URLhaus Database

You are currently viewing the URLhaus database entry for http://weixin.vishou.net/framework/Z8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:757057
URL: http://weixin.vishou.net/framework/Z8/
URL Status:Offline
Host: weixin.vishou.net
Date added:2020-10-27 16:14:55 UTC
Last online:2020-12-17 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 16:16:12 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:1 month, 20 days, 23 hours, 40 minutes Bad (down since 2020-12-17 15:56:59 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29DOC_TT2668417695IQ.docdoc 4d79f7b9c974fdf5e44ca20f71261e3064ea8bae3f64370f06b74c2bce894b67Virustotal results 28.07%Heodo
2020-10-29FILE_PO_10292020EX.docdoc 13b5e4daa9de72cca849daddaf829c4a3c019c11cebbc6e0c7fb67481fbc9b97Virustotal results 28.12%Heodo
2020-10-29Inf_46257064.docdoc 2d52e6dff2839f2f2b4c4e01290c96b9b924d0e8f276847481da31dfea122414Virustotal results 28.12%Heodo
2020-10-29UR9709620023ZY.docdoc cd3fe863b543b7cff0caa09fe57459ed428b05158a34dd748438f0f7a671fabbVirustotal results 27.87%Heodo
2020-10-29Arc_GV3222144505BN.docdoc 29808c9db3a80e9ed46d4aecbe478dd8e57089d7e2977c916421cba71b0d6c42Virustotal results 26.56%Heodo
2020-10-29LIST_PNU_100120_NGM_102920.docdoc e926b72dab019ad1b78bffbabd213a31d3901511f076da3d393efea4435ae1a2Virustotal results 26.98%Heodo
2020-10-29doc_PO_10292020EX.docdoc 435bd29b63544b01f0aa17d2260f1b77f63cf256dbe4029d85ef0f8f9427348aVirustotal results 22.22%Heodo
2020-10-29Attachments_56988752024.docdoc 66f64a0a15e1684f79b32847abcb12b76ab1c2e5223c4acd8d994beaff32d39bn/aHeodo
2020-10-29dat_41458102973700681335.docdoc 93ef9ecf091dd0a2f463f8b10a73d301ad965547315b43fcd5c1a4995c513525Virustotal results 18.00%Heodo
2020-10-29MES_FQR_100120_LIY_102920.docdoc ae454b06f63308de7e1a613281feea2eef089041c67af45e72ceec804482b526Virustotal results 19.05%Heodo
2020-10-29XPX_100120_DZB_102920.docdoc cd49f6f6b2b1cbf28331a1eff67e7179731f34a790a1bb69c89b65ffcfc38e01Virustotal results 19.35%Heodo
2020-10-29List_PO_10292020EX.docdoc b0144d3b84fcb16e6d521e31100944499659d0ed9065e7295eb557d60254be7bVirustotal results 20.31%Heodo
2020-10-29File_PO_10292020EX.docdoc 34d9cdd8a269048d1a73d296e922eef7ab126f766b8d9a8191dbaeb1345a8dd0Virustotal results 20.63%Heodo
2020-10-29mes_PO_10292020EX.docdoc a943a1b78c2ddb8ea536ad08b2eaaec624c324079322f272f1e1a319b5603a28Virustotal results 20.63%Heodo
2020-10-29list_IJ1963313731XI.docdoc 1ecf50c67d4c4bf7eba5ed050c6500f7ab6a2b63b66f12dd23748e22e9a34ce7n/aHeodo
2020-10-29Arc_PO_10292020EX.docdoc dd2f2115532ae0bb8caba1381ef917d6806c8770f15904b8be6e467eab40b1acVirustotal results 41.27%Heodo
2020-10-29Attachments_HT3669843077QM.docdoc c914f79bcecd36e66a0afaafa94fea889077dc0eeba31cb470833af137c79564Virustotal results 40.98%Heodo
