URLhaus Database

You are currently viewing the URLhaus database entry for http://news.leta.com.vn/wuasv4vd/8yaxlnjthmsx01e/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:698220
URL: http://news.leta.com.vn/wuasv4vd/8yaxlnjthmsx01e/
URL Status:Offline
Host: news.leta.com.vn
Date added:2020-10-15 17:43:07 UTC
Last online:2020-11-02 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-15 17:44:04 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:17 days, 19 hours, 45 minutes Bad (down since 2020-11-02 13:29:24 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17QX4993732163GB.docdoc adc4abd5017c3c07f48c23dddd054d05d4f795e5a5c6f8a7a0449a3b04da8dbaVirustotal results 53.23%Heodo
2020-10-17BAL_04265030.docdoc 9f1bbfadc978c537734ee0121e22cc5afc84b8d7078b5410f83a943138eb56faVirustotal results 53.23%Heodo
2020-10-17PO_10172020EX.docdoc dea5fd3adc063b6e71348ff90a5fd338808896d6af7203022a7cf0494cada5dbVirustotal results 51.61%Heodo
2020-10-17SDC_100120_HHV_101720.docdoc 5ee50b193e5286fe85dd62d6111cc21718bc601d35eccbd1257b46df999d9d69Virustotal results 54.10%Heodo
2020-10-17BW4633087775TW.docdoc c0f957552ea0bfa9ec43b903ee17f870d19d10026a6e967b5ba434e26758232fVirustotal results 53.23%Heodo
2020-10-1765964172411964172665051.docdoc 9e5f94414bcc33c4f9405dd2c0747ccc8c79921dbaab834a1ce8cd0205bb1f9bVirustotal results 54.10%Heodo
2020-10-17INV_40458196.docdoc 85a42a8d612d20af55e105cdd7caa6c881ebae398c26dea03e0cf147e543f917Virustotal results 53.23%Heodo
2020-10-17BAL_73090079.docdoc ab8be8e21a7c5f0a158818bdf5fa9883acaffa78d8cfa5cae36ba7d756b8fed6Virustotal results 50.82%Heodo
2020-10-17REP_MDN_100120_NVG_101720.docdoc 4f1b55b5cbbaa28b0d87b93dd256cebd16df18a51e081378940ad152fd24da8eVirustotal results 54.84%Heodo
2020-10-17S_HH8992405107UB.docdoc 69e669abaf2af59fb872755c1dbaac25b25cc27d4dd460db7162fe8b3ebdb158Virustotal results 51.61%Heodo
2020-10-17PVG_51770754.docdoc 58a95bd14fdfe2c4e30b7bce237de2fa3351c1bcf0328c91c9333a29a8be15d0Virustotal results 51.61%Heodo
2020-10-17BAL_15427640.docdoc 252e05a52d4bc9d3d266533b1a75bfab674989b8d3a4f0ff8d898529379329afVirustotal results 51.61%Heodo
2020-10-17F_U95D9E1.docdoc c85fe8825461de0503c8b9b612f01c88a1124e0c33ace58d20c22cf40c4bd03fVirustotal results 51.61%Heodo
2020-10-17TMG_LOT_100120_ZOY_101720.docdoc d19c1e922354570a8700f8dc25900a7c8ae4bee4b08908a4c6cad2309eff1ba1Virustotal results 51.61%Heodo
2020-10-17PO_10172020EX.docdoc 02730b23749bb5e945d78771425520fe94a15b5647f34a7efeca54a72c9297c9n/aHeodo
2020-10-17REP_195U8Q17QVLE59.docdoc db234da6bba5f671c8a6fad07cfc6ad7ce1b078a32f920e2edb4b142167e18dcVirustotal results 52.46%Heodo
2020-10-17WHPM_68983659539.docdoc a106e1da9cf3b1b5b2f7211307b55422cf772fb176003bd02070def6d3b1c13eVirustotal results 52.46%Heodo
2020-10-17ZQ1563010711PC.docdoc 4f6043ed53481592c3b9db4608a157df568b466062cba2018b8e5c59bfb40563Virustotal results 52.46%Heodo
