URLhaus Database

You are currently viewing the URLhaus database entry for https://terrain.com.my/wp-admin/statement/CoDuFYh/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:755346
URL: https://terrain.com.my/wp-admin/statement/CoDuFYh/
URL Status:Offline
Host: terrain.com.my
Date added:2020-10-27 08:28:06 UTC
Last online:2020-11-16 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 08:30:04 UTC to abuse{at}shinjiru[dot]com[dot]my)
Takedown time:20 days, 14 hours, 11 minutes Bad (down since 2020-11-16 22:41:06 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-11-16P-100120 QSDD-102920.docdoc ccdb2c5ed40ad6227647ac04e1d3d1cb499a0d67ae9dc428c3ef6b275f786a8cVirustotal results 65.62% Heodo
2020-10-28form.docdoc 19f5c63fa8696a0eaab016bdd4d8d1bcfb5dd7f07d1da25caabaaedf0088dc23Virustotal results 23.81% Heodo
2020-10-28Payment status.docdoc fccf7156f22fc7676f860e9ac3dfe8f573c89f58106e5946da37e36fcef2a205Virustotal results 22.22% Heodo
2020-10-28INV #06988246 FOR PO #001707499937.docdoc 3b31e20a19f924917aea1e08d62b46e74ecf47777ab81e3843195449c1ceb80dVirustotal results 20.97% Heodo
2020-10-28October invoice.docdoc 550bb4afeb580c5ca1bef73de9f4548610129a2f407d1375aa69b29c109ee9bbn/a Heodo
2020-10-28October Invoice.docdoc 661694d6fc62c1af16ddbe2db10c54b471f5acb387cde760666a6a672635f16dVirustotal results 17.46% Heodo
2020-10-28invoice #32636.docdoc d1f0145ea0d4e036edd208387b5c7c012b0eec91562b6f210853152462b2ff63Virustotal results 16.39% Heodo
2020-10-28Invoice.docdoc fadcbe7aa3d7b823b03d2627cf8a05b229e0f6c7518a71b9c4a106155b04df3cVirustotal results 17.46% Heodo
2020-10-28H00750 invoicing.docdoc 7e7bd61af07906f31a4efa5442f7cfda98c0047ef70e15f64e37c5d4882917b2Virustotal results 17.46%Heodo
2020-10-28Form - Oct 28, 2020.docdoc 448eabf56cc654711f7a3a6005be397a5aeda5ba6f329742da01cf7d31712931Virustotal results 17.46% Heodo
2020-10-28AE8947693224XN.docdoc 3732182a2ad2854b3f9ae9a1eeaaec7d53eb43bbc485318ae0a2f573a0159b0cn/a Heodo
2020-10-28Payment status.docdoc b9bb095da1e8ad66589f36b496ee1e2e924f04f73374e3b76f630fbf6c9f573eVirustotal results 17.86% Heodo
2020-10-28D8446559397TV.docdoc 2d02f7d64430a41c50eaaed46dce33dcc544dc0d4904fd4561e8ebd851447952Virustotal results 18.03% Heodo
2020-10-28E1785301559HX.docdoc 1da6053e7667ec58f22220044e653c679770c36ce551bdcdcf5fff95cc17ba08n/a Heodo
2020-10-28invoices 024 & 13803.docdoc 5a9c040e67efe0446aaaeff9b0dacd2f668516484cf5487449360cd489ce268aVirustotal results 17.46% Heodo
2020-10-28Electronic form.docdoc 81a28a01618707472c50609e10b45b9e7900ae5e34a761d053954fb7581c4677Virustotal results 18.03% Heodo
2020-10-28form.docdoc 08f27090512f9c3956ec27eea1e9a86ef36d6319b40bfe0b6f1e0c33621a709cVirustotal results 20.97% Heodo
2020-10-28invoices 4994 & 6765.docdoc 56e06f27b7f8905f084ac7ddc933236bdf650363aee629d7dd7e1c831aa9ca7eVirustotal results 17.74% Heodo
