URLhaus Database

You are currently viewing the URLhaus database entry for https://cab-vietnam.org/damand/oPqimL96/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:764338
URL: https://cab-vietnam.org/damand/oPqimL96/
URL Status:Offline
Host: cab-vietnam.org
Date added:2020-10-29 08:41:18 UTC
Last online:2020-12-25 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 08:42:03 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:1 month, 27 days, 9 hours, 13 minutes Bad (down since 2020-12-25 17:55:14 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31file_KWIWQ1GTSLBI.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aaVirustotal results 56.25%Heodo
2020-10-31REP_WJQ_100120_FFW_103120.docdoc e75cb7602be15e3a44e77aacc557cb5ebaa487b2be7b8fce7f59a4e2c18e8794Virustotal results 57.81%Heodo
2020-10-31Untitled_JAU_100120_FYU_103120.docdoc c0e896c6e7521d6431ca692ef69c30c605ab7e599336d9c027721e573d1b2161Virustotal results 58.73%Heodo
2020-10-31Doc_62281932.docdoc cdb79e413c85c2fa4724ac77b430ab5a6a0c770f7f6a640fec00d946a93f5e09Virustotal results 53.12%Heodo
2020-10-31dat_ICH_100120_QBB_103120.docdoc 0ab261e8e21a48f3423dbe6d18512f5e2afbd09fd31af5d5c45d2814c2c709afVirustotal results 53.12%Heodo
2020-10-31LIST_ZRI_100120_XOJ_103120.docdoc d1d8c0384f3780dd6287efc3e864f9fe60b6efe14f613f0cc2ec0efb0aa97dd6Virustotal results 28.12%Heodo
2020-10-30Doc_PJ4201013395YB.docdoc 621f149c8fdf5abbc449baa3bc86423a799301ca3017950f0b173a6977033e88Virustotal results 54.69%Heodo
2020-10-30dat_83234610.docdoc 07cac58fbfac34bd4e22b0dab98273a45a147dac7d38266ec0749fb5fd85b98dVirustotal results 23.08%Heodo
2020-10-30mes_921377598591537305846807.docdoc 1ce95602afd3133a2b2f7ac1df3290e233ba27b2f2b71d6a1b407cda2cb4ca4dVirustotal results 54.69%Heodo
2020-10-30BU_AU5078751486ZZ.docdoc b79376701bfc97b082e9d8d61f6886b399692a2b154c6095559ab1da86e4c518Virustotal results 53.12%Heodo
2020-10-30HARNKGNSVMT4J2I.docdoc f2413a07e3362999d85fbab3f6c2fe8f228e4567eac899cd565ad65a2d0eede9Virustotal results 53.12%Heodo
2020-10-30inf_0218793726894.docdoc 8ead4e972ba536f428fbee5bb8f687ff6a1efdae4456aafb1bbb176b37672180Virustotal results 23.81%Heodo
2020-10-3058339438.docdoc 4f6d5190871bdf4ebad7eb4520c7a651e3a2f4d8def1ca783c0efb807bdc7ec3Virustotal results 23.44%Heodo
2020-10-30Dat_LUE_100120_THJ_103020.docdoc 75ca20340c21dbd94ba3ec4c8eeb14f3a78e68a955701cbdc754c29163674a3aVirustotal results 33.87%Heodo
2020-10-30Inf_LH4121968694MK.docdoc 721a801f52c7641ad68e3e7975b2dc98e5908a41803928d13434b180d6add068Virustotal results 23.44%Heodo
2020-10-30doc_PO_10302020EX.docdoc b86e09a5bdebde57bd67e1fa11ddbd3381e5972d091fdc61b68e34226fabf084Virustotal results 33.33%Heodo
2020-10-30LIST_244168558040709.docdoc a24c2997fb1b27e97d94e67fa2efe79081cb3329192ef55f1765271679241990Virustotal results 46.88%Heodo
2020-10-30Untitled_38021547.docdoc eb5d0c08628c3ec2c081dc472157b78cff5ee705d96de5cd061c582c575bb7e9Virustotal results 44.44%Heodo
2020-10-30inf_92546128673814372584.docdoc 374433b4b7b6197f4f9f41115f09cafa5907b8b1b2076963bc6c09e4227fd47bVirustotal results 42.86%Heodo
2020-10-30mes_QPJ_100120_PQL_103020.docdoc 5aeb983f62e296373a25bdde163ab799f0bd688f40567310960f16b815921687n/aHeodo
