URLhaus Database

You are currently viewing the URLhaus database entry for http://f6.com.vn/gx/ckeditor/public/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:698199
URL: http://f6.com.vn/gx/ckeditor/public/
URL Status:Offline
Host: f6.com.vn
Date added:2020-10-15 17:25:08 UTC
Last online:2021-03-16 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-15 17:26:02 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:5 months, 1 days, 9 hours, 11 minutes Bad (down since 2021-03-16 02:37:07 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17FILE_HSYTTHEDYKD.docdoc 360a5cb7eed923017b4ef07460e7652362cdf1fc0a902516addbb8e244e30134Virustotal results 53.23%Heodo
2020-10-17REP_585064797275690679.docdoc bd5e318573106192eca830985c93ad07583928c7ba9b1f752ee5ce3e38eea593Virustotal results 53.23%Heodo
2020-10-1780891430.docdoc 36d4d0f8ba694e3a45ac3fd858e3312538bf61d501403dcbe763638f043ab3a1Virustotal results 53.23%Heodo
2020-10-17INV_GGE_100120_RLJ_101720.docdoc c5b951c65f67f1136dedc670dfa0cf0fe59abb9172a0fe5a6011e2882e129e8aVirustotal results 54.10%Heodo
2020-10-1742541133.docdoc 169fa4037e8c45a38a3b2e862d860e955fc810c63682c78155bbbd45820b83bfVirustotal results 54.84%Heodo
2020-10-17DOC_172301397438892426188.docdoc 5bc6a9797e0e1b206a0d2d341e88b730f01312279122e98e1dc2873f48b2102aVirustotal results 53.23%Heodo
2020-10-17INV_25114395.docdoc e9fc0607223bdfcf6365b914d806c89315bbdfff9681454d6b67b060ef04024cVirustotal results 53.23%Heodo
2020-10-17BAL_VRL_100120_DFF_101720.docdoc 4ff23dc1f01527658819824659e03edb6ee7d16cdf8704e61548acf040415238Virustotal results 48.33%Heodo
2020-10-17REP_1311224188847.docdoc 797ebeb27b3af7fa872d899601baf807800f85a84371fbee97e2232f841c4ae4Virustotal results 51.61%Heodo
2020-10-17BAL_98669281.docdoc ea065a0dbc3ca645237d0c98e82887ca636451f3fa822c6c0a087a2fe98c230fVirustotal results 53.23%Heodo
2020-10-17FILE_JDR_100120_BEO_101720.docdoc c0f957552ea0bfa9ec43b903ee17f870d19d10026a6e967b5ba434e26758232fVirustotal results 53.23%Heodo
2020-10-17DOC_241225158445749.docdoc 9e5f94414bcc33c4f9405dd2c0747ccc8c79921dbaab834a1ce8cd0205bb1f9bVirustotal results 53.23%Heodo
2020-10-17ADVU_WK9391806297KQ.docdoc 6d5ed047cba0f40a2bd108fdb285520a5590c29ac64b7a9d32a20719905f1e7cVirustotal results 53.23%Heodo
2020-10-17REP_67380803.docdoc ab8be8e21a7c5f0a158818bdf5fa9883acaffa78d8cfa5cae36ba7d756b8fed6Virustotal results 50.82%Heodo
2020-10-17K_UF2778646120SY.docdoc 4f1b55b5cbbaa28b0d87b93dd256cebd16df18a51e081378940ad152fd24da8eVirustotal results 54.84%Heodo