2020-10-28invoice.docdoc eb7342e956ea7f0a234e89063bf36cbdb9e2bf4d6478141379a0eaf2efaf711fVirustotal results 19.05% Heodo
2020-10-28form.docdoc 7b55e5dcf03999a440acbe690dddf943d03bd37fbfc7892d196708992044efdfVirustotal results 18.03% Heodo
2020-10-28W3532301102NY.docdoc e1a1c8b02de20858f2703c835ecd985f2b744816cd4f8757ca7e12af15d3af11Virustotal results 17.74% Heodo
2020-10-28invoices 60081 & 3811.docdoc c63a8f44f5c09d698549f09ef33a6a724157ddd8fba5517d9ef6fa58f76a8ea2Virustotal results 18.03% Heodo
2020-10-28INV #185197 FOR PO #004991384.docdoc c941232a830436abd4969caa877cb7fdf70ceb9bfc8844e7dc75fd1f400cc897Virustotal results 17.74% Heodo
2020-10-28Inv. 0088731235147.docdoc 52cffa7b6a722c32c17560a5d71ac09a91bdcd9cd36ab8b9913c92063aa109c5Virustotal results 17.74% Heodo
2020-10-28INV #00189968 FOR PO #00352183132025.docdoc 6b60fb2479d5d8fa86715aee8abfcd4dc6a10217af2faa45b64b90f05f616ab1Virustotal results 17.19% Heodo
2020-10-28Payment status.docdoc d052b404f414509ffe272015a3e233be84d889c982b538166102194f1c985172Virustotal results 16.67% Heodo
2020-10-28Invoice.docdoc 380ff0d5d662477222c7f131f8ff90dea7c38d006d49c386f50cb738706e212bVirustotal results 16.67% Heodo
2020-10-28Copy invoice #8335.docdoc 0b9d0864e1af339c8924de338519f8773111be2d5d0aa9956e910d2bc1b4e1bcVirustotal results 16.13% Heodo
2020-10-28Form.docdoc c156c19120c201216fa1ed0db10ae8afd1c2d5b162e885dc69af1f7024a53cb8n/a Heodo
2020-10-2809854759.docdoc d23212065500f67a2aa4bbd042ad99075d511959fa1be07d964146fc5cfd618eVirustotal results 15.87% Heodo
2020-10-28invoices 2485 & 4909.docdoc db1575e9ed5edb424eb7142501e0e6e35fce135e7730d60e63ba53c2d3d2489cVirustotal results 16.13% Heodo
2020-10-28October invoice.docdoc fc885504c2ffed13a395bc94f32335b3dc5551a0b0a843536c8e6016ccac8ee9n/a Heodo
2020-10-28INV_6468.docdoc 2768b3159c641914e0af25850814b52068d8b6957f3b2a1a5b311e3c41c4bf25n/a Heodo
2020-10-2809419686429.docdoc 69cc19e7c63413a30084ef7dc1158a0ce219c8221e5012d84a3fd56c796fca5eVirustotal results 15.87% Heodo
2020-10-28IZJ-100120 NIYD-102820.docdoc b1bdd6e1e3abe17d23d0470a135cdf17a4c0753e5829b7abc7bf792d3cca7715Virustotal results 15.87% Heodo
2020-10-28PO# 10282020.docdoc 80c6de9caa8fb29457e799ff74947cf9a28aa5bae84ca015cfbe75b1edb3c93dVirustotal results 15.87% Heodo
2020-10-28004780181.docdoc afefa823336f768cfa29c0c274bc7043d6f1d89f6a068f93acb1b22844c42a71Virustotal results 16.98% Heodo
2020-10-28Payment.docdoc af7c5b0258543bb5d31fa5c2eab9862d98f4b3115f968f448db4028f1f05996cn/a Heodo
2020-10-28INV #000553 FOR PO #09609000.docdoc 9fee8929b36a06e948d6a56d3de1466b9d102bf2e686ad5fb293f485490ff976n/a Heodo
2020-10-28SJ4003112162RZ.docdoc 0776b7426fd21e998800134e1fa13900bd855b2d3b452d01153b22e10d24da0fVirustotal results 42.59% Heodo
