URLhaus Database

You are currently viewing the URLhaus database entry for http://cenfeng.top/wp-admin/EpxrQYPgwlY8HcYnjxust36VOaU1LYYG0YlNddIYSp01Ea45vnJUoM3A3yMyvhspMMD/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:757054
URL: http://cenfeng.top/wp-admin/EpxrQYPgwlY8HcYnjxust36VOaU1LYYG0YlNddIYSp01Ea45vnJUoM3A3yMyvhspMMD/
URL Status:Offline
Host: cenfeng.top
Date added:2020-10-27 16:14:18 UTC
Last online:2020-10-29 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 16:16:14 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:1 day, 21 hours, 36 minutes Poor (down since 2020-10-29 13:53:04 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-27LIST_PO_10282020EX.docdoc 98c713e8df6c92a443138d43fc4435e730cf2515b07e1402ca23c7b03e6f6448Virustotal results 22.64%Heodo
2020-10-27dat_BK2998042456OP.docdoc 77e15f9522e48f36a7a6067a2288259f10f991917093606ae3c07b26a3ede823Virustotal results 19.35%Heodo
2020-10-27Doc_PG2154336430MC.docdoc fc7ce8ff56832fc6cd1bdb013de966cae38ff1e593a06e22f0e9764e09528a01n/aHeodo
2020-10-27file_JU1639562051LW.docdoc b01b01566c73b1c2ecfd4f04bda6c7cc3c1c12646562ae1f615733fb1cc89b37n/aHeodo
2020-10-27inf_616718888603114.docdoc 072432dff65efd13b9aff5f11e2110b10d7faec139153eecfc4d332e3e7413e9Virustotal results 19.05%Heodo
2020-10-27FILE_00655352.docdoc 0b8ac5c9dc030e537de800452a108f34d872311dbe2d68949a7230e90cc2ca63n/aHeodo
2020-10-27file_PO_10272020EX.docdoc c2f4e4bcb5877f6df3f12405fb82993d59d41dc9728a65f971f7ee3817e8088bVirustotal results 21.82%Heodo
2020-10-27Inf_ZPI_100120_UBS_102720.docdoc df286efbf9a90e67990da6544a77ed909b05fbaf8d200dce0edff93ebfa81965n/aHeodo
2020-10-27REP_DC2498661485HD.docdoc cb505678e0c2debe5c5b4647af5940e08ffbb2d7a1c73de09136d64560cc0696Virustotal results 50.00%Heodo
2020-10-27LIST_96385561.docdoc 94bb2eb0f0b8a0f61ff20360dbf6e4b89188c5157bc940f9d38dd4cb68a4539an/aHeodo
2020-10-27arc_44354728403897986699.docdoc f7496ff4899b8d1febae957c9f03aaaf262609fb62b4588471fd7b15dc107d1eVirustotal results 47.46%Heodo
2020-10-27PO_10272020EX.docdoc a3c05445fcb1e6c242295e16252d4fc5c64ad8857ca3356f4445217cd28746d9n/aHeodo
2020-10-27list_8041417981810953510958.docdoc cf1755db847790e09d27102e42e4de72525a7430fb714314809577906196589dVirustotal results 45.16%Heodo
2020-10-27DOC_LJW_100120_ZRC_102720.docdoc 36f438d9f983ff13b0d9cd592093dc78f38fb115c966eefa01db80b01bbda192n/aHeodo
2020-10-27LIST_68099835.docdoc e370ea4609a4c900d20fd7b455fa80fddc7c91996b6ee181eafa2b4a2f518202Virustotal results 44.44%Heodo
2020-10-27Attachments_TU1290649252FB.docdoc 1058744de415e325716999c39aa1a4e970532d196f5aca783d1628feacc20626Virustotal results 45.16%Heodo
2020-10-27MES_PO_10272020EX.docdoc 5ed7759274be901ba33c4f6edc3933a460141c8fd98a83304db9c6a344adecefn/aHeodo
2020-10-27REP_83340161.docdoc 16b99f7444f5e97d0fce8d7730fb1437f62f71827293d7d94965735f45ad9334n/aHeodo
2020-10-27FAP_OXSRRFS9.docdoc 46a3e3abecccb7dab19ff4c6940f0d2b503d409524a59b07bea431da55dac765n/aHeodo
2020-10-27DOC_NFADL7KFM7IQL.docdoc 04c4ec6ce334fcb141b92d6e0a177aa261d773d79e3c9a671db3fe228bc7fa7dVirustotal results 47.46%Heodo