URLhaus Database

You are currently viewing the URLhaus database entry for http://chinesemassage.icu/wp-admin/invoice/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:703059
URL: http://chinesemassage.icu/wp-admin/invoice/
URL Status:Offline
Host: chinesemassage.icu
Date added:2020-10-16 17:42:09 UTC
Last online:2020-10-19 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003017588 created on 2020-10-16 17:44:09 UTC)
Takedown time:3 days, 0 hours, 38 minutes Bad (down since 2020-10-19 18:22:14 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-17FILE_526498771236574.docdoc 360a5cb7eed923017b4ef07460e7652362cdf1fc0a902516addbb8e244e30134Virustotal results 53.23%Heodo
2020-10-175M36KJT16PNPKB.docdoc 39ba6406fa7f104c5275ad449ef4bf5f319caf7089cf553da10dc8ac12387f18Virustotal results 52.46%Heodo
2020-10-17REP_64834510.docdoc b0f945ed6afda303421f9501b2b2d1d2996a132eb27486911019cb9996538460Virustotal results 54.10%Heodo
2020-10-17KKDZ3ZEN280H46KY.docdoc 5ab2456a7a5d44a28ef32f5ac8c55e8eaf4b24802b2d326a29cd9aa4199e0b97Virustotal results 53.33%Heodo
2020-10-17INV_PO_10172020EX.docdoc 169fa4037e8c45a38a3b2e862d860e955fc810c63682c78155bbbd45820b83bfVirustotal results 54.84%Heodo
2020-10-17Q_Z17R7C3PX7471XM3.docdoc ab13f6f95154d0396465d9bb9d42e49708e2efdd49c259b7189ae2c7c7c2d389n/aHeodo
2020-10-17VKZ_100120_LHY_101720.docdoc 8eed16b7e0a64351cb06ea437eeae8f69b227cac04237187ed17cff470a3cb0dVirustotal results 52.46%Heodo
2020-10-17T_0725766967.docdoc fdcbcd4f6d22900775055fa03ab8643f72041e73d6af1c271a672ce65268e0ddVirustotal results 53.23%Heodo
2020-10-17RPE_100120_PMX_101720.docdoc 9fddabb44e0d01bdc8e0886790e1e34059ac1aedbe3faf4cdfa66bf9dec923cbVirustotal results 53.23%Heodo
2020-10-1739913051979399.docdoc bf7d2c74845e2e6006ed753d93f64d23813dba57c4f443be01f59915f96aaca4Virustotal results 53.23%Heodo
2020-10-17KM_91G4EAAUQJB8S.docdoc a9c15187e473446421b0e900dcd094ee8be1c5ac010d6d2a19bcc988f60d7ddbVirustotal results 53.23%Heodo
2020-10-17DOC_566295574350195.docdoc cab952f8c6436054516b7fb9b6dc980a0921858a4a312229099f2817b9846340Virustotal results 54.84%Heodo
2020-10-17FILE_25660247336377437768.docdoc 9e5f94414bcc33c4f9405dd2c0747ccc8c79921dbaab834a1ce8cd0205bb1f9bn/aHeodo
2020-10-17FILE_811969489691720402.docdoc 6d5ed047cba0f40a2bd108fdb285520a5590c29ac64b7a9d32a20719905f1e7cVirustotal results 53.23%Heodo
2020-10-1727898386.docdoc ab8be8e21a7c5f0a158818bdf5fa9883acaffa78d8cfa5cae36ba7d756b8fed6n/aHeodo
2020-10-17FILE_VO4908611282QM.docdoc ca5d768289c225dea34f82176591548fc03963cf653f0a8ea0b6e0f9f71ca3aaVirustotal results 50.00%Heodo
2020-10-17PO_10172020EX.docdoc 0b6de51a7fc8020fa3be7dfd2c2b6665da9ebc357d07f70828653ef7191b9dd0n/aHeodo
2020-10-1783943078738834.docdoc 252e05a52d4bc9d3d266533b1a75bfab674989b8d3a4f0ff8d898529379329afVirustotal results 51.61%Heodo
2020-10-17W_PA8247159483QX.docdoc c85fe8825461de0503c8b9b612f01c88a1124e0c33ace58d20c22cf40c4bd03fVirustotal results 51.61%Heodo