2020-10-28PO# 10282020.docdoc e4a4e6c278d0a2cf660e0d6e8cc8359851c32772b4c9fccf98e2b28c9aab7f44n/a Heodo
2020-10-28INV_34233.docdoc 95d417c5e1d71c30625a95f40fb7d368da11fb8052ed9cf36b2e811f6200846fVirustotal results 38.71% Heodo
2020-10-28Inv. 00143228.docdoc eacdc62e23f4dd1edc262c2db5e0139bfe032e0a243db9378d568e0f9e32041fVirustotal results 25.81% Heodo
2020-10-28invoice.docdoc 7cdf46cacb08878324d471fc7cec17b333e38c7d76479a164d1115811dccceb8Virustotal results 28.30% Heodo
2020-10-28Invoice.docdoc 14e540b9e6a505b670a6107a33915ebdf49ef9cdcbe819e7d14993c1f1d2619aVirustotal results 25.42% Heodo
2020-10-28invoices 7868 & 99132.docdoc aaf05aa6da7de09b0f276cb3b3116e61aa22d72769e52a1c85f492d3a1a9e002Virustotal results 30.19% Heodo
2020-10-28October Invoice.docdoc 4955a66e9711e8207f53c9204d68f89903e7aec37f30cbd298ff102bf68f937bVirustotal results 28.30% Heodo
2020-10-28627498.docdoc f3e02448d1bd54a9fffbb229b8006033175e4098eec24dfca51f5a0229dfcff9Virustotal results 23.33% Heodo
2020-10-28invoice.docdoc afea9c0746825b9e47d2063ac184a7dbf66fb0fe1c2fc093a52e0d4cb6b231cbVirustotal results 22.95% Heodo
2020-10-28Invoice 06815328.docdoc 616c983618814da5ddf6ba8fe6b8f930ec8fc9f10e21762a65ac35532f508fcbVirustotal results 24.19% Heodo
2020-10-28D-100120 KLIL-102820.docdoc ccd9a6efeec7e3257f7e01534eae6701580d56c7792ee2a8661a1ad396a6320bVirustotal results 27.78% Heodo
2020-10-28Payment status.docdoc c8382ed675603412dabc80704bc1e88abdf37c11986e6eac00c7958e3068199fVirustotal results 27.78% Heodo
2020-10-28Invoice #757900345.docdoc 129235f3355a262045edfd381d264ee669cd0eee9eaca1601a8509dad50ac10aVirustotal results 24.19% Heodo
2020-10-28invoice.docdoc ca9b4a21c4b284d48ac4b2fb4e838c186778f7d36a0b7c262cee27085bd500f9Virustotal results 27.78% Heodo
2020-10-28Invoice #901231.docdoc cc0df9cb7c27958c95b031a5c41d0b6064f94c8c61317aedec48eb64d43aac7aVirustotal results 26.98% Heodo
2020-10-28Invoice.docdoc 56c589704a314635a792d946d2799f4a25f47d62724ffcc0cfb751b27d822ed2Virustotal results 26.98% Heodo
2020-10-28October Invoice.docdoc f7c62df3d72569e02a22d018a54631d3041f23b308ed9da7af261561ac318a74Virustotal results 27.45% Heodo
2020-10-28October Invoice.docdoc c08f488ccd844154239cbddae4e7581df811648b6fa2ac1dc70194f194138742Virustotal results 23.73% Heodo
2020-10-27C1479006139DZ.docdoc b35d615da70e3502114b5ba61a1979d6f463f7eb8b0fd6bb17d4da8bd1561646Virustotal results 23.33% Heodo
2020-10-27Invoice 0841521.docdoc 25a38466146889f4833a21d4be2e6863c6f4617e632f0bc33436d7023cbaf734n/a Heodo
2020-10-2727917.docdoc ab8a246400a024e5490c031fe13b4c892da8e1db9687fd937766669b28467255Virustotal results 26.23% Heodo
2020-10-27CN0366 invoicing.docdoc dae0cc43be550a6d83464a1f5b2ba4ab8dafdaac48c3441bfc941279afd56de1Virustotal results 24.59% Heodo
2020-10-27Payment.docdoc 0010447fe3ce9d98c5dc301726aa2d717767c7abd1d78c14b39e3055602f7205Virustotal results 27.27% Heodo
