URLhaus Database

You are currently viewing the URLhaus database entry for https://pangzl.cn/seal-team/89107705/CvXtU/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:734483
URL: https://pangzl.cn/seal-team/89107705/CvXtU/
URL Status:Offline
Host: pangzl.cn
Date added:2020-10-22 12:11:06 UTC
Last online:2020-10-23 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 12:12:09 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com)
Takedown time:15 hours, 32 minutes Good (down since 2020-10-23 03:44:37 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22INV_1682.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-22PO# 10232020.docdoc 7e0233149682bb9be3e19f93517b3bbe9f5db41ce48dfa6ee88253a0a98bd678n/a Heodo
2020-10-22Payment status.docdoc de172d512ec3cc9e02fe2834be3639ea0cfdc900b82d65acb581575290fc2d70n/a Heodo
2020-10-22DM00952 invoicing.docdoc f95869656ea95b50cdc0dcdc93991a0bff0a1c265541f45bf204766fb5870736n/a Heodo
2020-10-22Form.docdoc 8ee4f19de24163c27f25fdcc15c7a6f33424aa314467bf393e23f9ee2a59e2fcVirustotal results 38.46% Heodo
2020-10-22invoice #116667.docdoc ee5fa6da862f50e1ac9babeca493ba621ca3bc57ab73fb88480bc716457e36f0Virustotal results 39.22% Heodo
2020-10-22October Invoice.docdoc 979b25c44d1216c7920082e1698cb3facd715ecd0d2f4f5e72c7603765b44688Virustotal results 39.62% Heodo
2020-10-22PO# 10222020.docdoc 6d023a0790cfa813258bb0b0457a718d4d55c93a65b0988444b19c6279f5c42en/a Heodo
2020-10-22L-100120 JUHM-102220.docdoc f3164116b10a1f31343bf4f0c47e83711070cf2d2fa4558bc6b869a82bf26fcdVirustotal results 40.38% Heodo
2020-10-22Invoice 02154257.docdoc 171b68003d3217f50e0238721e0957d775d8eb225067a0191f56f2a31b998629Virustotal results 37.50% Heodo
2020-10-22Payment.docdoc 789b91aa9915333fc8a86c33524bd2e469d7cefca47127b96ea032ee5182bc9bVirustotal results 37.29% Heodo
2020-10-22form.docdoc 2459b9b17512384884b1ce25972cc817c8e218cb87265480ce229d0470ade006Virustotal results 33.87% Heodo
2020-10-22PO# 10222020.docdoc 14a549a41295bc3e3af038d8f83d8a36aea9e70fc7daeb206d189d3bfff44dbcn/a Heodo
2020-10-22O3 invoicing.docdoc 01b228cd4f024acce23be7b762797915e8ece1d47c301e20f9596a98aed2acb5Virustotal results 49.06% Heodo
2020-10-22INV #00686931 FOR PO #804146526.docdoc d824b5e0284791def5164b247df302a6cd675374f606a82564092fab93e442d4Virustotal results 51.61% Heodo
2020-10-22Electronic form.docdoc bfc258207c269b90840c0f912c129f0f366345cdc1c88c174f59a2848a979d8en/a Heodo
2020-10-22Form - Oct 22, 2020.docdoc 8c15a10ed4c619cdc9eefbb7d32596330ccb2dbc41b5e21841dd141fee55a85bVirustotal results 47.17% Heodo
2020-10-22Invoice 0023270.docdoc 65fab287607d55bb546b639bcce9b869bae1c1fda07a15c68e1b9ebe8a626a68Virustotal results 49.06% Heodo
2020-10-22Payment status.docdoc 64ee7027b8c1fc6f5a53589c1b063a42cf59f5a99924588ae219a9950fbe7130Virustotal results 46.67% Heodo
2020-10-22October Invoice.docdoc 48c4356a3629c972a22b83fe612ed12ed47467fd7085e18ac16786cbd9c2bc4aVirustotal results 53.70% Heodo
2020-10-22Electronic form.docdoc 4a44eb422716acd382deed2b165d37ce8de2d799d1c466a1aa2e1952f4b943eeVirustotal results 45.16% Heodo
2020-10-22Inv_3833.docdoc 5fb5309b154278b57d6a94d784dd5de602c441608e00557aa6c53c200ccbb3b1n/a Heodo
2020-10-22October invoice.docdoc a0758a339c261e0a3815c6cb511d43f7a0f86a9a0bec12a7518502d369913ba0Virustotal results 41.67% Heodo
2020-10-22Form.docdoc cfca456cd0b2f420fe799623f9e2bbf831e6463a73b754f9efd9f2eac8f9714cn/a Heodo
2020-10-22Inv. 16595303755.docdoc 2964a315de69bb8d274293c5de39c877468fa8f5395e04639fb3029533bc4c45n/a Heodo
2020-10-22N-100120 IPUT-102220.docdoc caa64b3ac297b61892889a9f4a29cb2bd5719a809c2b610c07fdd30c5c9f7129Virustotal results 45.16% Heodo