URLhaus Database

You are currently viewing the URLhaus database entry for https://www.cfo.vn/wp-content/OHTDkpa/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	754421
URL:	https://www.cfo.vn/wp-content/OHTDkpa/
URL Status:	Offline
Host:	www.cfo.vn
Date added:	2020-10-27 03:22:15 UTC
Last online:	2020-10-28 06:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-27 03:24:10 UTC to abuse{at}digitalocean[dot]com)
Takedown time:	1 day, 2 hours, 41 minutes (down since 2020-10-28 06:05:12 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-28	bWIUj9X4JyX5f.exe	exe	7ef2a32d50d7fc0a5626f134498dd4a572d62252f2c1d6f7d0dfc28efe6fce2c	n/a	Heodo
2020-10-28	sPq.exe	exe	a85718816ebcc6f639d8763423183d03ad155460b4afa2fc3debaf146446c9cc	n/a	Heodo
2020-10-27	bSHOe.exe	exe	36d1fe4faa344a7249d13d310565072f87cbe80b20f0e7b877eef97c045fc4bb	n/a	Heodo
2020-10-27	VvwvjecOhvaB8L8PH.exe	exe	a69495306981099ef8130f3565f1e9a669857a0597b9e38bf3d031ef2ff67f9a	n/a	Heodo
2020-10-27	KpMYZ9Esa.exe	exe	7d1661b6f51db66081bbc815516965da3fc97587d322cd75bb84ea1339ec447a	n/a	Heodo
2020-10-27	swc7AftN0Gm1.exe	exe	33853d532d2f5a98f07e387a1ec8d51848c1e4a8c0dacea72d9054f500d77992	24.29%	Heodo
2020-10-27	dyJpgFEkaW.exe	exe	9d86d5856be10e4cd4b22af29e7285bb1fb235fdbe196ea9d40292e949d20742	n/a	Heodo
2020-10-27	uA5MRsSvYGB5A.exe	exe	883f37323de9503bafbb5158ef630a990a300e4f80b0c33342d74bfd0c5c40ec	n/a	Heodo
2020-10-27	DTOoz.exe	exe	50cb21b715ee625dceda6f76bb1893eb166eb67aa60a72171cdd06e2d4a341c1	n/a	Heodo
2020-10-27	POYlK.exe	exe	e72cdbcd61cbb2cc92e85b02fafde002a6d8b4511507dfe42ddaff8d69196ddd	n/a	Heodo
2020-10-27	U.exe	exe	7aa49f8fe4e84aba21e38b82f9b12b28b90ea2f3b36cfe6f86fdfd93de45b97b	n/a	Heodo
2020-10-27	D94t.exe	exe	36cc081587b04684604f1766859be2d2cf3213f0f1e39db5c578464dad5fd492	n/a	Heodo
2020-10-27	zsXouP.exe	exe	ee2d9e7afad485b01b5c3b91dd98d5a6a8a96dda8463d5213ad70343be36bd81	n/a	Heodo
2020-10-27	GxuX.exe	exe	79c19e7f3efcb5f9e1af835ffa3a1ed45b54e615089ea2c8dec9a068edc0b28f	n/a	Heodo
2020-10-27	YYgGTuQ.exe	exe	b3b16da96516ee3ac26d6f7ddf544cc5de36d6d27546bafb1a62d616a8918715	n/a	Heodo
2020-10-27	Hkkog1.exe	exe	e30266a4fdccbaa754bf9907ecd1a217ca0941f6a7c1b08a4d3eb5c48d61d46b	n/a	Heodo
2020-10-27	g2acxOEbYcoZ1w1bnPGy.exe	exe	d68de3d36aad03db79e2c95ae197badb07cc5eb3133bc22f7b6bce355cf4b003	n/a	Heodo
2020-10-27	nFVCygbKIk.exe	exe	8ad1e9da191978fb2b778162f9b31027781b78495550df5a32e70a21d70ae9a7	n/a	Heodo
2020-10-27	hQLBgX.exe	exe	980e090a24eb37b1f4a14f4fd5d59d55c3f0b5146891e58b87b150a16ee65605	n/a	Heodo
2020-10-27	NPAMVa0Z.exe	exe	cff3ee48d0fdf3ac2c5d550562c4359551a632a2d1383948f9b8314ebd24b1c4	16.13%	Heodo
2020-10-27	xb61RTN.exe	exe	3b5b0f5285cd22fad70de370084bc15d3920957d00f7d4922c81124faf17229c	n/a	Heodo
2020-10-27	esEgKTTQx2clDEHju.exe	exe	0eb714557eae8b23e8d9095a51f164811768fd63550061db562335af552ed1b7	n/a	Heodo
2020-10-27	1BWbtcbF.exe	exe	3f79b98730be0339b46752d4c9cea2e1266a905eb930d5d7c214caafecbeb58c	n/a	Heodo
2020-10-27	PwsprCngZRvD6R.exe	exe	a6a1589ce13d5158df9003d130d50a0ced3dad8447421664424617a7a97f647c	n/a	Heodo
2020-10-27	qSNeFiJ1mSiiEU3MpFMv.exe	exe	05014999232085c498141de97577d7f51e6fe7bc5a1f82384c2dbef37a695e2d	n/a	Heodo