2020-10-27PO# 10282020.docdoc 062ccdaf377390b0400188dd4b76f5479b5c5e4cb11cc321ad63e9223179feaen/a Heodo
2020-10-275209691.docdoc 3c0b0961efde86a2b9c1a239fbefeaa8c6cf896bfd8e930f972af471efc540c3n/a Heodo
2020-10-27D-100120 RXUJ-102820.docdoc 14b520153f0acabf64bae7a76718a836373bc0c782a69f1f1a48cdb0ebf62989Virustotal results 23.33% Heodo
2020-10-27INV #002018671 FOR PO #294694240011.docdoc c0c5965a405e155ed20444895767665de59ec49602fa279c7c94014265ae4561Virustotal results 28.30% Heodo
2020-10-27Form - Oct 27, 2020.docdoc a6d4e2b08b8440d239b850df7a27ee5b2269f64f6c898b0b4d04ad6d596d432bn/a Heodo
2020-10-27October invoice.docdoc 26b6c08bbd6f91a2bed79c26264bdeecd3f1c92733a9870924e53eda84d5ccdfn/a Heodo
2020-10-27Invoice.docdoc ba2379322eed64807461af395f65542d31cf23458649857cadeb07a12cdb1c1en/a Heodo
2020-10-27Electronic form.docdoc e39757188d82ee09fcb868b4d5ce2f37b8904f29335dfe60501e67a14fa09f51n/a Heodo
2020-10-27form.docdoc c65f81b1bc17e59bcd7774ce83db577909d5551a1f71d0993fb1595bc48165e2n/a Heodo
2020-10-27Invoice #508.docdoc 0046dd430f33eec36daf84e72714fd8adae02e6cf32755fc2284462d9bce05dan/a Heodo
2020-10-27October invoice.docdoc 799de3c0b3c57093a424c4e80e471b26b7f7d121e6e4b75a250304ed59ab9d6fVirustotal results 34.92%Heodo
2020-10-27form.docdoc f1457d9b1a902adaba47239190f07fb8d1bf37f60293ef49138cb03a435bc841n/a Heodo
2020-10-27RB-100120 DJZS-102720.docdoc 17880cd1a898b6dfb5dfcd42180779843d4ea0cc9ee5d23d59bb343ba629b933Virustotal results 36.07% Heodo
2020-10-27Electronic form.docdoc 3ef590314e0374ea0d69809bf451d0cd1296a7d1c2cbaee157a7dfd627389e3cn/a Heodo
2020-10-27Invoice #6746343.docdoc ac203b670a881b60dff3849213b20ae477e8a6084b9fe8fba68d3dc450374114n/a Heodo
2020-10-27Form.docdoc a2a9255e4e05802803c15f6de812945366a4cbf4377605b139c7f01f8c07b0ecVirustotal results 35.19% Heodo
2020-10-27Copy invoice #413563.docdoc 0021bbe25ff5b692875ec9b22ecc7f278d7859484560e1b975c37770a227a1cbn/a Heodo
2020-10-270064606.docdoc 5c2b628049caab60d1e229c736ae6d06fba6437d2e29bde44349626e3e6b2bcfn/a Heodo
2020-10-27INV_411522.docdoc 3f5ce2d57635a5ebfdf3de5fb1d6be2b71cae647e4cf98150a81368533f525a8n/a Heodo
2020-10-27WTL-100120 RIWG-102720.docdoc 04ef1e080538948e3f23bb8cbffb563f8577a17a2efb3e6e25d8437a5e922b61n/a Heodo
2020-10-27Form - Oct 27, 2020.docdoc 99c6f01f310c8963530831c2c4cdaa4e6c87290436b0b299e6c066510afd3ae9n/a Heodo
2020-10-27Form - Oct 27, 2020.docdoc 828a0a418d5b60af4adae55859160a2f505592c7f21d9d0c9a7e6735288a7383n/a Heodo
2020-10-27Copy invoice #12744.docdoc 7e14d4aff025bda283af8d5d9fe6bbce16317edab86c6339b285658931b6347fn/a Heodo
2020-10-27Payment status.docdoc 311b325ab2da16b422b2e1d19d3b93af7e9b8dd2729e9f2b2f6aff7c96929f25n/a Heodo
2020-10-27ZB-100120 PLHD-102720.docdoc 24cac0a9f39e692ecdf331a3237853807fcc3d54b82bc735ce8062ee50bde63dn/a Heodo