2020-10-17Q_GEX_100120_NXZ_101720.docdoc 99acccb026919eac0d3249c8a9207a71d032fbe59c7540c12aee398ae86e6780Virustotal results 50.00%Heodo
2020-10-17770618184277852216.docdoc 1f9fcb8ad3585c6cbf7250308fc58ebd7fd913baf350cbd3d7fd8934c9e33e43Virustotal results 50.00%Heodo
2020-10-17INV_PO_10172020EX.docdoc 8e0082cbc47e4f5638313b20400e4874bb6371c424ee7ba8eb29009692653676Virustotal results 50.00%Heodo
2020-10-16WYDN_SD5755602876ZL.docdoc 3bae78182dad47ac43920171f44e275863e25a8cbdd07ac0b0279edb751dd12aVirustotal results 50.00%Heodo
2020-10-16FILE_40683496197258609.docdoc 2d4a3ae690cd64017a114de08ffb095c8208ca65f5647809600f6caf8ff7cd97Virustotal results 50.00%Heodo
2020-10-16DOC_NJV_100120_VEX_101720.docdoc a6c0c0fb1ee9b17a84de711e159b1334026597a8484768ca42e1a0955b445b60Virustotal results 51.61%Heodo
2020-10-16MP8937593053AI.docdoc 546efc6d0a2cf1ff3052b328188d26e9576664e7795de51b7ac16d3e5513208en/aHeodo
2020-10-16BNJ_JL3FVN0CK.docdoc c829616c0d226e76bf936406e344c75c3abea9656fdf7b4b1d73934e6a853b3fVirustotal results 51.61%Heodo
2020-10-16FILE_PO_10172020EX.docdoc 59330f6abd11ccf8373697955746b598be71ca8c69774640b41ebd9650abb398Virustotal results 45.61%Heodo
2020-10-16INV_59727543.docdoc 9c44a164c70d7fdbd796c9805e3ce506cf8fd1d8df4d84e27384d794e3c075b1n/aHeodo
2020-10-16BAL_207007591.docdoc 65e2d908e6ada4277630aa4113bdde311bd7e49c0e6e656f3102bbb4f61924e3Virustotal results 47.54%Heodo
2020-10-16DOC_RVK_100120_DSJ_101620.docdoc a556f655a5fe240f6e969c6e0c449f47d357b453c5940205ce2d867f7ca64e4eVirustotal results 50.82%Heodo
2020-10-16KNY_RCN_100120_LUU_101620.docdoc f05cfe8aae97657d11e98c72cd612a7d57f949a47efcf75125edfd9e7a7caa4eVirustotal results 50.00%Heodo
2020-10-16Z_R4C583FFTK098PFF.docdoc 983555bf6e5340b9a14130644379b3ed4d7c6ccaf937b3e800ae1c1b1164dc25Virustotal results 50.00%Heodo
2020-10-16BAL_PO_10162020EX.docdoc c1fd24a9deadc257d29b97063f9923762034a656723d87a0196f23b1cf899e53Virustotal results 48.39%Heodo
2020-10-16INV_PO_10162020EX.docdoc b790075cf1b5ae9592d7b61d5513b6b4ae15e0df4e08226b9152f878e0ef49b3Virustotal results 45.90%Heodo
2020-10-16DOC_YP0382410626HW.docdoc 34ee1271131f57aa2f657049d06dffbee18342c401fa938e4b023ab21831c2e6Virustotal results 49.02%Heodo
2020-10-16F_UE0876136109DM.docdoc 45f7ed6acb52b3f758297672fcb90f410da0edfe48718c002c3b97016ac99d81Virustotal results 40.32%Heodo
2020-10-16INV_25600628000925837399197.docdoc e07a28bf930b88ae86abcb35ec1ebfafde47d78f4eb537440b0b37432afdbb30Virustotal results 47.54%Heodo
2020-10-1608439997766.docdoc ccaca18fab3cf85f49be61cdac5f891f12961393dcfe120af01e6a75b3768b71Virustotal results 45.90%Heodo
2020-10-16FILE_JRK_100120_UGN_101620.docdoc 03fbe322a6456e5d9dba965551b7e114ce5e60b069c859a2f86c9026f3b02ac7Virustotal results 45.90%Heodo
2020-10-16INV_09740678.docdoc 9ef9aea93327bfec6723725da363f724f06ca447c1a54fa84210ec1b01c86415Virustotal results 35.48%Heodo
