URLhaus Database

You are currently viewing the URLhaus database entry for http://banhang078.webdungsan.com/wp-admin/statement/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:623611
URL: http://banhang078.webdungsan.com/wp-admin/statement/
URL Status:Offline
Host: banhang078.webdungsan.com
Date added:2020-09-29 15:09:11 UTC
Last online:2020-10-02 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-29 15:10:13 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:2 days, 10 hours, 46 minutes Poor (down since 2020-10-02 01:56:29 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30O_627870426128348.docdoc a3d743d11312e842641d3124985266cfd1471f8d21881fb7dfc8dfa9cbd1fe47Virustotal results 26.23%Heodo
2020-09-30REP_NQQ_090120_NKJ_093020.docdoc e8a8b9fc12cfa3ee4f3cd91504cbf5b9af3281a25798c9c23c319044b39b551fVirustotal results 27.87%Heodo
2020-09-30Y_AENCPBE45P.docdoc 5fa75a02b1c855828a4a11cf3cf8da64502f2b4023c776b5f37c98ef894df875n/aHeodo
2020-09-30INV_040573145384431694898.docdoc 728b1a60c5af8cf394d48d6bc7a6a273117da463ab6316c2b43a2fe72b26709cVirustotal results 26.23%Heodo
2020-09-30DOC_0092173482781737583756.docdoc 54f93880d0f4c65aaa29acd1dff0cb761aa8dc7388f96435e8c55ead32b30dfeVirustotal results 26.23%Heodo
2020-09-30M_22358152.docdoc 25ea63c6b2b40a9e3cd16e7ff7bef353fc6d0a0d87b8a661aebc9e377439f8efVirustotal results 22.58%Heodo
2020-09-30W_BTZ_090120_DVG_093020.docdoc 340edbbc6b875bfedadf402c810c9fbdde4fb3d9fee5d5f9996b9723d9fd5c94n/aHeodo
2020-09-30PO_09302020EX.docdoc 9486db0aa8a33c286279563cf621d35b2509967587d82ebd13c2512dce68f231Virustotal results 22.95%Heodo
2020-09-30REP_PO_09302020EX.docdoc 67d5b3c3ed94416daadf1bb5fd4eba9c72b57c7b8f1d7d1e40a7a3def981adc4Virustotal results 22.58%Heodo
2020-09-30AEK0EHD54R7Q.docdoc 08bda1ed5fe14e5198b9ac6497ef066c83189be44ff6fe663d6a708bdab3c8fbVirustotal results 21.67%Heodo
2020-09-30SZU_090120_VZY_093020.docdoc 2d09a2c2cc27e1e5e697d5c7fd6e7cbba00b82f6e118d417147a336d7c4fe92aVirustotal results 23.33%Heodo
2020-09-30292891478.docdoc 7d2c8d827a62c501876d11119d9989eae86dc953f1f0ced0c65a9567cb616fbbVirustotal results 22.22%Heodo
2020-09-30PO_09302020EX.docdoc 950f9c4f6561a52ab6850b63b0551b2e75c7232b28c11aa0e470001d770dd194Virustotal results 21.31%Heodo
2020-09-30IYP_090120_YRL_093020.docdoc e67c373437e7408c177a503ca9bcfc8ccce61d14cfc636074bedb0937c41eb67Virustotal results 20.00%Heodo
2020-09-30FILE_AGU_090120_DMP_093020.docdoc 897b5043fa3f5453de07db0c956147c5a3eedaa6c2d83bd50b5da2b033da51deVirustotal results 21.31%Heodo
2020-09-30DOC_Y3TCIYWMH7IIMB.docdoc 5bd1dec77e268f1da221047d95d57981748b9f359c04a76b1b80de3a2144c67dVirustotal results 21.31%Heodo
2020-09-30L_52771158.docdoc 786c646aec87e25c98dfbac09f886f13f05a1e6690baf9974f99f1b37b6f3713Virustotal results 20.97%Heodo
2020-09-30REP_MR3613777247GF.docdoc 119dab813d43139ec7ee0f953f68341391776f7f5cdbc1fc6eeabf95356a8a21n/aHeodo
2020-09-30FILE_99991392795970.docdoc 0c169d8b50436ffcfc67dc75e5a8534829a932697bf5e79107b4ecc423e227f9n/aHeodo
