URLhaus Database

You are currently viewing the URLhaus database entry for https://x.ziyoubb.com.cn/wp-includes/IY/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:731559
URL: https://x.ziyoubb.com.cn/wp-includes/IY/
URL Status:Offline
Host: x.ziyoubb.com.cn
Date added:2020-10-21 23:17:06 UTC
Last online:2021-01-05 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-21 23:18:03 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:2 months, 15 days, 7 hours, 24 minutes Bad (down since 2021-01-05 06:42:33 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22invoice.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-22INV #00845102 FOR PO #00739642594.docdoc 7104dd32f9de62701f5d5a01ac763237757d11e8fa2c10ec24749f5791467fcbVirustotal results 38.98% Heodo
2020-10-22UE-100120 KLDV-102320.docdoc de172d512ec3cc9e02fe2834be3639ea0cfdc900b82d65acb581575290fc2d70Virustotal results 38.71% Heodo
2020-10-22Invoice.docdoc 980307d89e587b452b4070afed9ad8494e035481816544a310dec6a81a7aa8c2Virustotal results 39.62% Heodo
2020-10-22October Invoice.docdoc 8a84251f63aa90465d3b8b145a9e710d1aedfc23d03511b87681f18ec3542298Virustotal results 38.71% Heodo
2020-10-222185965.docdoc ee5fa6da862f50e1ac9babeca493ba621ca3bc57ab73fb88480bc716457e36f0Virustotal results 39.22% Heodo
2020-10-22Electronic form.docdoc 590f3326107d8c55dee6b4ab08d4a73d007cf21ed92119b2dd72a17a1054564aVirustotal results 39.62% Heodo
2020-10-22HHZ-100120 NGSM-102220.docdoc 6d023a0790cfa813258bb0b0457a718d4d55c93a65b0988444b19c6279f5c42en/a Heodo
2020-10-22October Invoice.docdoc 9192adc6ad055a6e640fd17c385e4aa7e88fad75617119f2f64efcec5dc4da19Virustotal results 39.62% Heodo
2020-10-22invoices 66714 & 4328.docdoc dfb6817c6e31d81f6a98945394150b500c04fb563d8fe9ae170733fc922f8421Virustotal results 40.38% Heodo
2020-10-22Inv. 081955.docdoc 2459b9b17512384884b1ce25972cc817c8e218cb87265480ce229d0470ade006Virustotal results 33.87% Heodo
2020-10-22Form.docdoc 7ca299ab33e852a2cee3c4afa00aadea67b1d21240fa68de497fed12c1a0d31fVirustotal results 36.54% Heodo
2020-10-22O006 invoicing.docdoc 01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5Virustotal results 49.06% Heodo
2020-10-22PO# 10222020.docdoc c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897Virustotal results 50.91% Heodo
2020-10-22INV_0435.docdoc bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8eVirustotal results 49.09% Heodo
2020-10-22Invoice 00761986.docdoc 69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ceVirustotal results 50.82% Heodo
2020-10-22invoice #3213.docdoc fe69570cfe43c056f36d0a40929d53d4532cd181924613bda7436913979c33cbVirustotal results 50.00% Heodo
2020-10-22Payment status.docdoc 64ee7027b8c1fc6f5a53589c1b063a42cf59f5a99924588ae219a9950fbe7130Virustotal results 46.67% Heodo
2020-10-22INV #7464588 FOR PO #06160788690.docdoc af5bddd9f46abad7cf836d9faf757a676ba5bf9a7ee90e04c3a5cecd22c7fbd6n/a Heodo
2020-10-22October invoice.docdoc 3cea95fe241c36b02ffc90f1260df43c8fc77e7acde8d5804ba4a461203332d0n/a Heodo
2020-10-22invoice.docdoc 05902a6c459b5ee113e0160231e64f0c1e0a6023654d545ea93abeaf435b71ben/a Heodo
2020-10-22Form - Oct 22, 2020.docdoc 7fc0ea2dff012c502278a94d7dddb537859be6ac340e8ddecd41eb42b169a7a7n/a Heodo
2020-10-22Copy invoice #274871.docdoc 889113bf50a9e3543f97ca07e4e572f2328587944be4de82f441ba1b23e6ece1Virustotal results 38.89% Heodo
2020-10-22062286729.docdoc 410f511f7ba84ffbd69fbabc0226828f52eec22c5b5db6759f60fb65ea20270aVirustotal results 42.62% Heodo
2020-10-22Form - Oct 22, 2020.docdoc 2566d4cd03b1b31a54ee14af117d50f0d166a3500ac7b39df87cc69f567a862dVirustotal results 45.16% Heodo
2020-10-22008971154738.docdoc 49e99a2c9064c24011dc0c71ff29d661e2b447f8213bc858b7feaa28d5d22576Virustotal results 44.26%Heodo
2020-10-21Payment.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 51.85%Heodo