2020-10-16FILE_PO_10162020EX.docdoc 08c39bc35902925027d9fbcb94add1228e58eb5c4b52c63564ff142b0e186970Virustotal results 45.16%Heodo
2020-10-16DOC_EW0865991360GS.docdoc 2c1c8cab0d411952c802de9667aca0d5ce72024da289e07685554f1a17ef5e73Virustotal results 35.48%Heodo
2020-10-16GK1465661359QI.docdoc 17d47640afda1f39e7e58cefe72a44ad17069aac313079c038884503951a4007Virustotal results 43.55%Heodo
2020-10-16BAL_9CV4WW6FX1L5.docdoc 9c52e949c6c2ca01cb5bf09538ef75451e8aaabf492927bbc8a9f6253007a31bVirustotal results 42.62%Heodo
2020-10-16X_PO_10162020EX.docdoc aaa0b201b6ecd9225b9f151fef9ab72ef2b37f5b2a35ae38b130f2b9b7cc5e8bVirustotal results 40.32%Heodo
2020-10-16FILE_00309766.docdoc 416c28eeaa4f2ecdcea4ff0f31cb81a99f7a9f6ff65c9e96afec641dd8a84a12n/aHeodo
2020-10-16GBJ_100120_SHV_101620.docdoc dc0d0beb0ff575d2b6244bad0266f584bbf8f4846051b62d2a6ba0f341c533d9Virustotal results 37.10%Heodo
2020-10-16H_QK5091364597UT.docdoc 85cafbd8a7231965377fdf168bcf3ebbf41b13c90266dd1bc18d4b20ca6b5f61Virustotal results 37.70%Heodo
2020-10-16INV_IK3274752241GL.docdoc 01f98b1a31eaf93128b65347f3fc0e25b853d2535e9d828263002b80f0e445a0Virustotal results 33.87%Heodo
2020-10-16REP_FJ4163364736WL.docdoc 74f63318ba7dd16ddae51e0b9e1e8a253d02156b7ccdbc947aa9559b49ed49a4Virustotal results 30.65%Heodo
2020-10-16QCC4N5CDAEMNOOO3.docdoc accefbe0f5f7d22de9c59b35078df8ce2c7326f320ef8bfe60df235ec73664fbVirustotal results 28.07%Heodo
2020-10-16FILE_HE0929105624CL.docdoc c9146e559eeaafb38494a657eb583b6833b2c35dd60eafe2140ee8bc22150c96Virustotal results 31.03%Heodo
2020-10-16FILE_2865440084704.docdoc e1657e2b9da4fc39004ca0c0c681b59985f94ca16d04c3f363122de4bb444099Virustotal results 32.79%Heodo
2020-10-16BAL_PO_10162020EX.docdoc 13dd027c7d676424966985f919f6af29ceaa868e93910717ac651e65201aaa08Virustotal results 32.26%Heodo
2020-10-16REP_PO_10162020EX.docdoc 6e1929d0be05fef19f8c294a2323971b7e2127acf7000f5e02e0a1a6555abee0Virustotal results 32.79%Heodo
2020-10-16BAL_UTPARW4D.docdoc 1682a6f58a0d8fe8135a5c7fad215ef799e173618d1292fc89e2ea3fc99f7ed4Virustotal results 32.26%Heodo
2020-10-16BAL_SYF045FX39.docdoc 59353c49c62f983f096262d073e811f1b5b3f843352fc3cc78ff2a20e7aee458Virustotal results 49.09%Heodo
2020-10-16DOC_64656389.docdoc 8c5946d83496491e60468ec85aa90964c00945bcbd8e72e8b05b9f230d85f7f4Virustotal results 50.00%Heodo
2020-10-163787163142932384222.docdoc 72b44b8e255ace9d74a54f19671fdcfa1b296bb221e038ab578044b55b309afcVirustotal results 51.61%Heodo
2020-10-16K_74823848.docdoc 095fe16690d338ae33d6608dbe94adf60f398907737417666034e7a5b64eded8Virustotal results 50.00%Heodo
2020-10-16PLF_100120_PGE_101620.docdoc 2d9023a6f86851ac7ecb86a93a0c083b17f481474a2b8182c64a69cbda7fb2e2Virustotal results 50.00%Heodo
2020-10-16NBV_100120_NDU_101620.docdoc 0132d7543ceb26d2709cd377cfaa3132827b865267e7b98d31bcf3f38e3b1c3cVirustotal results 46.77%Heodo
