV.docdoc 21d6462af9e28cac11c5b8bc20c9f07e953c7af99c15966175e8b8cfc8ee9363n/aHeodo
2020-09-24C_14289332.docdoc 6a85b35a3efb06108074ff5c1c41b6673f1888f5f4766aad5214383d324fd416Virustotal results 34.43%Heodo
2020-09-24C_501QDHO6WC.docdoc c157afe5eb9208b3fe20c864292c3f7a3c1eb02486f1a6b31fd8ef0349a9f3faVirustotal results 36.67%Heodo
2020-09-24JNHO_RPE_090120_BHS_092420.docdoc 7aed739ebb48064d94fa17f51816a7d3f4414ec8d578a6bde0830e844055e971n/aHeodo
2020-09-24K_PO_09242020EX.docdoc 3b95077a69ba1ee1226face3a5f83a78950357b93815180ebb6b6772cf8212e8Virustotal results 37.70%Heodo
2020-09-24FILE_CC6287023649TK.docdoc b427adb1ae5fd4b290ab65b93ea392c40c42f186b732f90768099681494d10caVirustotal results 35.48%Heodo
2020-09-24W_80354848.docdoc fba080b64f42891f1ddec30a5a83c9881e8b8dc2e577226eb1575654caddc56fVirustotal results 35.48%Heodo
2020-09-24PO_09242020EX.docdoc 7f480dae416960104d9733a280be27c1a6381c1a310cb1f7b7b4acb7aa83fcdbn/aHeodo
2020-09-24INV_8QCHGC5WQ.docdoc 80bbc6addbc3d97abecb341c4441b7963d70a2a863d25cf0d35137632a841fa4n/aHeodo
2020-09-24INV_SDM_090120_LMW_092420.docdoc a26964e2d826f555642d9dac0e19c5bf685767b5a0cb12d9a83e6d332251b17dVirustotal results 29.03%Heodo
2020-09-24BAL_PO_09242020EX.docdoc 6e7ae3df631cfa3174a4e9e061f71a3453806fe930adca05896343d9e6f07ea4n/aHeodo
2020-09-24DOC_304392473.docdoc dd71f46f9effed338d5abf88b9b02d44434366d833bb55051cdec45c5b090916Virustotal results 29.51%Heodo
2020-09-24REP_KERS9HPA4.docdoc a279b3d82c086e59725b814eb8f6ddde5387efb28b19f197dcb6a82e239f9906n/aHeodo
2020-09-24URJF_VE0204417344ZT.docdoc a9654b509a80552021269008e33074d85ee269b8a579a23ef93bcc5aba20227cVirustotal results 29.03%Heodo
2020-09-23WDGU_FM3836041791DP.docdoc d74a0a2af76d37b9621074bc15dee942c972ea0fe761110f8767c1b836dec555Virustotal results 29.03%Heodo
2020-09-23R_DV6ET6SZFSLS90D.docdoc 7340c303b5ff42ef74e8996ab95aa2b6b742e4efcc852b96349ea6085e592f37Virustotal results 29.03%Heodo
2020-09-23INV_TYW_090120_GHJ_092420.docdoc 928e299ed0670b544432d1c87854ef00421ee91e55581b623158ef13adabf501Virustotal results 27.42%Heodo