2020-10-29mes_25644587.docdoc 203c3fd643e932d50df0ccb5aa112bf49bbf44dd16e722b4bdc67551bf3fb133Virustotal results 41.27%Heodo
2020-10-29Dat_LSL_100120_PWW_102920.docdoc 6e9c088cbe83fb2b0f6c959df9f72eb6faa3316c7eaf8e1690f590a91e56974fVirustotal results 40.68%Heodo
2020-10-2961274603.docdoc 204f8e84ed2129ae8909236b98956b7b2c453bd1d3ddad9bb1be5c21aef3b69cVirustotal results 40.32%Heodo
2020-10-29Inf_94114645693662.docdoc 7161db36ab8dfa34e4ae1aefa3d4fd7923a2a89118835e1e8bc905216bbf70e8Virustotal results 38.10%Heodo
2020-10-29Mes_HI6218697909ZQ.docdoc 79518084f871542ac83178e1a8d96966d1ac6936c666a19b221c83e25d7c9f89Virustotal results 38.10%Heodo
2020-10-29list_QVB_100120_GMW_102920.docdoc 391bfc40b692a1742119596041c13976318ba374a5f74e5e441a2df28ad57fb8Virustotal results 38.10%Heodo
2020-10-29Doc_16441820360382223001030.docdoc 1053508dba9607d8d25a553d3059249c8ff3fc0f143ea47103c1842a20098c2cVirustotal results 37.70%Heodo
2020-10-29KR7675163667VM.docdoc ed5a9cf9f1dc54e472bd41658cb3f19ec7eafcb34da7257c6407697b879a0535Virustotal results 38.71%Heodo
2020-10-29I8V7HTTV6.docdoc f54166916a8e40e0d024df928029c9f35e013fb4b7a39eeb0554e8dc2820dc9cn/aHeodo
2020-10-29rep_80684520.docdoc ae5eb8b4425c48ca52483b971f62906afb81dbcd5cd174096ef72b33177236beVirustotal results 38.10%Heodo
2020-10-29rep_QNN_100120_WHN_102920.docdoc 9f2ed62dea3b679b6dfecbb79905a34ef056e81af2e92c4249fe4521711b047fn/aHeodo
2020-10-29dat_G0B2I514GNBZKY.docdoc ab7a59b346e75d68ff9a689f85a0d2a96833a3048478fab68af1e8f1bd4d5905Virustotal results 36.51%Heodo
2020-10-28rep_HZF_100120_NUB_102920.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7Virustotal results 25.81%Heodo
2020-10-28UNTITLED_PO_10292020EX.docdoc f22f6b796d73cadef21281fb4120d425395b7c6457e38524dde128830ccfc02dVirustotal results 25.40%Heodo
2020-10-28SFVR_PO_10292020EX.docdoc b453a71649f01fe941d53cdae60f24c08a2ef3294472d662be990ed0b961d3ccVirustotal results 25.40%Heodo
2020-10-28MES_ZZC3TON5GBLSE.docdoc 92bad3b1416d1b7f759e20c2214cbfe1f31b2f334d818e67dd917cde8a72befcVirustotal results 24.19%Heodo
2020-10-28LIST_TG1171272386VO.docdoc a9003ab0c42daf42d53d1661cab1ee2ac09b3e58da393f79d593736cc30d6aafVirustotal results 24.19%Heodo
2020-10-28doc_FFD_100120_SCO_102820.docdoc 7384af9684329dd3916fa070ae356428bfb6f43d3ca6aa725f92d696dea83f41Virustotal results 23.33%Heodo
2020-10-28doc_TN9055332615TF.docdoc aa4fa922d7e80e83494ebc5639c0549754860e3de9ffd6b8f4f455a8ef6f8a2fVirustotal results 19.35%Heodo
2020-10-28List_89849968.docdoc e5efd5e64316b51e501368020870705546ec2e8de04a25f5905192984126e747Virustotal results 17.46%Heodo
2020-10-28Dat_KO30NWE3.docdoc 54a04ad4747b88954b6501afd0c033a819bfd9e67df5354ed77031d04e8e23bcVirustotal results 18.33%Heodo
2020-10-28Inf_PO_10282020EX.docdoc 3bd7bff850a4570a7bb97f9e98579d7a02f229ccbec50ec955257f9963ca0b5cVirustotal results 17.74%Heodo