2020-10-17RZG_100120_ULH_101720.docdoc d19c1e922354570a8700f8dc25900a7c8ae4bee4b08908a4c6cad2309eff1ba1n/aHeodo
2020-10-17A_8684975009042.docdoc bb96b8f7ca8418e8d16ada7ed78c33abe3bd24d7ca843033cc73e73e4c606fdaVirustotal results 51.61%Heodo
2020-10-17FILE_539597608328940878690178.docdoc db234da6bba5f671c8a6fad07cfc6ad7ce1b078a32f920e2edb4b142167e18dcn/aHeodo
2020-10-17BAL_8T7ESRQIU.docdoc eb06448eea7b0d73132945671275ea572688e13de195a89974d8315900ff8cb7Virustotal results 52.46%Heodo
2020-10-17F_69018358.docdoc 4f6043ed53481592c3b9db4608a157df568b466062cba2018b8e5c59bfb40563Virustotal results 52.46%Heodo
2020-10-17GHZN_IP3638168488NY.docdoc 8d9046f3f3aef8eaa74dbcc4aa33811b0f06438b3c4fd36bda76c6190da4f669Virustotal results 50.00%Heodo
2020-10-1769327316.docdoc 71c1be4d00ef4ec74c73abf05187dacf0335a393a145eff2b2efd68cbaa91b67Virustotal results 54.10%Heodo
2020-10-164641244011352952.docdoc 8e0082cbc47e4f5638313b20400e4874bb6371c424ee7ba8eb29009692653676Virustotal results 50.00%Heodo
2020-10-16INV_UQV_100120_FCJ_101720.docdoc 3bae78182dad47ac43920171f44e275863e25a8cbdd07ac0b0279edb751dd12an/aHeodo
2020-10-16XAY_100120_MKU_101720.docdoc 70c3e11a1960c379e6be0215b70999623bb37cad12e932cf4d222f70f078c6d2Virustotal results 50.00%Heodo
2020-10-1643609652.docdoc 6647111dcc98f3a01470eee7de5a3b93b579a08c585cd3553cbfbdf3d54db556Virustotal results 48.39%Heodo
2020-10-16BAL_PO_10172020EX.docdoc 6539d2ac4a847b3444866e22b642a335e3d8b92d40031a090fa315aef1af2930Virustotal results 51.61%Heodo
2020-10-16GV6757407953JZ.docdoc b22624074fb5efd4b4c7a4882f6a7bf06faa842197e9fc9199e85c8c1fe02b8bn/aHeodo
2020-10-16J_CY5576764157GT.docdoc ed7305c8affe8cff65cc112f1d79f66621e2632a8ec647ce7aa6817e738b989fn/aHeodo
2020-10-16H_PO_10172020EX.docdoc 8215f350c6c5d2b5f615bcf7260cb9eeb60747b75a9e6a8e4b9c3ef3b70b8cfeVirustotal results 50.00%Heodo
2020-10-16DOC_71812236.docdoc 90be4d140e8e68dd1b218a9ebd10ec1271cd234025341115f1cab4e3149e7f90n/aHeodo
2020-10-16INV_SYNDS0THGU.docdoc 81142095ca7067d93c133d0df243493b2a602818aa45374296436668bfa14b59n/aHeodo
2020-10-16FILE_52152126.docdoc 8b5585bc3f128dd3a3ef10f180c3a5cd06e2f68e9894551fe177b09b5b1ee0c6n/aHeodo
2020-10-16AUE_RR4360746412LG.docdoc f05cfe8aae97657d11e98c72cd612a7d57f949a47efcf75125edfd9e7a7caa4eVirustotal results 44.26%Heodo
2020-10-1676821082.docdoc 66e5c84f7f729e36ef0aa28a083377587825de39b6871269f4c8f6cc72899a1fVirustotal results 43.55%Heodo
2020-10-16BAL_IYY_100120_OIP_101620.docdoc 0a0ac374574dd78365ae4b5e84357a2387d99dd14752f6a53391324841412b19n/aHeodo
2020-10-16DOC_RGH_100120_GVS_101620.docdoc ffa06f345711cab1bbf64ad42a6ab9b9264655ec20d39fd3ab37d4e950c98b8aVirustotal results 46.77%Heodo
2020-10-16REP_0509642074156187895453.docdoc cb781c9123caaf90b0aa1ccf875c58492ab61503576a1c169840b6ee881a95a7Virustotal results 46.77%Heodo
2020-10-16S_BV1234160922RJ.docdoc 89157919f283aad6306a78ae43e54b55c2431a0a64dbfcef22df553bf09ae681Virustotal results 49.18%Heodo
2020-10-16INV_TYV_100120_DUP_101620.docdoc f7843f9dea6ba5411f94a3fb69fd520310ae4ed660632a9adbdb40a7aa65a85dn/aHeodo