URLhaus Database

You are currently viewing the URLhaus database entry for http://thuexethanhan.vn/wp-content/statement/fzaplr9oimo-0002369/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:730252
URL: http://thuexethanhan.vn/wp-content/statement/fzaplr9oimo-0002369/
URL Status:Offline
Host: thuexethanhan.vn
Date added:2020-10-21 17:01:07 UTC
Last online:2020-10-30 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-21 17:02:08 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:9 days, 1 hours, 50 minutes Bad (down since 2020-10-30 18:52:14 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22invoices 37214 & 8341.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-22Inv_3676.docdoc eedc1f3d57d4274cbfc97e09ca0975f97fff204e89fe92574f9e3964a569c9d7Virustotal results 38.71% Heodo
2020-10-22Copy invoice #578781.docdoc de172d512ec3cc9e02fe2834be3639ea0cfdc900b82d65acb581575290fc2d70Virustotal results 38.71% Heodo
2020-10-22Invoice 007220926.docdoc 8f46672fc4bd13f926555000c39b3ff624d7b96f41429e568aa2bad30431bbe8Virustotal results 39.34% Heodo
2020-10-22October Invoice.docdoc 0ffde0e4b91dd4178cf8bb09de58e8de279118d242b1fe487ee1451627d0ddbfn/a Heodo
2020-10-22Payment status.docdoc 67901eebf58c9cbbed2c00e87cb702c2e69cf959926247f3f99e59ba445a73f7Virustotal results 37.70% Heodo
2020-10-2200426117.docdoc 6d023a0790cfa813258bb0b0457a718d4d55c93a65b0988444b19c6279f5c42eVirustotal results 37.70% Heodo
2020-10-22Form.docdoc 7a56b5b48ac48e157ed7a853c891fe72ec3df342d02414d2aca77a1b62772ad8Virustotal results 34.69% Heodo
2020-10-22Form - Oct 22, 2020.docdoc 789b91aa9915333fc8a86c33524bd2e469d7cefca47127b96ea032ee5182bc9bn/a Heodo
2020-10-22Inv. 55503.docdoc 14a549a41295bc3e3af038d8f83d8a36aea9e70fc7daeb206d189d3bfff44dbcVirustotal results 35.85% Heodo
2020-10-2210498.docdoc 7ca299ab33e852a2cee3c4afa00aadea67b1d21240fa68de497fed12c1a0d31fVirustotal results 36.54% Heodo
2020-10-22October invoice.docdoc 01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5Virustotal results 49.06% Heodo
2020-10-22Inv_644803.docdoc 8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85bVirustotal results 47.17% Heodo
2020-10-22Invoice.docdoc 97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096fVirustotal results 50.00% Heodo
2020-10-22PO# 10222020.docdoc 46035df42146415903e45c8938c23ce819bf83cb2e5328b555ec947a0d1b9bd0Virustotal results 49.06% Heodo
2020-10-22OZI-100120 YKWK-102220.docdoc df51e418e047ba848de075954ab841887fafe6e47c6b7b6d529222e3795ecb23Virustotal results 47.54% Heodo
2020-10-22INV_287567.docdoc 098b7a1d812c209b85974e1f187e3a670e02821164c1dba212da04d78e86ff33Virustotal results 47.17% Heodo
2020-10-22Form.docdoc 05902a6c459b5ee113e0160231e64f0c1e0a6023654d545ea93abeaf435b71beVirustotal results 43.33% Heodo
2020-10-22INV_5530.docdoc 7fc0ea2dff012c502278a94d7dddb537859be6ac340e8ddecd41eb42b169a7a7Virustotal results 46.15% Heodo
2020-10-22Invoice.docdoc 597b3377e4695f28eee5640bf48dd111b07440a54dda6e2525b140d78f77f2a6Virustotal results 45.28% Heodo
2020-10-22invoice.docdoc 2566d4cd03b1b31a54ee14af117d50f0d166a3500ac7b39df87cc69f567a862dVirustotal results 45.16% Heodo
2020-10-22Electronic form.docdoc 90f529f52f0ee836368406a46c2ac923489d2df8b201b0d2a71878c65e23657cVirustotal results 43.33% Heodo
2020-10-21invoice.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 45.90%Heodo