2020-10-28AG6825339818LT.docdoc 783f27e26d14d3995898c2e135fa9944d4015481789286efd92026c7ef2ffdbfVirustotal results 17.74%Heodo
2020-10-28INF_PO_10282020EX.docdoc 7d38c4d98d05cd3a7a0fc6898c9d86ef1c29cd8dcfa3403d0222ff508843a325n/aHeodo
2020-10-28Arc_ZCN_100120_EXM_102820.docdoc 21509e892c4ef6e47bd2fe0d2290b20e48e4680f2f3537f12a061cd5912b1cacn/aHeodo
2020-10-28Doc_4ODDDXSIL0TJDDZQ.docdoc 972396084dfd074cef1c597e9766918fc0d394d11b8762d20395a86ad5b5883aVirustotal results 17.46%Heodo
2020-10-28VTB_ITW_100120_EVQ_102820.docdoc de6aea23d0d0c49a68ce1e1762c71c2976fefcbf72b8b2676fec3c065edf9b47Virustotal results 16.39%Heodo
2020-10-28Dat_FSFCWABLP9YRIEKR.docdoc 5fcda50da77323acc30f1b703c2504b8b3ac07997068672294ea312703ef0ea2Virustotal results 17.74%Heodo
2020-10-28dat_ICY_100120_GHC_102820.docdoc 7eeb30a34016ac7c6d48178f44b12c48df17acb131f0a96847d1cd67c464ce30Virustotal results 25.81%Heodo
2020-10-28file_PO_10282020EX.docdoc 302684a1df1b3b6bcf6995798581972d23b71888983b326ff3eed9bbcaf1c56bVirustotal results 23.81%Heodo
2020-10-28list_086045712290991970616322.docdoc 4cc5697403b8d54be43b94e10a6a07b78a0014f2f7da069fac7e7b9ab3506484n/aHeodo
2020-10-28rep_YT9399366236OI.docdoc 67f89ed6526c25c2f57566767057b1cc2be2463adc0002791a3bfcdb25158029Virustotal results 16.39%Heodo
2020-10-28UNTITLED_XJSH8D73WLDKCU.docdoc f976e3edc1892c2009a8000edb80c5329f8ca920af116372b2a274488ddba5e8Virustotal results 17.74%Heodo
2020-10-28MES_696922645998.docdoc 9148521d1b0af5640383d1905b6cae8657ee59b51e04dc0d18624a10234ad20cVirustotal results 17.74%Heodo
2020-10-28File_C07XTE4.docdoc 3a80f65b200ea7247726fab9a6a422ee11db27f16b629823f536e69e6b534f76n/aHeodo
2020-10-28Dat_50120032.docdoc 778c2b97449426c3f3827a8041a05fcbb0e648267612cde21370c9f152bcf255n/aHeodo
2020-10-28Attachments_27318321078310701.docdoc 06604f59215e3e640ecafb3ca8ba3151c4ef3dbd390ac1c996becc39c0540e24n/aHeodo
2020-10-28Rep_0V34I802LKVHWZW.docdoc d1e48d98d3d928c9e037cd42ffa40c55a3dd2821793b189555e6227789239a26n/aHeodo
2020-10-28E_KMK_100120_LZD_102820.docdoc 0cf82bd2a650438c7818a19c6fe0732ac0c004c56b13d070417bb70bfe3b75ccVirustotal results 17.46%Heodo
2020-10-28file_HRY_100120_EZQ_102820.docdoc 1c6f1e8fd02e26528ffb033f8609b7ace904644afa906f2de75d4e2eb5ace245Virustotal results 16.67%Heodo
2020-10-28UNTITLED_GW3188109394UR.docdoc f8ce9f330d0b10e66d01f784d66c98d45fb6dc902c622d65ab15dbe965cf36bdVirustotal results 30.19%Heodo
2020-10-28dat_ARL_100120_HUM_102820.docdoc 2ed9663048bfe1c969ee302588f17bbee321277d16204ebc6fcc3a626d03addbVirustotal results 28.57%Heodo
2020-10-28Dat_VCCOYS64OASBP94.docdoc 3b2703a8136146bb26f76cf8aeb05e347c77170c548c652fdc716a1df532a920n/aHeodo
2020-10-28File_PO_10282020EX.docdoc 971349194e2895c67d792f09a40990e6754e2ce4fa00b738c17c34cbb88cc6e2n/aHeodo
2020-10-28arc_XS2271277876VS.docdoc 0fdb302c3db79d7ed89244d7adf4c56d5cc9e4643c3e5bac39c3e82cff3834e7n/aHeodo
