URLhaus Database

You are currently viewing the URLhaus database entry for https://tokyo-kanon.com/wp-admin/wlcci6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:703057
URL: https://tokyo-kanon.com/wp-admin/wlcci6/
URL Status:Offline
Host: tokyo-kanon.com
Date added:2020-10-16 17:42:08 UTC
Last online:2020-10-19 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 17:44:40 UTC to hostmaster{at}nic[dot]ad[dot]jp)
Takedown time:2 days, 8 hours, 45 minutes Poor (down since 2020-10-19 02:30:20 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17REP_KX4007259073BK.docdoc 360a5cb7eed923017b4ef07460e7652362cdf1fc0a902516addbb8e244e30134Virustotal results 53.23%Heodo
2020-10-17FILE_5081001476759243889.docdoc 39ba6406fa7f104c5275ad449ef4bf5f319caf7089cf553da10dc8ac12387f18Virustotal results 52.46%Heodo
2020-10-17REP_PO_10172020EX.docdoc b61cc94625d0aec1674d3ffb90ade5b30575e1eb8a755f9944cfcb4d40378041n/aHeodo
2020-10-17JFF_EMP_100120_OMU_101720.docdoc ba34959e897c2ec63c8cba1a6da0e8711cd958153938466386cfe70cc8f2df52Virustotal results 50.82%Heodo
2020-10-17REP_3100232813501.docdoc 169fa4037e8c45a38a3b2e862d860e955fc810c63682c78155bbbd45820b83bfVirustotal results 54.84%Heodo
2020-10-17LWK_FB9399216296AZ.docdoc 08171ab9613c40f0cffda97d95d104eabd33aca151d19a4315b8e2ec2142fb63Virustotal results 53.33%Heodo
2020-10-17MU_54838858.docdoc 5bc6a9797e0e1b206a0d2d341e88b730f01312279122e98e1dc2873f48b2102an/aHeodo
2020-10-17FILE_AEB_100120_WCT_101720.docdoc fdcbcd4f6d22900775055fa03ab8643f72041e73d6af1c271a672ce65268e0ddVirustotal results 53.23%Heodo
2020-10-17DOC_XEC_100120_UOS_101720.docdoc ff9996026d66c80170010bab3d84d0ba1ecac3a6b87f8e694008feb0bc0b3d4fVirustotal results 53.23%Heodo
2020-10-17K55TW7FMFB7SN0JP.docdoc 5ee50b193e5286fe85dd62d6111cc21718bc601d35eccbd1257b46df999d9d69Virustotal results 54.10%Heodo
2020-10-17DOC_70338339023800627.docdoc 72e665a7d43027e4ad6206ba82bfb44f113e89c81b249b2c9ea29c45faf022ddn/aHeodo
2020-10-17VW5530534369GJ.docdoc 7f7aaae8116f26c7d91c5c3d87ab7c7a752e628195c25563cc7c3074669e6c7aVirustotal results 54.84%Heodo
2020-10-17REP_JZA_100120_WYM_101720.docdoc 127e5f88e44a1886181820087f5a2d1bb09ecec7ca49c027c33c9cdead79c1acn/aHeodo
2020-10-17DKU_100120_XIB_101720.docdoc ab8be8e21a7c5f0a158818bdf5fa9883acaffa78d8cfa5cae36ba7d756b8fed6n/aHeodo
2020-10-17FILE_SQ2982001791JL.docdoc 69e669abaf2af59fb872755c1dbaac25b25cc27d4dd460db7162fe8b3ebdb158Virustotal results 51.61%Heodo
2020-10-17G_5890065905.docdoc 58a95bd14fdfe2c4e30b7bce237de2fa3351c1bcf0328c91c9333a29a8be15d0Virustotal results 51.61%Heodo
2020-10-1733C8YNB5A0UW7.docdoc 252e05a52d4bc9d3d266533b1a75bfab674989b8d3a4f0ff8d898529379329afn/aHeodo
2020-10-17INV_OBLSWQ6DGK6Z.docdoc c85fe8825461de0503c8b9b612f01c88a1124e0c33ace58d20c22cf40c4bd03fVirustotal results 51.61%Heodo
2020-10-171103958964986007993223.docdoc d19c1e922354570a8700f8dc25900a7c8ae4bee4b08908a4c6cad2309eff1ba1Virustotal results 52.46%Heodo