2020-10-27	YsWHCI6.exe	exe	f6939b68252b9079510fea66f94b98a707d6d75721cb90d722bff9ce17ae320f	n/a	Heodo
2020-10-27	LSUV3pa21RyVg.exe	exe	e999701c789efd3100b7131c401b6d2fab0f1a1e07ed8d8b7d6c65918c7b9677	n/a	Heodo
2020-10-27	yK0iK8n0PhiE9jcQcZOH.exe	exe	37faf0d00cebdde352e58d0957b5637adf4a93e0de1cbcbd69e08bd13f46e464	n/a	Heodo
2020-10-27	qq2OeaU0j5WX5.exe	exe	e90d461dc1e4d75757ec66fa5108eaa869f5b36de0fc0a6c7d846a15c31e7e82	n/a	Heodo
2020-10-27	1K1nrEW8VD5tz.exe	exe	335a6d88c3d94921af9d4e04177e3ff609b385282eeda76e85047f263910689b	n/a	Heodo
2020-10-27	qaXDhchk7M.exe	exe	d23e64057f027ef61214be0dfa621ac9c3119645c86c959f9d0e673a66fbe80b	n/a	Heodo
2020-10-27	RjiqAFLn3UdsFBI.exe	exe	1f5ecb7333477de49c889bd6bb1b909ba29b88efa1868f940a824ecc78579e8c	n/a	Heodo
2020-10-27	RRzzz5sKmAD9YZno0.exe	exe	d5fcf48110e1bce851c863d4ac4089aca6925c5a66f10de61bea2ccd3373baf1	n/a	Heodo
2020-10-27	PhXoe2XTsmC.exe	exe	e7397f028655c4f4b09fa1f90158adbfa5aac3334f8df6e3236aaaa38d22f16d	n/a	Heodo
2020-10-27	ulr1kKBxfUx7xFoQfp.exe	exe	59f3b3b1dd02e6e7cec3ae66ac858263d7aac490911933d4f1177200bae0715e	n/a	Heodo
2020-10-27	8oGamIddER.exe	exe	69852057fd167685a02872319cfd62874946cec7109a5247ef20fe5d74f37851	n/a	Heodo
2020-10-27	dpoouew.exe	exe	4a04b153533bbd1a562edbad8c425e6d0a93ba678402fb58c6daaaa613210d41	n/a	Heodo
2020-10-27	4afHfoGFGzEj.exe	exe	dacfab4cd34dfa05f74d48750e53ba9ac41cd51cd3eb7d5e347c8181949988e4	n/a	Heodo
2020-10-27	8YCnq5J0.exe	exe	a430be219ee7edb3baf101f0079abe0c29fc292de6b8cd12c9355a5e556214f5	n/a	Heodo
2020-10-27	gcftdwq695JdtQNDXmiz.exe	exe	97da615dbf8260edc9e5c8fd3a78d383c6be1f7146159091349a5f2d87a9e034	n/a	Heodo
2020-10-27	bU2h4PD1iUONl66gOieY.exe	exe	4b491dd1d9d74a749749239f26ca8c3421fa92221db2e776333bdc2bec78f467	n/a	Heodo
2020-10-27	CQgwK4nMEls.exe	exe	786744dd48144e2786b8ffef48e3da3d2d4c0dc178ac2dc2bad5023a013de475	n/a	Heodo
2020-10-27	1JWRHiFiYR7u.exe	exe	8552ec26a9834f833d6ac25c7fb5e84be9724d1da6b32ba1c450d325249b31fc	n/a	Heodo
2020-10-27	00ElbGgmx.exe	exe	42f2cc1dce775dfa15d413502fb6c51998092402522a4526454dd003a8976122	n/a	Heodo
2020-10-27	Hqqkeo4RJhthV8xyCLm.exe	exe	9044d90414bd7716cfd510940e481d2f77fd6f94cb25229d9f65b8bc987d5b87	n/a	Heodo
2020-10-27	J85HIlD75Mt.exe	exe	cd6a0a8768bebb39118ede0cc0b420c4b45185bb9ab86de0573c30bcf34d9c63	n/a	Heodo
2020-10-27	lqFMhLHgVNKQWKNiJhWE.exe	exe	29f1b2c261c43758c31bc2320b3b722c7f2a4a37044c6f56b74e3dd60c7d1907	n/a	Heodo
2020-10-27	OKmeKLPXgEjLirS2M.exe	exe	477769566bdd50b725fadd597ea4195a21e51fe289473af81f7082183e48a3a5	n/a	Heodo
2020-10-27	VaGwb2Et5T.exe	exe	ffc5a64ff5207b53e7f15311a02e6d6f3e7f11e6d8c2a99f4bc9a8a0bc76e5ca	n/a	Heodo
2020-10-27	SqGEEv8LVl.exe	exe	aba780efdc320058fde6a6f795b18adcab946f396256f89a7f792947017f81a3	n/a	Heodo
2020-10-27	hVtjTDQ.exe	exe	6ab495327cc934206f59ec27c00a80505cbfdb644e237bcf38a573cee914c4af	n/a	Heodo
2020-10-27	9E5Q.exe	exe	370a62f4ea1cbca7ad52c4f49609c4b245f203ca80ba850d2c9afeb11a80d90e	39.68%	Heodo
2020-10-27	ffqdfNybtbmbQ.exe	exe	a8b30f10211520a094c4190d7d85b5b3528ee27b8b1cc5959a051ffeb0c2da9b	n/a	Heodo
2020-10-27	Vu.exe	exe	c13a679866ee8c4163fefe5523faa923dd035007966e5b4e7aeefbeec1d75b9d	n/a	Heodo