URLhaus Database

You are currently viewing the URLhaus database entry for http://demodongho.webdungsan.com/wp-admin/Documentation/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:625984
URL: http://demodongho.webdungsan.com/wp-admin/Documentation/
URL Status:Offline
Host: demodongho.webdungsan.com
Date added:2020-09-30 01:21:12 UTC
Last online:2020-10-02 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-30 01:22:02 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:2 days, 0 hours, 39 minutes Poor (down since 2020-10-02 02:01:16 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30FILE_50382756533862522204.docdoc a3d743d11312e842641d3124985266cfd1471f8d21881fb7dfc8dfa9cbd1fe47Virustotal results 26.23%Heodo
2020-09-300ZGFITWMJU.docdoc 63d11b10d793151af69aa10ba45dcd9de40ca61834d018e42474786090043655Virustotal results 25.81%Heodo
2020-09-30S_HIF_090120_NRC_093020.docdoc 74824146908abe5c7caad5b6c9c7f86a6aa087b0422fc5066abd490ae864f456Virustotal results 26.67%Heodo
2020-09-30PO_09302020EX.docdoc 89184bca1106ed62901477bceef09ee282bceca404d17c44630544fdd803cbbfVirustotal results 25.40%Heodo
2020-09-30P1KE68X.docdoc 087b9ff622ebe92583a05a548a41b6384ca243ee1e54af69e35281cc16c6ee83Virustotal results 25.81%Heodo
2020-09-30QF5029463963EE.docdoc 05917a3d7daf2bc7de49c374fe7ec364e19f2aa1b60480a666ed224053f0fe1dVirustotal results 27.12%Heodo
2020-09-3008826248.docdoc efa9c669d5b042ca0892a07861b3f039c3d61f0fa89c57348ee5058445f2db1cVirustotal results 22.58%Heodo
2020-09-30YTK_090120_SLF_093020.docdoc f5e365e70de80b2c17172db5e9c99d037fe2d025161e0c78d7665734a2d108f7Virustotal results 22.95%Heodo
2020-09-30INV_PO_09302020EX.docdoc 9486db0aa8a33c286279563cf621d35b2509967587d82ebd13c2512dce68f231Virustotal results 22.95%Heodo
2020-09-30FILE_NJM_090120_MHP_093020.docdoc 1d5daccb3ffdca9e417370c654eefb0f6a0b2c3de51d7ca751c676d623cd57bcVirustotal results 22.58%Heodo
2020-09-30PYM_090120_ISZ_093020.docdoc cdc88da9dc92cd4bbf8e6de747dd552a54b99dce8dfc68b79373710fc7938e52Virustotal results 22.58%Heodo
2020-09-30KHBT_PO_09302020EX.docdoc a4ba9b07b2355a1be394ecf01c4d26aae440491439fa0db4e7905eaa82a79e81Virustotal results 22.58%Heodo
2020-09-30REP_VLQ_090120_YKY_093020.docdoc a5bc68599f8ed3a4cdd8e4894aad9cd9fa0753278b8a44af04debb277960d44eVirustotal results 22.58%Heodo
2020-09-30EBUL_PO_09302020EX.docdoc a8dae6d86f2ae529335810a70a6f959f195bf9fd10f2ade7549334ff2767cd04n/aHeodo
2020-09-30D3XCD8TY5NZBEWFQ.docdoc e001efbf2686566c49c1a6428a0d6574deeae2c830622f40f5cf6fd46c6d8654n/aHeodo
2020-09-30T_8853145233.docdoc 6b28e785fb139d9950f37bf989bed92089e9f22d3160a16699b2fc8b0d3500efVirustotal results 22.58%Heodo