2020-10-17DOC_7356632363728921489534.docdoc 58a95bd14fdfe2c4e30b7bce237de2fa3351c1bcf0328c91c9333a29a8be15d0Virustotal results 51.61%Heodo
2020-10-17BAL_83181561.docdoc 905c7ae4c62237c4d5783b52652b9eef6be72076862c6f6aaa440f8e7ce23a8cVirustotal results 53.33%Heodo
2020-10-17BW_6451019679446883606849463.docdoc d1e952f7b8eac274a9eb54c0ce6e8c6542aaa16cbdf7345c10c79852c2d5bd0dVirustotal results 53.23%Heodo
2020-10-17LZ0059435574ET.docdoc d19c1e922354570a8700f8dc25900a7c8ae4bee4b08908a4c6cad2309eff1ba1Virustotal results 51.61%Heodo
2020-10-17INV_PO_10172020EX.docdoc bb96b8f7ca8418e8d16ada7ed78c33abe3bd24d7ca843033cc73e73e4c606fdaVirustotal results 51.61%Heodo
2020-10-17I_PO_10172020EX.docdoc 8d13034de40b71141b07afd251984bb9b827f62b140815127683e779ebb9ab43Virustotal results 51.61%Heodo
2020-10-17VSXX_PLE60P5Z5.docdoc fd0ec2733cb7fc4d8f934cf81b56a9a6fd2dd7290c257cdf4c2a1b3da2bcfc10Virustotal results 51.61%Heodo
2020-10-17E_IP2S7629NP5T64A.docdoc eb06448eea7b0d73132945671275ea572688e13de195a89974d8315900ff8cb7Virustotal results 52.46%Heodo
2020-10-17874791899883456896224.docdoc af4011781c0a2add45a6f72b8d52e5bd7d7381ff28c93e478dede0ff100ff237Virustotal results 50.82%Heodo
2020-10-17INV_23135958.docdoc 8d9046f3f3aef8eaa74dbcc4aa33811b0f06438b3c4fd36bda76c6190da4f669Virustotal results 50.00%Heodo
2020-10-17DOC_PO_10172020EX.docdoc 71c1be4d00ef4ec74c73abf05187dacf0335a393a145eff2b2efd68cbaa91b67Virustotal results 50.00%Heodo
2020-10-16F_FESI2FIUAZH.docdoc c25321d27755dd74dfcb51c16c96a607d16b09b59b1cbe7f025dc89763d9d630Virustotal results 50.00%Heodo
2020-10-16BAL_NTL6LBJZT.docdoc 70c3e11a1960c379e6be0215b70999623bb37cad12e932cf4d222f70f078c6d2Virustotal results 50.00%Heodo
2020-10-16XLS_100120_MSW_101720.docdoc 6647111dcc98f3a01470eee7de5a3b93b579a08c585cd3553cbfbdf3d54db556Virustotal results 53.23%Heodo
2020-10-16INV_KAM_100120_MUP_101720.docdoc 8b9e3d3ef38f9f1096f096111876eeffc30737416c2ef195b4ec180c0d3eb176Virustotal results 51.61%Heodo
2020-10-16XK2800296236CX.docdoc 23600bb2ceb80154b049764a263e10cc02148048a332d10edf6458fc4b2cc34cVirustotal results 46.77%Heodo
2020-10-16INV_FPQV9G9ZEKR.docdoc 8215f350c6c5d2b5f615bcf7260cb9eeb60747b75a9e6a8e4b9c3ef3b70b8cfeVirustotal results 50.00%Heodo
2020-10-16REP_MEUCE3Q7H.docdoc 8e4239eda8a4993212d0de12a0e6fb748c995f1a89e8fab3417a0140b9f650d8Virustotal results 50.00%Heodo
2020-10-16INV_ZJZVNTXJBVM5P.docdoc 1c3dd09ac057aa6b432e637992b2d3f2dac3ec4212fbd51771b0bfd7be470110Virustotal results 48.33%Heodo
2020-10-16R_PO_10162020EX.docdoc 7b8b2d4ca133105321f5881616be8cc7960257d1f6abbbe026c67e10eaa6ebb1Virustotal results 45.90%Heodo
