URLhaus Database

You are currently viewing the URLhaus database entry for https://www.yiminyi.cn/wp-admin/attachments/6JX3ZDuUjE/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:764737
URL: https://www.yiminyi.cn/wp-admin/attachments/6JX3ZDuUjE/
URL Status:Offline
Host: www.yiminyi.cn
Date added:2020-10-29 10:26:08 UTC
Last online:2020-11-11 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 10:28:04 UTC to abuse{at}alibaba-inc[dot]com,intl-abuse{at}list[dot]alibaba-inc[dot]com)
Takedown time:13 days, 6 hours, 1 minutes Bad (down since 2020-11-11 16:29:42 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29arc_2020_10_29_W38808.docdoc 35cfc30ee33e7eb03d137ab3213c99f84c77f31a53101a9f5cb34fd913444d8eVirustotal results 20.00%Heodo
2020-10-29inf-20201029-6410.docdoc f9ced4f3230da05ce91d86336fbf75e2da5b320150500353b62b56d125fd288cn/aHeodo
2020-10-29REP.docdoc 7aaa9a98edfbcbe126159992ba06f8c91ec5560f77e2d0052dd18df4f5bf843eVirustotal results 22.58%Heodo
2020-10-29MES_20201029_442.docdoc bd3531875b303e0395178fb8d3aa3dedabada2cb53d5b937c2d75d18aebd1ccdn/aHeodo
2020-10-29REP_20201029_1204347.docdoc acf8f0958861f638caf265028426240804d2c3d90bfd008fad6a1b5a937f42a1Virustotal results 19.05%Heodo
2020-10-29Arc TC9412.docdoc ae11cb14c574b599cf9006bd364cd0544036a5ea776806b84dc516b4ed137585Virustotal results 18.75%Heodo
2020-10-29arc_2020_10_29_SRD141.docdoc 5c4dce3ebe2abed407cd3b5cf57bb8860cc3e9dc2b42780c8750687b1aba7e86n/aHeodo
2020-10-29File 20201029 55020.docdoc 1250c390254f56013a7b996d95e6e733c02178576d569785dc59f3109b071352Virustotal results 17.46%Heodo
2020-10-29FILE I422317.docdoc 5fbeebaabbba9adbd457f770050570e8282b9a94006a2d2368d4e8d5a0b4425cn/aHeodo
2020-10-29REP_2020_10_29_135.docdoc b8e7804751e0a41c0eefbb3bc561816ea87c9e9438e544f0c1702e4315d8d5c4n/aHeodo