2020-10-17GL_IU7283991067LY.docdoc bb96b8f7ca8418e8d16ada7ed78c33abe3bd24d7ca843033cc73e73e4c606fdan/aHeodo
2020-10-17DOC_TVC_100120_XUR_101720.docdoc db234da6bba5f671c8a6fad07cfc6ad7ce1b078a32f920e2edb4b142167e18dcVirustotal results 51.61%Heodo
2020-10-17FILE_40980238721898148841.docdoc fd0ec2733cb7fc4d8f934cf81b56a9a6fd2dd7290c257cdf4c2a1b3da2bcfc10n/aHeodo
2020-10-17PO_10172020EX.docdoc 99acccb026919eac0d3249c8a9207a71d032fbe59c7540c12aee398ae86e6780Virustotal results 50.00%Heodo
2020-10-17FILE_ZG3612728116UP.docdoc 71c1be4d00ef4ec74c73abf05187dacf0335a393a145eff2b2efd68cbaa91b67Virustotal results 50.00%Heodo
2020-10-16REP_452738054804372591.docdoc c25321d27755dd74dfcb51c16c96a607d16b09b59b1cbe7f025dc89763d9d630n/aHeodo
2020-10-16REP_OP8575282457PW.docdoc 53467ef76cb2d0f4cc9404439089220dd6d34680c167f2f062307713724ee9bbVirustotal results 50.00%Heodo
2020-10-16FILE_THIB5XD5AFNFF.docdoc 70c3e11a1960c379e6be0215b70999623bb37cad12e932cf4d222f70f078c6d2Virustotal results 50.00%Heodo
2020-10-16REP_LC6911638760AQ.docdoc 6647111dcc98f3a01470eee7de5a3b93b579a08c585cd3553cbfbdf3d54db556Virustotal results 48.39%Heodo
2020-10-163939215563559038.docdoc c041d525830dc0931ba8595f644dd8464550c8e62933d48ba6801f11460b33a9n/aHeodo
2020-10-16REP_PO_10172020EX.docdoc 69bf38e708fcc10caf5824bb4460ed7f950dfb3085f715c81303b992c3bb6857Virustotal results 51.61%Heodo
2020-10-16VBFU_12909093.docdoc 0e28ab1cfd540547e916442f60de01263eaf13058f99d4cd5d15a2cd5c078f1aVirustotal results 46.77%Heodo
2020-10-1691688263.docdoc 8215f350c6c5d2b5f615bcf7260cb9eeb60747b75a9e6a8e4b9c3ef3b70b8cfeVirustotal results 50.00%Heodo
2020-10-16INV_7Z0N2TTJPRPD.docdoc 1c3dd09ac057aa6b432e637992b2d3f2dac3ec4212fbd51771b0bfd7be470110Virustotal results 48.33%Heodo
2020-10-169883953057093544.docdoc 42b0f6b8bb6f89af3b0522edf491d6fd823bd44170bd828f1864212eab862edaVirustotal results 46.77%Heodo
2020-10-16INV_47937872.docdoc 21f2a9296db63e8671bce4862c485e7ebf0a1a4bfac598720516c4e81d951f97n/aHeodo
2020-10-16FILE_HTA_100120_OVR_101620.docdoc 8cca5e7fe35ef9fbd67206c7b0e279dd5678cd3c578d93c0091733df4fb01445Virustotal results 50.00%Heodo
2020-10-16JPS_100120_PIT_101620.docdoc 66039545c0341ab69ac7dac547c88d087e88a6fe13ea338a5fd0397364c0350cVirustotal results 44.26%Heodo
2020-10-16Z_602400492841746155.docdoc ab228c0d048650a1af093a804ed45ad34e299d116df41396dcb2d6fa5ad5636dn/aHeodo
2020-10-16DDV_100120_NME_101620.docdoc ffa06f345711cab1bbf64ad42a6ab9b9264655ec20d39fd3ab37d4e950c98b8aVirustotal results 46.77%Heodo
2020-10-16LVS_QZ6744057284XP.docdoc e97af226cb6ae6afdede5c38dac1d63a54bd2768e9dce8790fa340c9b900691bVirustotal results 50.00%Heodo
2020-10-16FILE_XJS_100120_KCJ_101620.docdoc 89157919f283aad6306a78ae43e54b55c2431a0a64dbfcef22df553bf09ae681Virustotal results 49.18%Heodo
2020-10-16M_NYV_100120_XBY_101620.docdoc f7843f9dea6ba5411f94a3fb69fd520310ae4ed660632a9adbdb40a7aa65a85dn/aHeodo