URLhaus Database

You are currently viewing the URLhaus database entry for http://htunkhaing.xsrv.jp/report/16pf6sc13ux/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:624146
URL: http://htunkhaing.xsrv.jp/report/16pf6sc13ux/
URL Status:Offline
Host: htunkhaing.xsrv.jp
Date added:2020-09-29 17:12:07 UTC
Last online:2020-09-29 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-29 17:14:18 UTC to abuse{at}sakura[dot]ad[dot]jp)
Takedown time:6 hours, 14 minutes Good (down since 2020-09-29 23:29:14 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-29VMP_PO_09302020EX.docdoc fbdacf9e30368d59414b52f459d935964b7833d6d8467bf0eb4ccfa97f71e4d6Virustotal results 29.03%Heodo
2020-09-29FILE_AWC_090120_NQQ_093020.docdoc a863d09af176344fa94c7820a54398bd505f2ee93f7f66a6f05d3e60b71479ecVirustotal results 27.42%Heodo
2020-09-29FILE_00580234.docdoc 76d3bae4ebe683a5d3ff0d90971119c287a3acbab073e28b979ad7eaa60e37bfVirustotal results 27.87%Heodo
2020-09-29R_PM8578133386XX.docdoc 268213ac49eccce1009b6716db9e2abf5c5a0f9d3722f052976bea02209c051fVirustotal results 32.26% Heodo
2020-09-29INV_ZTR322XJSKUIKJOR.docdoc 33c16dca57826043e0e0e906d157fcde3b15178d62747fe0ee0f10f1589d9498Virustotal results 32.26%Heodo
2020-09-29D_08379649.docdoc 5ec415733e64c05854cc229c0978d9da72b7615bb092d7cfab7f2b36059af466n/aHeodo
2020-09-29392042620265267735.docdoc 0242549ebc92f3e40e21ec852316e2a5e84ac870bf1a1a571ba2dee66ecb2128n/aHeodo
2020-09-297598126723178181.docdoc 7cdee39270f137f336d212ea12891255c2c592f1ceb9953b87c8957a15098c43Virustotal results 30.65%Heodo
2020-09-29699382034185413124899.docdoc 947195582063f90ccdfbfdd69b565f4f7e819de4f85cc8ebd34575d514f86b71Virustotal results 32.26%Heodo
2020-09-29INV_HJ1223189147KM.docdoc 4c12091055b16db3d329d221e16a7de91f9dbc93593c907716507d7e3eeb8a53n/aHeodo
2020-09-29SI4005304713IB.docdoc 767c5236fd7a0daa1058773f0243a7f1f3548fa0579f8020ade8ed117c9530cdn/aHeodo
2020-09-29INV_1320062519970586.docdoc efcc1ebecfca61615671f3a1c7fcf13219a83d9f529d2e288e386c49cb24fe6bVirustotal results 32.79%Heodo
2020-09-29INV_7T16R5E59.docdoc d68b772804de699fd2f1abb0735015fbe96bb1e7d89c9a1358ba210724b39b52n/aHeodo
2020-09-29DOC_EB0330478772TM.docdoc 59a0ad96e1482c500c3317807e68415d5e352761ab319ac1b7987b036365af7dn/aHeodo
2020-09-29BAL_CF2429368919YS.docdoc 5560f4bd35a2f200e40eee7a63cb48b4d539e2f6dc8d1d793356e1a6b2b9cb1an/aHeodo
2020-09-29BAL_JKK_090120_DBX_092920.docdoc 497e3a22da2b7e3f15b709ae48774acaab651969c4325a4a32a28325a809ee1dn/aHeodo
2020-09-29FILE_6EM62ZAL6QM4V965.docdoc 844dc7bc8eab502d43f5eb0a7501fc0b97ed3192fe06e4e2f33d69dd28fb63f5Virustotal results 34.43%Heodo