2020-09-30OSR_090120_QRQ_093020.docdoc dae3de0260b268fd89734a96196759e0a878835e38a868db1ec44194c212e1f0Virustotal results 22.58%Heodo
2020-09-30INV_737349887112776335109149.docdoc 19377355e91331d5f2438275b1af46c6f266bd250c9e6a421feb6deaa86f7cadVirustotal results 20.97%Heodo
2020-09-30GDT_090120_ZSP_093020.docdoc 897b5043fa3f5453de07db0c956147c5a3eedaa6c2d83bd50b5da2b033da51deVirustotal results 21.31%Heodo
2020-09-30REP_71356723.docdoc 8cc454cbd44284ac4a4b398e7fb7e8ef64466cb44537458d884f54fea7d6374dn/aHeodo
2020-09-30DOC_24591178.docdoc 8e31afb89d4b0d827dede24be0d862b7e6ee93b5726a90722e3d29f493922546n/aHeodo
2020-09-30REP_SWS_090120_MBY_093020.docdoc 0008ec3cdaed6559d71c8368c3edff8fd35d8f85816c950e8a8cc049ee6bc812Virustotal results 21.31%Heodo
2020-09-30I_42976461.docdoc 0c169d8b50436ffcfc67dc75e5a8534829a932697bf5e79107b4ecc423e227f9n/aHeodo
2020-09-30FILE_SAW13X4BW.docdoc 7a824b0902c4e58a3bc225caede89cabfc440904f63680f791b4a6421f1500c8Virustotal results 21.31%Heodo
2020-09-30VF4091323087SB.docdoc fc6f0ac3e38b970866e30342911b1f72bc2a028a33a093badc8c5694321d5808n/aHeodo
2020-09-30INV_PO_09302020EX.docdoc 8c898e6465f4f641ea5dc6095375eb50772f4b2d7b0d50f197f74567af847cf8Virustotal results 43.55%Heodo
2020-09-30F_1IV8IFC.docdoc d0ce4cd7cb0a84604bbd7f40f0aa48a2f09e21fb9eb3d4b72d64cf88790f3081n/aHeodo
2020-09-30REP_GJE_090120_HQO_093020.docdoc c648f66670c65dcb17a1ec6a90617481190da0ff1eced41135b2435893b66c22Virustotal results 43.55%Heodo
2020-09-30IW9601236028ME.docdoc f69c957e912e4eb54ca00ba379a5808d47ebcb4667393b4b986d2d50ee35e7b6Virustotal results 43.55%Heodo
2020-09-3005694193.docdoc 3d322e72fd831b7624674c0a9ed650c75bf0cf2d05e5c2dcf7746ee4187260b3Virustotal results 45.16%Heodo
2020-09-30INV_QB4122272869LO.docdoc 010d313ef5a6680acc6fcdaca0eed3e19f256a23cac861684466d6e7f7138030Virustotal results 41.94%Heodo
2020-09-30PC1950445339TM.docdoc 42c1f3bb9e1fae138c02e1447a93ea34c9c4859fca0078bdd3ea01145c4ed12bVirustotal results 37.10%Heodo
2020-09-30YL36DDS5ILG.docdoc d8f8b40e6c0fff5344fce0199e4fd683f50bc846af26963d53ea1554aa202e61Virustotal results 35.48%Heodo
2020-09-30BGVP8BS3F3XT.docdoc 8d0311de9248f3fc0efd38e822a2d51fb26ec893e9cef6a0f81a2c2b2ea62bd6Virustotal results 36.07%Heodo
2020-09-30V_IKL_090120_RET_093020.docdoc cf47fcf596bf3abee5508f311666cec1399ab7e9b1f1632056db94a3e3a54468Virustotal results 36.07%Heodo
2020-09-30DOC_2540596371326540322.docdoc 8649c9f23563646d5b0033bb729307388ddb4396da639cbf0385c08ec0a01cffn/aHeodo
2020-09-30FILE_30711563.docdoc c23dbe57bf9ad222746ad89939427a3fec7c2b13f26a03922e9450f6d07ea0cdVirustotal results 31.15%Heodo