URLhaus Database

You are currently viewing the URLhaus database entry for https://trumsango.com.vn/refer_friend/K2L7GXZL3AATC6D/0Mxr37IcGTZjUp/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:752041
URL: https://trumsango.com.vn/refer_friend/K2L7GXZL3AATC6D/0Mxr37IcGTZjUp/
URL Status:Offline
Host: trumsango.com.vn
Date added:2020-10-26 14:41:07 UTC
Last online:2021-01-08 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 12:02:07 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:2 months, 12 days, 20 hours, 59 minutes Bad (down since 2021-01-08 09:01:30 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-276909 20201028 8324437.docdoc b8cc607a10a0426b69434b618daf89c6a18d97d84bc9332bd92db0cb39c03366Virustotal results 20.63%Heodo
2020-10-27MES R551843.docdoc ef0f8adbe044b90fda85ccfcfb7ce57ee106f835c82e5ddf4ffd7a79b9a40200Virustotal results 17.74%Heodo
2020-10-27FILE 2020_10_28 Z193698.docdoc 414730c09b8914aad74e763d7ccacbfe96361572d2f1c53fd6210f913dc96549Virustotal results 19.35%Heodo
2020-10-273454DFS_92663.docdoc bb9eea8a1f46b7f1705bf48d3570b9bc5082375303cbd793c2e9d2e8e27efa02Virustotal results 18.97%Heodo
2020-10-27ARC-20201027-4792155.docdoc 19edb720e222817dc696093f3000cbf44dc66691e3b3f096f395366f794c6ca2Virustotal results 20.75%Heodo
2020-10-27mes-2020_10_27-DQF249302.docdoc a7e1f9d64652a74cbca86328a7acfd3bb739d8528077ac42522f8e5e024273b3n/a Heodo
2020-10-27Rep 463.docdoc be937cc53bc89c68684381e254ea5664f66b9768303dd4785f47cb80a1f74ac8n/aHeodo
2020-10-27DAT_20201027_6426.docdoc 52edea717fc9984acb356860d50f67fadbf8a2eba4d7bec924ce02213a042ed9Virustotal results 19.30%Heodo
2020-10-27arc_2020_10_27.docdoc cdc1427cf3a9f3846751e5ce98bbbf6ccf50da723831c6c5b6a976423d45a8a7n/aHeodo
2020-10-2723718586_102.docdoc 3828bfd5ab72ffa3e34833003ec5565eb8b92cc72b5212e997c13a693de018a8n/aHeodo
2020-10-27Mes 20201027 UN506047.docdoc c760fe45f26d328ded7cc3fac92ee701e551cfc11a4c2b0cbde98423f6097dafn/aHeodo
2020-10-27MES_20201027_RQM87442.docdoc edfb677e0654249df35a0a414629e5adfea9df8bdf6970d67ad7cd91cbac5257n/aHeodo
2020-10-27Rep-2020_10_27-KAK291572.docdoc 930b2c650c02155d23102b7f5af7341f24dfc1f37c40d1eb601a7472af87d28en/aHeodo
2020-10-27Doc 20201027 101.docdoc a8f90351c28fc268cec63f45f68a993cf9ef9c459b5d9fa23e939791d57bcb45Virustotal results 35.19%Heodo
2020-10-27Untitled_20201027_EXZ311.docdoc aa5d9e63b2f9f40185f3e7dce3260d8406bce9c5360de3546a3039db9680b51dn/aHeodo
2020-10-27list_20201027_IE043.docdoc 9224a68fd0bfbad79803e18b0ca09a99a8a8db6f6f0004eb9258c80bb877fa70n/a Heodo
2020-10-2795031311-XX1648.docdoc 3474063e6f75dad6d13132bd3a1892c04b65b561906d8ddc8ccc78335b1b0ee5Virustotal results 29.55%Heodo
2020-10-27List_20201027_I8499.docdoc 7f4c13e3bad8c957739d3fbcf531671bc4d3f04937292f687a6e707c1da81770n/aHeodo
2020-10-27Attachment_869.docdoc e0cdf96812571b284a3020fa25032cb1e55574bc3903c7d56f21226daf864d95n/aHeodo
2020-10-27MES_2020_10_27_U90379.docdoc 7288d0d782e47ee06bc27a14c5ac13996e4ecd7a94fa0658a67a2f433b433f3dVirustotal results 29.82%Heodo
2020-10-27REP-30970.docdoc 6a2fb15bdc031beae4a92166ae8d46761760de5f36cd93aa9c2164059bab8a5cVirustotal results 30.19%Heodo
2020-10-27MES JW271464.docdoc 8c72d9b7308f430cf08a9a7355d3a006b9ac6e9c2b62c444fad04e2f9c4d95b8n/aHeodo
2020-10-27Doc 20201027 10194.docdoc 3491d15a4889470e8356f7fa3a7047e89f667488fd1ea5abbff01b401b848338n/aHeodo
2020-10-27Inf 2020_10_27.docdoc 52cedbd473146069dfb53c24de3f7f8c373ba699a3031c1b85afa1416abef22fn/aHeodo
2020-10-27file_2020_10_27_114594.docdoc cddae4cd8b8c7abc1819ded260b8860c7c1eb39c1cdb57421b29f1b28d190104Virustotal results 33.87%Heodo
2020-10-27LIST 20201027 YAX800210.docdoc 82fe24e2c3dbfcec3274b1db80244e9372a3631fb2bdaada8f106c37cfb6c9e2Virustotal results 33.33%Heodo
2020-10-27INF.docdoc ed4e87a802acc318ecb56a046a99bfeb0c32426bb59be290ec25a813fa76d92eVirustotal results 36.36%Heodo
2020-10-27doc_JG016.docdoc 484388d782fd4a5477ed0fc44b40d2d5fd73d0ea7d3088d7c015d2b4ccc5ea93Virustotal results 33.33%Heodo