URLhaus Database

You are currently viewing the URLhaus database entry for https://cenfeng.top/wp-admin/EpxrQYPgwlY8HcYnjxust36VOaU1LYYG0YlNddIYSp01Ea45vnJUoM3A3yMyvhspMMD/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:756204
URL: https://cenfeng.top/wp-admin/EpxrQYPgwlY8HcYnjxust36VOaU1LYYG0YlNddIYSp01Ea45vnJUoM3A3yMyvhspMMD/
URL Status:Offline
Host: cenfeng.top
Date added:2020-10-27 12:24:08 UTC
Last online:2020-10-29 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 12:26:03 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:2 days, 1 hours, 19 minutes Poor (down since 2020-10-29 13:45:03 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-27LIST_PO_10282020EX.docdoc 98c713e8df6c92a443138d43fc4435e730cf2515b07e1402ca23c7b03e6f6448n/aHeodo
2020-10-2796170915.docdoc 7d30568082d982dc387555d54ac483b20abaa0a5b97e653ad6f5374bd8ed3d45n/aHeodo
2020-10-27file_JU1639562051LW.docdoc b01b01566c73b1c2ecfd4f04bda6c7cc3c1c12646562ae1f615733fb1cc89b37n/aHeodo
2020-10-27MES_4558303578.docdoc adaa6cfe6f38da277ca461fdc4d6c81d643d1c91babe46515180b90cd041fc15Virustotal results 19.67%Heodo
2020-10-27LIST_00960199.docdoc c0b7364bc8b2a4ef21f805fa2085e3ad41e5ea6206b0274d6300d64305d4ec0fn/aHeodo
2020-10-27GTB_ZG0075740988GP.docdoc eff4ff103b1930c43c7f0ae267a43b853c4cc734db4c80473d028efff6e8f7f2n/aHeodo
2020-10-27UNTITLED_JR1647987303YP.docdoc bcf036ce2601b15386e469cd4b8ba679dc20519df2f62236f361d4c3eaffbc33Virustotal results 44.44% Heodo
2020-10-27Attachments_H8NKXUVPQO1431G.docdoc 31b23d9a8a18a659b89c36b6b116aa8f28579df18ff6d5f81e557ed41c1cc271Virustotal results 47.46% Heodo
2020-10-27doc_PO_10272020EX.docdoc 671b36dbe3b4d202630e0c232f08bfdc0e0fc5ef4787edfe93604f793cd0ba19n/a Heodo
2020-10-27INF_PO_10272020EX.docdoc 6f468d656d3c2f72a6daa3ca15a626683934bdfe57d65187f19aacec5e0f38f1n/a Heodo
2020-10-27inf_KJCPFE6JEA6M6E.docdoc 8f9abf3adf4ba92dbc235bf4256b50c7a104f29cbd536d3739dea21b36d46105n/aHeodo
2020-10-27Untitled_34063359.docdoc 7a543f0215796af850eed509dd0ee5fe9afd2a01385880fe2876945c189f6eedVirustotal results 45.90%Heodo
2020-10-27arc_MZE_100120_EGV_102720.docdoc 89cb35ed3b6648fb9fd0542fb512693bd9af34ca63e5d61a4b0d5902377132afn/aHeodo
2020-10-27INF_JRO_100120_LLK_102720.docdoc e298717a6f9ade752fdc64bab13127ed179c323b1bf54c9e8f79d64bc6227943n/aHeodo
2020-10-27List_21740911120444.docdoc 75642eb51b57507a5a4777048331da127ab8e0eac81c31e69d50e3372ce28dd9Virustotal results 50.94%Heodo
2020-10-27INF_SFT_100120_CCR_102720.docdoc 82e13c6c6c28efe1784b06b488b4ef8303c4c9ada6e9f8815a30bea58b19629en/aHeodo
2020-10-27arc_7901817670207365578546.docdoc 8e2379ffe37bd31c9d501b4fea3ae2e28b59f933520d89a5fae9580c3bfe9368n/aHeodo
2020-10-27Attachments_KU7001TE7O2AWC8E.docdoc 0d324b35e9e1354566e22c431eb9ee5f36c4ade28ed5acf57bbda93ff7c8c1edn/aHeodo
2020-10-27I_75053701.docdoc 1663fbca3bfee0c76af0ff5fa1e59b2d4e10eb3b17a1c5d41a092adf85f30eadn/aHeodo
2020-10-27DOC_NFADL7KFM7IQL.docdoc 04c4ec6ce334fcb141b92d6e0a177aa261d773d79e3c9a671db3fe228bc7fa7dVirustotal results 47.46%Heodo
2020-10-27Attachments_41883851511949366886031.docdoc beec80235ed74cc910936321b2be145f0ed3d43cb0a6f436d2e9414e2df55f6bVirustotal results 37.25%Heodo
2020-10-27ARC_SSN_100120_RPL_102720.docdoc a29d51416449dfcb6f6252e85b3931f87b7902906dbd91e184440024ad0d19a3Virustotal results 33.33%Heodo
2020-10-27rep_LA6253631668GP.docdoc 6512da0f704fb89d4a8ce055a88d766ec48ec1131286d971fef1f708277351aan/aHeodo
2020-10-27FILE_PO_10272020EX.docdoc 7ab5121bd532bdefd823a9e26de4a8362182cdfc702eadf11b49dd1ae9428934n/a Heodo
2020-10-27K_PO_10272020EX.docdoc c120434d0b02ba65e0e0cb0a24abde6889eb5d169602923f1b0f87567f9ac207Virustotal results 33.33%Heodo
2020-10-27File_590244082679185083186031.docdoc 822b7150456ce4824d3136d2b173e2981a20870b8533b3379c2feb83f55288ban/aHeodo
2020-10-27list_RHK_100120_YIR_102720.docdoc 901b7928cfb286b90c7bd949481eeb663937cedfe0dc36b49fd069dd437717c3Virustotal results 34.92%Heodo
2020-10-27inf_VMS_100120_XVV_102720.docdoc fc6174141ba2cab4d8889d6e2597578251658388b14ee0c3dc62aaaf6a379df0n/aHeodo
2020-10-27arc_KM4769273469PK.docdoc ece8580e8d356701d4a0c0c5d7d19cb4b5c08ad86d2d06ba58566f1a6c2aef0fVirustotal results 33.33%Heodo
2020-10-27Attachments_09849066.docdoc c2f163720f0e6e06b3b33b5477481a4789df1991bf3ef3c5e8eb3c3580176e65Virustotal results 37.04%Heodo
2020-10-27DAT_ZGY_100120_GLK_102720.docdoc adfa83c658670b7c3aa3597f7124eab031ffc038977fd0ddf67b070552c55e2cn/aHeodo
2020-10-27PO_10272020EX.docdoc 9a25919303a6d0b1210df01ae35bc7d31040fb1463dc977b75c5f7f11170a42fVirustotal results 38.46%Heodo
2020-10-27mes_PO_10272020EX.docdoc 738cae5e8c5b127eceb61ae86ded059ef5abab3d6c02649cb756cdbaa3470764n/aHeodo