2020-10-16INV_NC1300335553ZG.docdoc 2069708e26eb58f872b15305b2443d1fd546458a653b01f5f0fabb291e3d4deaVirustotal results 50.00%Heodo
2020-10-165877886569298432648156.docdoc ba25bd51dddd6e6b5f359d2e79ac6cafab5ec98ac623f412764253be9e449833Virustotal results 50.00%Heodo
2020-10-16REP_76760358.docdoc 377a8aa05410c72d8d06b12b0bff24a6933b51ef88838ed2aa83cb18b0e2b303n/aHeodo
2020-10-16REP_94925036.docdoc c1fd24a9deadc257d29b97063f9923762034a656723d87a0196f23b1cf899e53Virustotal results 48.39%Heodo
2020-10-16REP_E80P97XL4I50V.docdoc aea241f3329677966d3248a45a28963b925735e86541501338bd8f27590ab88eVirustotal results 47.54%Heodo
2020-10-1692868784.docdoc a9aceace56c828f6185a5d3c739ae2a2e43d825c4b884faf02f5acf460a6be5fVirustotal results 48.33%Heodo
2020-10-1642AVC1VL6MSYC.docdoc b8031f04cccc6be26a29ea7f8ce5296fcad48e7a2aa335b460b4c62015004cbeVirustotal results 40.32%Heodo
2020-10-16BAL_PO_10162020EX.docdoc ccaca18fab3cf85f49be61cdac5f891f12961393dcfe120af01e6a75b3768b71Virustotal results 45.90%Heodo
2020-10-16REP_E1C120NUWJ.docdoc 0bab2e001c17a0c5e7e4719f5cb445b2c31b2614e575723a0f614c2c223581a0Virustotal results 45.00%Heodo
2020-10-16I_LRXZR3XH.docdoc 5c6f2d9a882fc281752198cd5c713aab468bafe4a0ed461ed70556a8dd12b900n/aHeodo
2020-10-16BAL_9653039782784.docdoc a2864ec0d73578ac81e51cec11d7ebaf531bd59f579c05e796110a99e0d20e88Virustotal results 43.55%Heodo
2020-10-161457318996929993636.docdoc 84e8abea7d9cd4e2d9c01114ed11fb7e62c9ca8ee2b0f89c9d99430189e2b02fVirustotal results 37.10%Heodo
2020-10-16INV_LSI_100120_HFJ_101620.docdoc eb5e0b1951caa747b0a1ebbfbd710a70bd21f0fc5d04d52dd7a480ba2e8c63b8Virustotal results 41.67%Heodo
2020-10-16REP_09670179.docdoc b83db799143af2357b9936a37237bc7924f75aa416acf19e549d3a6e453fc8dbVirustotal results 43.55%Heodo
2020-10-16OTY_JC5YY8XJ2.docdoc e1350796dd3663bdf614b62a143749edf7e6a79152f8a705253bba4a593610dcVirustotal results 41.94%Heodo
2020-10-16B_93923220.docdoc 5f94a90f54d5c04a4ba33f0d4884392c5411775d63d2293793f9e0d348bfc88dVirustotal results 41.67%Heodo
2020-10-16QIA_68131427.docdoc 06ed9f71bb75c3f1c65fc774e6cf9914f9d7f8e54cd0cfe68ff7e71de686f446Virustotal results 36.67%Heodo
2020-10-16BAL_21252479.docdoc de1e044b0692b4790189c84a6a3bff006ea424fc6ab7a94f3063c76dcf38b463Virustotal results 37.10%Heodo
2020-10-16020729179.docdoc 85cafbd8a7231965377fdf168bcf3ebbf41b13c90266dd1bc18d4b20ca6b5f61Virustotal results 37.70%Heodo
2020-10-16INV_B3M7LXJJ0WDAF6.docdoc cd26ab187d5f4f2fb4fcb48799e6fa9d43fbe49c83a2e0b719ca6547134ad108Virustotal results 31.15%Heodo
