URLhaus Database

You are currently viewing the URLhaus database entry for http://jiyuviyuitservices.com/cgi-bin/tKQr8mdljTPlGovGZmznRgj0yBtadA3JnLtYMrChiasRdvNNZo/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:766773
URL: http://jiyuviyuitservices.com/cgi-bin/tKQr8mdljTPlGovGZmznRgj0yBtadA3JnLtYMrChiasRdvNNZo/
URL Status:Offline
Host: jiyuviyuitservices.com
Date added:2020-10-29 20:34:04 UTC
Last online:2020-10-31 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 20:36:20 UTC to abuse{at}ovh[dot]net)
Takedown time:1 day, 17 hours, 25 minutes Poor (down since 2020-10-31 14:02:13 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31MES_69157725330181740900.docdoc 07cac58fbfac34bd4e22b0dab98273a45a147dac7d38266ec0749fb5fd85b98dVirustotal results 23.08%Heodo
2020-10-30File_QS6219000908PG.docdoc 22a4eae8735782a3f12e3f7ee5b6d0839cd7c4a8b91dce6ce27e2414b2e5f817n/aHeodo
2020-10-30DAT_857803322040220.docdoc 78bd1c6e03aab90ba0350183bb9aba52148938c5c4384fb2695473c6540e139an/aHeodo
2020-10-30inf_PZX_100120_OZL_103020.docdoc fee7c3d92d847b227a0310837bdd5bd774db43c7793d9e83c31405a79a35b9cbn/aHeodo
2020-10-30Inf_UGP_100120_UDN_103020.docdoc 894961b5cd902ae1bd280ad4d906f510e47f2d02fba5fc278823a37eabedcc7fn/aHeodo
2020-10-30MES_85975133.docdoc f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948Virustotal results 41.27%Heodo
2020-10-30FILE_47904181.docdoc 9ae7942321b9360d2c19a2199e6f2e21a3436b97787133280c3d267a00bd6b6fn/aHeodo
2020-10-30doc_PO_10302020EX.docdoc 81f0a17e652679d94849f61bfd6679f35308909ce08fcbcfdfbf2d6c59d62ae0Virustotal results 40.98%Heodo
2020-10-30MES_0613704545168752835.docdoc d81b2611e96c81a6be50bbbfbdc04309f10b987317f1bdbae24d2e90a216df11Virustotal results 41.94%Heodo
2020-10-30doc_PG0239761062HE.docdoc 3416748dde8336e8081847df55d2ef61d1081a8bd9d76faa5922683231da8c94Virustotal results 40.98%Heodo
2020-10-30UNTITLED_59114607.docdoc 6b88f01b98b04205fdeaca9ab7f387ea479efbb68e1e0a940c909d66e6ed092bn/aHeodo
2020-10-30doc_0306566284646.docdoc aa8406666061a35462984a7c54b1a10151ec769f30040dc02931bb87fa2f1335Virustotal results 31.25%Heodo
2020-10-30UNTITLED_SAX_100120_GSN_103020.docdoc 9ec6dfabb77a693a4f8dc14949b501ff62b76b6f77f3078b900c7add3a5dd590n/aHeodo
2020-10-30Dat_PA7488859824DD.docdoc d938809af2f315ccb3059ebdb60f135d1a78267221ebe954f6ece48ad1c4851an/aHeodo
2020-10-30Doc_23970924515056908888.docdoc fa59cf4c1af3d49c804914946132b59157e3d2f1eaf2d2d11a2ac0d5f2f3f2a9Virustotal results 39.06%Heodo
2020-10-30doc_PO_10302020EX.docdoc e4c4aa874feb371209199ddd6b159ed4a677b94568dfe6b09351807263dbef9bVirustotal results 29.69%Heodo
2020-10-30Rep_WCO_100120_IOL_103020.docdoc 635a74416fba185c2d901ad6c437ddc2258d061fb43e420653cb07f071e62075Virustotal results 35.94%Heodo
2020-10-30mes_QA8151986038DX.docdoc a51d194ff7cccab7defe2f64127934a4ff3699de37c60019b40dd62d631baf04n/aHeodo
2020-10-309WDHZI9BUAA7538M.docdoc 2fe61550011a52e12cb324aa8cd06faeece3d1f05ae42f1c51bb7e055a647877Virustotal results 30.16%Heodo
2020-10-30FILE_75052296026877086217.docdoc 7ae6e150fde20638c5cc89c0b4c088593eb3879f0f6567e9c4cc14069b9ae204Virustotal results 29.51%Heodo
2020-10-30LIST_40810290.docdoc b33622a59cee3ca443a74701f86f58ee524e9901c05d359270575f52d7d37380n/aHeodo
2020-10-30mes_KXELBOU54X3TUB.docdoc b3f4e1b87633e71363d9e97c4f845e09d36e833b8d170f184946c8764cfc8f12n/aHeodo
2020-10-30EGSXX8AK.docdoc 8774a4e21e5c187c5b68d43c4789009a3eca07aa1193d674b5589938ea46f663n/aHeodo
2020-10-29Inf_15098741.docdoc 5eb2cd7fd89bc000cab80454ba0da8cb954a960d3b415bc26039832a7f6f7544Virustotal results 25.81%Heodo
2020-10-29D_04424151.docdoc f69a365c0b551ac35010e98b64364feedecc32dae4284fb4afe62ced4b5d17ebn/aHeodo
2020-10-29UNTITLED_0597579365.docdoc fafa3f90775c5c6e8670f2ac2f7602e60d30f1f8ad279f220686e2eac91c25d5Virustotal results 27.87%Heodo
2020-10-29LIST_PO_10302020EX.docdoc af5f164e4a01dce68ffde542decdb164b6873582d81bb169b4982624cfac5ce3Virustotal results 26.56%Heodo
2020-10-29LIST_QIN_100120_TQM_103020.docdoc 168c46a9b7c3c72ceb572a447f6317e5b66aca4735ea8e096bc92f0d03628879Virustotal results 34.92%Heodo
2020-10-29dat_ME1404325805KY.docdoc d28ab268249104b8e40b88f99670cb44f0cc8c440b22b983193c4e6fa4e0ea95Virustotal results 26.56%Heodo
2020-10-29mes_679549569213284894.docdoc eb4e38eca100cc2ec56b63dcb64261e5267212ee4d3009b7a9bce98cd60bb50cVirustotal results 34.38%Heodo
2020-10-29arc_UIC_100120_GMX_102920.docdoc c864f510cfcaca5ca5acb2a8ef66706e173195d47f0bc0956f1757e9f74325d1Virustotal results 32.26%Heodo