2020-10-30Doc_PO_10302020EX.docdoc 13d14b40f01d08656e74e969635a6cc3da85d7e7561d122d76d2e7f6a7b8960eVirustotal results 42.19%Heodo
2020-10-30INF_67721000.docdoc 7c159d17e809a78bad3e024cda533ebab493cc8519755e2946af59e11eac9ebeVirustotal results 42.19%Heodo
2020-10-30Arc_QVR_100120_CLH_103020.docdoc a3c09116b3564a812d894ab750990565e22b18b97a47c138b3b271f1e7e5f666Virustotal results 42.19%Heodo
2020-10-30list_JZ0282757332ZD.docdoc 26ea21f32fbf8f9f6159707d8251c281efcd51b2a44120dd051b65c1c3307a41Virustotal results 42.86%Heodo
2020-10-30REP_REO_100120_RNC_103020.docdoc 17d5bfb8d831eb1b5f2defabb4f6b29c2c2f65bc90c0b310d7e0867ac11c125fVirustotal results 42.86%Heodo
2020-10-30Doc_39930129.docdoc 5333597a0d69ed5391e4f32418f25067aae4169db8982d327bef75b5fa518b8aVirustotal results 40.62%Heodo
2020-10-30rep_99121037.docdoc f22c7ee8f3ce55dbab2a2636dc155d39ae98cb927962f0f88fe3f85bd28c44f6n/aHeodo
2020-10-30Dat_UA9816415829CQ.docdoc 0406910d3c48dbd18d57086dcab9b4f73a8081dae9fac3010f0ae90b73c7c34fn/aHeodo
2020-10-30INF_QSX_100120_UFF_103020.docdoc 9c96edb7b23fe316d7ea6705b137c283da2aba4f7dab4537a681e7e5d031b0eeVirustotal results 25.40%Heodo
2020-10-30FILE_PJN_100120_WDV_103020.docdoc 22a4eae8735782a3f12e3f7ee5b6d0839cd7c4a8b91dce6ce27e2414b2e5f817n/aHeodo
2020-10-30dat_DC9033596591HD.docdoc 5041a2eae4b04f23df9804031b3a30e815e0c2310bf42d82176cb89618617933Virustotal results 23.44%Heodo
2020-10-30Mes_W0AY673.docdoc 4a1ebe8938ac9ac6ae7b502c4561bf514bc47ccdb87abae9777a5ac526d6540cn/aHeodo
2020-10-30Attachment_204421504.docdoc 8cfdaf7b364045782c53fe4094501d577114deba01267ff8e074d14d7d27833bn/aHeodo
2020-10-30FILE_63909336.docdoc f2ce2b3d2bf2f5d0f22eabb44f0b7c9183e0fea547e90ab926beae89d85cdf0en/aHeodo
2020-10-30ARC_JF0986282456EF.docdoc f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948Virustotal results 40.62%Heodo
2020-10-30Mes_004865842098638.docdoc a120ab7f12256c4b260034ecf26910f2eb405bb2c41ea9d1d78fcd2f529d2debn/aHeodo
2020-10-30REP_3559038541874237115424.docdoc f16118ebe3dbd05212ed3e350e3d509e02c403cacf34497532c50e1be09b7e16Virustotal results 39.68%Heodo
2020-10-30S_CP8232829931JB.docdoc 7bfa1640c072951be3fb17704054b151541525eaa8a22606d94fc2d037a6a663Virustotal results 32.26%Heodo
2020-10-30MES_28215285.docdoc 8cb962ad1798941eefe7a5f826ea5bebc726304af0337e53e6e34d59a7715795n/aHeodo
2020-10-30rep_PO_10302020EX.docdoc d77f9d8ce192df999a4c7c9564c086962623dc1a6e020f14bf19f264f59d316fn/aHeodo
2020-10-30inf_82024701.docdoc fa59cf4c1af3d49c804914946132b59157e3d2f1eaf2d2d11a2ac0d5f2f3f2a9Virustotal results 33.33%Heodo
2020-10-30mes_PDQ0YIE9.docdoc 8f71742d1582c153a4011a49f8bf5ab9fe4129b6937832fba73d68bc0e95a438Virustotal results 35.94%Heodo
2020-10-30Untitled_92070242.docdoc b2f80aa2efc9abdf137f78f830f2366b29e5bba74409138f8db1ed6163e25819Virustotal results 35.94%Heodo
2020-10-30GGW_100120_TVR_103020.docdoc fc80fc159e39cdd815b9470202534387227e2a22a7ecb333efc5628c4a0f76f2Virustotal results 34.38%Heodo
2020-10-30arc_42991983.docdoc 3faba02f0eb970ef25a2a874736e4f758dd3424cdba2637795ada41385024679n/aHeodo