2020-10-16PO_10162020EX.docdoc 74f63318ba7dd16ddae51e0b9e1e8a253d02156b7ccdbc947aa9559b49ed49a4Virustotal results 30.65%Heodo
2020-10-16DOC_PO_10162020EX.docdoc 27fdb3c973c1b3937b2df582f0fb1f1f6cd4d3139a75a8953a1da41a7815fb31Virustotal results 30.65%Heodo
2020-10-1610928366871819577084.docdoc b2bff2d09e6a000d2f22defa798a37e78e1b5e731c1ab14c978bb7a1e45a3415Virustotal results 31.67%Heodo
2020-10-1637082865.docdoc aa3af1b21af839268143b000b0e8f4a431079b94f69c8025f31315e8ceac2b47Virustotal results 31.15%Heodo
2020-10-16REP_QH2846767621LZ.docdoc 06e060a5282c8d2f693c8ba4aefe1f43fbe3e421913e3c26acb895b10250a4caVirustotal results 32.26%Heodo
2020-10-16INV_IZB_100120_PGK_101620.docdoc 18b87dafb2baba028eb4b73c0fa26e56c77d007dfaeaa33de5a7b45a5842a989Virustotal results 32.26%Heodo
2020-10-1686013736.docdoc e6896dad4ee0bc73a3114762b88c9d93732c631e64c537334ac38f7c7c421141Virustotal results 32.79%Heodo
2020-10-16X_SQTLX16AEL1.docdoc 8c5946d83496491e60468ec85aa90964c00945bcbd8e72e8b05b9f230d85f7f4Virustotal results 50.00%Heodo
2020-10-16BAL_079008020785428.docdoc 83f30b3a4a10e5a1a7c91c9ca69d9bc4551924e63d41ca17faf0be34297659daVirustotal results 50.00%Heodo
2020-10-169HT5D5D70GC.docdoc 72b44b8e255ace9d74a54f19671fdcfa1b296bb221e038ab578044b55b309afcn/aHeodo
2020-10-16INV_ZIP_100120_RBD_101620.docdoc 551880e02b296af7914d070f4040b2ff350b298b8c64b1f7abb096514add304an/aHeodo
2020-10-16BAL_GL3523979099QY.docdoc 862a3557cbd080c1e4b737d044d2a849ffc1fda3cd46e474ff947ff583357464Virustotal results 50.00%Heodo
2020-10-16REP_57831721.docdoc c1a5fabe5d3cfa0cfe41476eed0e59b226db234ae57ea097b50adac70d5d9f98Virustotal results 46.77%Heodo
2020-10-1691590684503733202767.docdoc d88cc631f25d888116c3b78ddf00181cc391af4dde6f53be7dab166efdfe71e1Virustotal results 46.77%Heodo
2020-10-16T_WXBIR2T32A24HM5C.docdoc d9dee0ffa4b0f9f8ae5c312de758420aef5fa12d4489a8c5f3e5ee627ea966daVirustotal results 51.67%Heodo
2020-10-16DOC_929390298.docdoc db94d5c4b06addbc9cf25f6314120acc65844c5992881c55969c97cec957012dVirustotal results 46.77%Heodo
2020-10-16INV_KP6877300787MW.docdoc c9570917c32ecb1c6b6e8ffa9a486d3aebc0d0dca67ae6021b1c5a39f22e69baVirustotal results 46.77%Heodo
2020-10-16REP_AV8633973119RR.docdoc 2fc8f20d9cf100c7de1244d5ccb17f14230e534ff24921e0cb537ebce7668908Virustotal results 48.33%Heodo
2020-10-16S_QBF_100120_FGM_101620.docdoc a0af2c0d46bfa10fc4589560d7055a18babee6615726fb2893b817e111f9ecbfVirustotal results 46.77%Heodo