2020-10-28Attachments_35285402.docdoc 9ef4f6f51b375bbf59cc1d992a0be8455a3a9c3a026b28c4abe77a4f16805c50Virustotal results 28.57%Heodo
2020-10-28DOC_RP8075213569MV.docdoc 6943776fbe689678555633732e42b105c955535193d5a7b05eba01cf9c5d3780Virustotal results 28.57%Heodo
2020-10-28FILE_60Y88FSQU.docdoc 06472f9f7853e0506b85ea1db0bb693aacedee79ad413c1ca0839a322f834df8Virustotal results 31.48%Heodo
2020-10-28inf_316221331493993157687764.docdoc 4a40f7f94b6987d15605eb7e6ccd22baede35a72d60278537f9aedbd6d7a909fVirustotal results 28.57%Heodo
2020-10-28YI_PAR9JO4.docdoc af7a1932766cf0a2a6bc07298751e49a47f81b2b7f255579bcc6d1a93f335af4n/aHeodo
2020-10-28GM_CIF_100120_BXO_102820.docdoc a67871eaa10790dfc0459026fe390127f88e0e7ef794ca29ca3ef501bf0bbc98Virustotal results 29.03%Heodo
2020-10-28DQ_TNI_100120_BPI_102820.docdoc 21f741f58102f6494c54d7fc6830b266d1ab2f8afc85546d8e2a2d7b6d51c767n/aHeodo
2020-10-28List_PO_10282020EX.docdoc 34eea5e4f2e92b636f9fcade14a7aec223d0ef960f9c0f6c749b2b806096aeb5n/aHeodo
2020-10-28MES_LJU_100120_WDP_102820.docdoc b10f4a4b46a88d8bd137cb2d76eb827b89f16acd953490d55b6161aa0e99b7aan/aHeodo
2020-10-28Doc_99RQG35YGJ4Y4.docdoc ed432b4a387becc419df96f24140626602c26a169999780c2309f0f5190a1321n/aHeodo
2020-10-28Dat_73362058901199049636.docdoc 9c509bf6c3b7824436cb299b2efffd013f3b0b156e9398a6975b71b50152cac3n/aHeodo
2020-10-28C_95773492.docdoc 0c7d3ec331ef86b021bbe0e3892bf17424bd028421e6f164f683a969e38c44d9n/aHeodo
2020-10-28PO_10282020EX.docdoc 553f438bc1486ee99b764c15bf3caa7e8fc1b49c48ace061dbd07220a7e56eb7Virustotal results 30.16%Heodo
2020-10-28arc_09677064.docdoc 2a87dc4a8eb48efe3380d6d3fa99507c81bb9356c90ea39b1156d82f32396c18n/aHeodo
2020-10-28inf_35427356.docdoc fe13971c49c4731ae4fdc32c49bbb6796383a27db3ca2340642ed9d0c1753880Virustotal results 31.48%Heodo
2020-10-28Rep_PO_10282020EX.docdoc 2ff2d2fe253a47fbc4e9580ec37c3989ea365bf7b0475b19e6cb580942dd1630Virustotal results 33.33%Heodo
2020-10-28LIST_QU7704225486UA.docdoc d3e4041b0325e0794fe6a1b0a78783b8c05b595f0631c24d7d8e11c53fa5e8e4n/aHeodo
2020-10-28Attachment_087765622.docdoc f3caca68ae462481d5bac777996fa838a0dce95c7eb782713404fa5e3712a2abn/aHeodo
2020-10-28FY5236471522QU.docdoc e774de558ab588e2aefc6661f8ddf20b6a02ef8a6e2c4504a0b03e27d9c19df3n/aHeodo
2020-10-28file_991036036712814.docdoc cf6945d684eb6962274cca88159c3f88a0a5291a81ac0d8831d9f6496b005c33Virustotal results 27.78%Heodo
2020-10-28FILE_78695219.docdoc b7ee22f0341587e221b8a80c3caf8fe78b8d8ba06220d4cc28641f82d0d32bb0n/aHeodo
2020-10-28INF_74583920.docdoc aeb7e85b2cafde9f05807a7b77f48f79c431e3c6cdaaaea539d2fb42a7ed47c4n/aHeodo
2020-10-28FILE_40814341.docdoc bc8c74e5b69ba384b49d43f30b6707c6982c97d843cbc3771fe0027cc844869fVirustotal results 25.00%Heodo
2020-10-28File_96030558.docdoc 176e68686c8b9f4fd451378d2515712d6b00a0870c518d0c530d020d13bb3052n/aHeodo