2020-09-30DOC_066734582454.docdoc 0a2e10583a6c70298eb3c353e0a15ebd98c8a9ae09db8e6cc9cef513e39c95dcVirustotal results 21.31%Heodo
2020-09-30WJMAQ9OIYWO.docdoc fc6f0ac3e38b970866e30342911b1f72bc2a028a33a093badc8c5694321d5808Virustotal results 20.97%Heodo
2020-09-30FILE_90818916.docdoc 8ab2e6cb8892b88bad960fc01887038298cebc93804c11f3bf92624541fd00deVirustotal results 21.31%Heodo
2020-09-30BAL_MX2011615510YM.docdoc 8c898e6465f4f641ea5dc6095375eb50772f4b2d7b0d50f197f74567af847cf8Virustotal results 43.55%Heodo
2020-09-30Q_17913917584290194763937.docdoc 9c8962de4c40c27a546d2347cc878f099354ae9f5cc7e799e78d864d74a6a72eVirustotal results 43.55%Heodo
2020-09-30DMS_090120_XDL_093020.docdoc f69c957e912e4eb54ca00ba379a5808d47ebcb4667393b4b986d2d50ee35e7b6n/aHeodo
2020-09-30G_PO_09302020EX.docdoc 1f7fb407f4aa9c2e8d59826ce97d6fa642f0103b0c140bb54dc65cbe8f8c92f4n/aHeodo
2020-09-30STV_090120_NXW_093020.docdoc 896b1086164f16900fa21fd364f85761da882abeb87573d0eac49e7dfaf2524bn/aHeodo
2020-09-30DOC_439204600045005932044.docdoc 1a2856f6dfce0f239bb89c2fa41ba26f9d1761dd09caa8312e58c26aa1411369Virustotal results 38.71%Heodo
2020-09-30FILE_5JJL0RBOI4EFP5.docdoc e2689c227ea6d5424060e6fce6deab414a52c4d27719a2a2f4a2b9eb635d4f9an/aHeodo
2020-09-30M_6555995473901688744558425.docdoc 8d0311de9248f3fc0efd38e822a2d51fb26ec893e9cef6a0f81a2c2b2ea62bd6Virustotal results 36.07%Heodo
2020-09-30R_57580275086563197593233.docdoc cf47fcf596bf3abee5508f311666cec1399ab7e9b1f1632056db94a3e3a54468n/aHeodo
2020-09-30FILE_PO_09302020EX.docdoc 8649c9f23563646d5b0033bb729307388ddb4396da639cbf0385c08ec0a01cffn/aHeodo
2020-09-3030731812.docdoc d56585c6e4a0ede125061be754c5a0c9b45728232d4c61937ffbc047df3aae30Virustotal results 30.65%Heodo
2020-09-30INV_12962951759595304.docdoc 48e23cb77f6629ddf1c1b70ff1af00789fe9ed39014db2e97b4be24c2e13a168Virustotal results 30.65%Heodo
2020-09-30KI8173913456OB.docdoc 5fce7635748a17b0553d34bb396757644f6ab211ed7865fcd3ecf8b5f1014b29Virustotal results 30.65%Heodo
2020-09-30Z_21998304.docdoc c7e94b09a7bf83d363a7949d7aef5bba5516bd5b0e0c149bbd1dc341b9cd5180Virustotal results 31.15%Heodo
2020-09-29K_72079813895802430837.docdoc d6baf92252e2e3e673077f1cea8fc4bf0e240f4383dffc91c53d88857ba5fdf7Virustotal results 31.15%Heodo
2020-09-29DOC_ZXOLS4VRDI.docdoc defbca721d5850239ce954155a629ed1728ce578781b3e387d8c6305144f0838Virustotal results 31.15%Heodo
2020-09-29BAL_MY5237329985WK.docdoc 5d9881c8900498814ca049d263ca3339b113198bfe781ccb5e5ffbc2b23eb325Virustotal results 30.65%Heodo
2020-09-29WKJW_30630205.docdoc 0a9fb69a602d43df0ec8d95c2efc4363bba8536cb03debf2b59c809e88e8f86fn/aHeodo
2020-09-29REP_PO_09302020EX.docdoc a7bac9b6662da2eb4c3fa6f12c10d790ab6b8ef1735241fcd2a4d35a152a8965Virustotal results 27.42%Heodo
2020-09-29R_YOB_090120_CBD_093020.docdoc 939dd723244f1b6067de3ad59153f624f6460bcfed7a7ae0ee34050177e566c5Virustotal results 32.26%Heodo
2020-09-29W_PO_09292020EX.docdoc 59f15b56958e59270a62cc0cdd726486f7afc4094d189b78461abebb9ba864ddVirustotal results 24.59%Heodo