2020-10-1655443936.docdoc d88cc631f25d888116c3b78ddf00181cc391af4dde6f53be7dab166efdfe71e1Virustotal results 46.77%Heodo
2020-10-16DOC_4I5BGPSNN2JQ.docdoc 197ff18c407c279e436240984c946009e24dc90b17cb986b9bf9554278a8a699Virustotal results 46.67%Heodo
2020-10-16BAL_77260472.docdoc 2ea42eea9abe81ee4415154eabd2fc00bb951b3a234e1b3ef9e824d77ee97732Virustotal results 46.77%Heodo
2020-10-1679859034437933764756168.docdoc 1d9754d306c2afe8fd501b6a7449ce2b31988935a52af20866fe321c5a5b0645Virustotal results 46.77%Heodo
2020-10-16M_4216327959824531.docdoc 200fd063fbce58987452058b68b6f0d32d9fd51afddd74f6ed466124627fc51bVirustotal results 50.00%Heodo
2020-10-16596210068214321731.docdoc 4175a2dd2295146108a2fb6d370f0d24239715d3709a82c0c6ec420a962efe90Virustotal results 48.39%Heodo
2020-10-15BAL_PO_10162020EX.docdoc 70652370e67cef224785a44a3bb57d19f00a8b000714cf7117ed9dec27b3c920Virustotal results 50.00%Heodo
2020-10-15REP_HI6133478156MS.docdoc 3a655449935db1d07871d79739c4fe01d8792844b72e4bc0c3f2c936b6d5ee1fVirustotal results 51.67%Heodo
2020-10-15REP_MJG_100120_OCY_101620.docdoc 5781607bc4d3aa2d65dc523aab5dfea022ffae444327c4463969d7e461822367Virustotal results 50.00%Heodo
2020-10-15BAL_70221352.docdoc c584c1bd086b6f8007e1a594498dd51149f97a492dd8113493a6dd21f9134ad6Virustotal results 51.61%Heodo
2020-10-15INV_73310060.docdoc d9dee0ffa4b0f9f8ae5c312de758420aef5fa12d4489a8c5f3e5ee627ea966daVirustotal results 46.77%Heodo
2020-10-15BAL_643933123714796568591.docdoc 766e921c13edd4367d95fd44b3070b9d4bbee1886ba2e298fc91f030e5e034acVirustotal results 47.54%Heodo
2020-10-15FZ4938521588XX.docdoc 9e6ccb86ca25351f22a9960687787487cd93476f21e943368886f63c03167222n/aHeodo
2020-10-15FILE_G9KJMOQ10Q5L.docdoc 966af50d9ffd82cdc2a4fa693620dfe90172ef15047cc10d3b35fcd47ae47c4fVirustotal results 46.77%Heodo
2020-10-15EM_16506948.docdoc b9bb517022d0b2c98532d6239bd55d7a33911467a4ca1d6c8d69736530a6157aVirustotal results 46.77%Heodo
2020-10-15YFA_100120_YXV_101520.docdoc f0abef25579afd4a06a70b4a55ce9b492df87c17b66b1949f541f679f6376b84Virustotal results 47.54%Heodo
2020-10-1500557149020678907987.docdoc 35063a36e2a9b2ea2f0a17e4f4c22a81de62a240888fbb22195984501125bc34Virustotal results 45.90%Heodo
2020-10-15DOC_FWE_100120_ISF_101520.docdoc dc7ade8fcae56fa5c268c86c9602ade9af26324733a73c86e60274a9f5b8e864n/aHeodo
2020-10-15JVI_100120_WLW_101520.docdoc 00534d43b370927552e8c71deae866472d34d67e1af2d02b93067c8b2fbc279fVirustotal results 45.90%Heodo
2020-10-15REP_31448756.docdoc 39c25de18abaccdff5bdbe5fb490b60e00e8b38d1c30556115d11f468d4b6a76Virustotal results 45.16%Heodo
2020-10-1515516423.docdoc 0ab272f979fa9aed2035beb2f578c7dd1b689f64452457def9e7aca2d1c91a3an/aHeodo
2020-10-15P_PO_10152020EX.docdoc 6f0ceb3c0b3cd6f963d2f3fd18d56b6b2efc81264aae48892a3da6f028e9de66Virustotal results 41.94%Heodo