2020-10-16DOC_GEP_100120_SLD_101620.docdoc 52cc4044252ebba622acceb8374c67dac01416c08fc26a5a1e366be2d6a475aeVirustotal results 46.77%Heodo
2020-10-16IIE_100120_DLM_101620.docdoc d3c37e88878ac9801e592c464b9f3e15b30ef3096684d4efb9ca6cc6dd042734Virustotal results 48.39%Heodo
2020-10-16D_JRB_100120_NNS_101620.docdoc 35063a36e2a9b2ea2f0a17e4f4c22a81de62a240888fbb22195984501125bc34Virustotal results 48.39%Heodo
2020-10-15DOC_0767172705468821234893.docdoc df301a07bada1a07adbe33c638f8c00159a565bafec1b7fc1ff5ff69b6a7946cVirustotal results 49.18%Heodo
2020-10-15GRC_100120_OZO_101620.docdoc 2889aa2818bb6b697ece0258b29a039f5f46f85444792ecad4d3667806bb5610Virustotal results 50.00%Heodo
2020-10-15PO_10162020EX.docdoc dba29a78e7fca48b133d315c553587d7ba8ed5185ea92e7630d507c84e74ea41Virustotal results 46.77%Heodo
2020-10-15INV_55920539.docdoc 2955467d39aee8efaa08f284298b86e105ff6b8855c674bb41e38ca21d2c6bfeVirustotal results 46.77%Heodo
2020-10-15PO_10162020EX.docdoc 874551f55294cc8838b596c8ffd8d4600ade4c1e932ea618012210a3ac7137c2Virustotal results 45.76%Heodo
2020-10-15CJQ_PO_10162020EX.docdoc 69f9016515fae6fcbd183373fc2264cde1b32149aeccfe75d2f248beb80c5d5dVirustotal results 46.77%Heodo
2020-10-15PO_10152020EX.docdoc 966af50d9ffd82cdc2a4fa693620dfe90172ef15047cc10d3b35fcd47ae47c4fVirustotal results 46.77%Heodo
2020-10-15PO_10152020EX.docdoc 677cb2fc5d7a4e66220d66445d3a7fa7129fefcfad236744a558140e65d7264cVirustotal results 45.16%Heodo
2020-10-15O_KIH_100120_TZD_101520.docdoc 28a6bdd824538dcbdc61dc5ffe9d61ccf016e4a4bb027becec2d522503ec8b0aVirustotal results 47.54%Heodo
2020-10-15RJ0343047674YJ.docdoc 3a3dd7687c72a79fe44ec05be24ef77e62e6b1cdcf3f202251d6c12e94475dcdVirustotal results 46.77%Heodo
2020-10-15N_OVDT4ZJW.docdoc a44bec73fa5d84c99c152a133907faff21cecbabd17faba199a628c8259be229Virustotal results 45.00%Heodo
2020-10-15VY_34961011542855651821168.docdoc 00534d43b370927552e8c71deae866472d34d67e1af2d02b93067c8b2fbc279fVirustotal results 45.90%Heodo
2020-10-15INV_WM3485202292HH.docdoc 5781607bc4d3aa2d65dc523aab5dfea022ffae444327c4463969d7e461822367Virustotal results 46.15%Heodo
2020-10-15INV_GO98OQQMFCLU.docdoc 39c25de18abaccdff5bdbe5fb490b60e00e8b38d1c30556115d11f468d4b6a76Virustotal results 45.16%Heodo
2020-10-15N_38242475820.docdoc 004b9a020076d8317b6e57259eff30a147253aafc450379efc2c62a61fcd42efVirustotal results 43.55%Heodo
2020-10-15BAL_PO_10152020EX.docdoc 6f0ceb3c0b3cd6f963d2f3fd18d56b6b2efc81264aae48892a3da6f028e9de66Virustotal results 41.94%Heodo
2020-10-15FILE_4RCSR4NO8XK5A.docdoc a601d4de12b342342f6598cd8381b96e29a65844b37244bdff0603a42601f9a5n/aHeodo