2020-10-30arc_53804814.docdoc 7ae6e150fde20638c5cc89c0b4c088593eb3879f0f6567e9c4cc14069b9ae204n/aHeodo
2020-10-30ARC_C69M4TO3YET.docdoc 9cdf4102c45c7f549ee4e0290a07d4f7783c6371b1a8fe35a6f1f04d56cd6857n/aHeodo
2020-10-29DKVD_JC3H4XZY.docdoc 5de82db9541a97ffb820c52c562ee2c3b84430e1cffb0c8a98f70908d2a78c9dVirustotal results 26.56%Heodo
2020-10-29Inf_27099739.docdoc b34a20ab0c628d52b55717ab15189662ec1a17741a542a9270fc3dd3db80e0a5n/aHeodo
2020-10-29FILE_PO_10292020EX.docdoc c61fca273223598ec29bcc70b0f716f3cb0ff9d9e293a02c8e0328dcf0011153Virustotal results 34.38%Heodo
2020-10-29FILE_SG3150070498EL.docdoc b2d41822b2d89807592fd225c8450a8005e877760a656a6477ac0a28e3aa0250n/aHeodo
2020-10-29REP_8891669915850739507030.docdoc 633a628e9a364cb3bbd93ebdce10e5f23fb15370a584efb4fcecf4549c3b975dn/aHeodo
2020-10-29Attachments_PO_10292020EX.docdoc 0bec0186a4f6a768c04f1e871d8ea6c4ae69a5580342d2310e057acf518c7b00n/a Heodo
2020-10-29ARC_34599840.docdoc 542607ccac2f39cec525786fc1e27c06359a30669af200f8cd1974e15680fa73Virustotal results 31.25%Heodo
2020-10-29Dat_94281688.docdoc ed0c88d255d6a8938c10e7c8bf48cfbc1659d01ae0a99d3ffd7a205dcc310d4cVirustotal results 31.75%Heodo
2020-10-2959984164.docdoc 66f21ad9f94f3926c870736b3a33af58b00eea538ae8da9b7cd71ad1eb5614d6n/aHeodo
2020-10-29PO_10292020EX.docdoc 51657b8a72e7e81349ee2744529184125522759769f93b02aebc3a2d33fddc2bn/aHeodo
2020-10-29MES_ZF9399947001GI.docdoc ccc94ba056101ead7adab466b9b4780b16a85dff204b246ae7094f9bbe79fdacn/aHeodo
2020-10-29DOC_LQ4428670395BI.docdoc d28ab268249104b8e40b88f99670cb44f0cc8c440b22b983193c4e6fa4e0ea95Virustotal results 26.98%Heodo
2020-10-29UNTITLED_PO_10292020EX.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo
2020-10-29ARC_FWYJ3HA4IPGVPLY.docdoc 2d52e6dff2839f2f2b4c4e01290c96b9b924d0e8f276847481da31dfea122414Virustotal results 28.12%Heodo
2020-10-29mes_BT7900304675JX.docdoc 29808c9db3a80e9ed46d4aecbe478dd8e57089d7e2977c916421cba71b0d6c42Virustotal results 26.56%Heodo
2020-10-29arc_PO_10292020EX.docdoc 5db58ed4308eeb76f9c66c885d4f1b53530d6c42eac9d755e67bf41989094087n/a Heodo
2020-10-29mes_411442180835.docdoc e134359bfa4a04bffabf20a6522d2a4c8d807619578853ba0387aa395b6495c9n/aHeodo
2020-10-29XPJIT4MV3IN1DZ7.docdoc 9dc022a6d94a428fb2f095b0ecb4572e6b60e7b59a3ba584a8c4a04cddbf3251Virustotal results 20.31%Heodo
2020-10-29INF_PO_10292020EX.docdoc c56962ccf0f482b04c168639afb894430e7cb71c873faac02d8f3a34107f33a8Virustotal results 20.31%Heodo
2020-10-29Mes_9AVFEY7DYDGK.docdoc ae454b06f63308de7e1a613281feea2eef089041c67af45e72ceec804482b526Virustotal results 20.31%Heodo
2020-10-29BPU_JM1875360642NE.docdoc c3c4c3d1a892c0244bc5d4911ad7533990556a3ed4a4561eaaf58379a82b3295n/aHeodo
2020-10-29Attachment_14522104512821563782.docdoc 38df7a8d7d8ddeec4905b01777148222f208d5030b7a44665b5fdafb5bd9ff19n/aHeodo
2020-10-29Rep_QD5123245705VQ.docdoc 72e4ad0a1b83a8af4bffff0b32b6f8b9fe9680a323457b9ae5b866c9cf789ca1Virustotal results 41.27%Heodo
2020-10-29arc_PO_10292020EX.docdoc 48f5efeee13fcdbe837223ddd4c1de97dd87be397e6f99bb95ebfd19af5aaf86n/aHeodo
2020-10-29Mes_QGK_100120_RGC_102920.docdoc 4d660fe18f8a7a46884d491d3bc3632eb0d0de321fe085339324e55175c33ff9n/aHeodo