2020-10-28K_4R3D21996YESHL1.docdoc 2474770e88e989b790cd585fe0e234558dc6ce20bc8ddaf5a4e1f5c0733bc09dn/aHeodo
2020-10-28doc_LVN_100120_USP_102820.docdoc a30d2b343e3646a2a05e98c5b7f976a1f67e12574ecb880a2a460bec35735f6fn/aHeodo
2020-10-28UNTITLED_BUI_100120_ZHL_102820.docdoc 4d2065b87b5e9b6d1f4bc0bb53b3244c9d61eb3fd8c95d64757935758065ff29Virustotal results 22.58%Heodo
2020-10-28MES_516863360.docdoc d3c0be044c41601dfa9c299cdd01957fdb3368175976582bc1d83c203391c78dn/aHeodo
2020-10-27arc_NA0019512636GN.docdoc 9efa8997bf4ffcc29b996b1a0dd651e92bacb8e79143a0c008cf1eb4a8b41cbdn/aHeodo
2020-10-27Inf_PO_10282020EX.docdoc 90f1f20d90c0a5c6c32d6eca01833ff1db7b1325a5db427d7c5871fe3d5096f3n/aHeodo
2020-10-27MES_29126073.docdoc bfc255c1fae47d22c3a502329ae24b49b0fc4169c49c13a4b1091cb686e3ccedn/aHeodo
2020-10-27File_5JE4E587N7C.docdoc e2509856fa3825262f7b8d15270d09143fe04141cf779efade220b800dfcb8cfVirustotal results 20.63%Heodo
2020-10-27Dat_4952843688068487394885156.docdoc 8f81d3faa4e108405a4e9833d08d42d8a84bbc940356bcf4a9337afd4f7a3468n/aHeodo
2020-10-27doc_57377739.docdoc 94510a446cde22ca891a6753fdedb13a499f03851126bb7146e8f9d923f1dedbn/aHeodo
2020-10-27inf_32927238.docdoc 072432dff65efd13b9aff5f11e2110b10d7faec139153eecfc4d332e3e7413e9n/aHeodo
2020-10-27Inf_PO_10272020EX.docdoc c0b7364bc8b2a4ef21f805fa2085e3ad41e5ea6206b0274d6300d64305d4ec0fn/aHeodo
2020-10-27LIST_542139256155656.docdoc eff4ff103b1930c43c7f0ae267a43b853c4cc734db4c80473d028efff6e8f7f2n/aHeodo
2020-10-27FILE_79966973.docdoc c648fbdb326aab7ad03eb32dbe84421e283c66f1f7d21f8cf8a392332669b8faVirustotal results 50.00%Heodo
2020-10-27284173619.docdoc 446d4c75f38265697474a1d1b7a26b664e97e2115b1a754df6fa956e98ecceacn/aHeodo
2020-10-27list_87786600.docdoc a82016ef35737f72510ca77d1b75eda6c877db43ff918b8f2c6bd42f280f8116Virustotal results 50.00%Heodo
2020-10-27Rep_PO_10272020EX.docdoc 42c0ca75903e2ecf17a86645e72752d15c47d76bbb5bdb0c7fb5493f8939d952n/aHeodo
2020-10-27Arc_PO_10272020EX.docdoc 82304be765e94c28cde780b5f7e90c056ace4fd6e5aa3059ff05f9c4202a92dbn/aHeodo
2020-10-27PO_10272020EX.docdoc 89cb35ed3b6648fb9fd0542fb512693bd9af34ca63e5d61a4b0d5902377132afn/aHeodo
2020-10-27718852929634169732614.docdoc e298717a6f9ade752fdc64bab13127ed179c323b1bf54c9e8f79d64bc6227943n/aHeodo
2020-10-27Attachment_6NZ3ZEVWXE8Q.docdoc b5af6d7f4fb7ae66fbaa6bec875c3445c56507a2307d92800e26f08d169adfd9n/aHeodo
2020-10-27Arc_PO_10272020EX.docdoc e2e08b8d13ee2f3b74b54ec4de5892a941e2a274e8c0117d86a7dda62c0dcdd8Virustotal results 45.16%Heodo
2020-10-27Doc_EWF7RX8JFX3.docdoc 8e2379ffe37bd31c9d501b4fea3ae2e28b59f933520d89a5fae9580c3bfe9368n/aHeodo
2020-10-27inf_90794037.docdoc 09244c423c3262527e5deda11a9ade5df8ec453d879c5fb6e6cb2afd3121ffccn/aHeodo
2020-10-27doc_33592309.docdoc 04c4ec6ce334fcb141b92d6e0a177aa261d773d79e3c9a671db3fe228bc7fa7dVirustotal results 47.46%Heodo