URLhaus Database

You are currently viewing the URLhaus database entry for https://kenh18.vn/wp-admin/SlwJpYYx9xvLn7UBUvadq4YcSpIijxbE8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:769963
URL: https://kenh18.vn/wp-admin/SlwJpYYx9xvLn7UBUvadq4YcSpIijxbE8/
URL Status:Offline
Host: kenh18.vn
Date added:2020-10-30 15:52:06 UTC
Last online:2020-12-14 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-30 15:54:03 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:1 month, 14 days, 9 hours, 39 minutes Bad (down since 2020-12-14 01:33:17 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-31Attachments_EY6867588077DC.docdoc 858159295a83a85ce85a8e18a4398873eb02dfa32012325f963ab2de57c8c0aan/aHeodo
2020-10-31List_17775827863648729654839.docdoc e75cb7602be15e3a44e77aacc557cb5ebaa487b2be7b8fce7f59a4e2c18e8794Virustotal results 57.81%Heodo
2020-10-31Mes_DSF_100120_NQY_103120.docdoc 369deae0aea3bfa6e8367f494d149dffe4c9a5f821bd8270c06016f0e6923227Virustotal results 52.38%Heodo
2020-10-31Untitled_PO_10312020EX.docdoc cdb79e413c85c2fa4724ac77b430ab5a6a0c770f7f6a640fec00d946a93f5e09Virustotal results 53.12%Heodo
2020-10-31UNTITLED_NG8249857356DH.docdoc 780ffddf2dd1fac9d6fc091c707c84751ea2180a253431c3b4700989bd3fc21cVirustotal results 54.84%Heodo
2020-10-31Doc_5ULW9P7RK9I.docdoc 03b477c67a30f1cc63aa897f954709c42c74cc2907d8639805398a4615cad1b6Virustotal results 52.38%Heodo
2020-10-31inf_UNY_100120_GZI_103120.docdoc 289f8b4babc8f697bcbc3125ded9cfddefa96b986243538034beda8361d69a26Virustotal results 26.23%Heodo
2020-10-31DOC_780350051246.docdoc 6b199ce53786e4647258111798d4a9f14df4220415ed15639338c5860d98695aVirustotal results 53.12%Heodo
2020-10-31FILE_KZW_100120_MCK_103120.docdoc b104e5360f8f17268449e97ba36749b921cf7cdd797fdb8a28ffe20d8d9c59e4Virustotal results 54.69%Heodo
2020-10-31list_17243223.docdoc 39991605b314bb39a573ea29a1b1cd2904615afe76292c0f3b6afac181a0d6d0Virustotal results 54.69%Heodo
2020-10-31Dat_VPG_100120_ZJE_103120.docdoc d0173484a8073ed5336acc965770f3875b704785bf08f59a929f20c65512e1fbVirustotal results 54.69%Heodo
2020-10-31LIST_UNF_100120_PFV_103120.docdoc e054d39b0aac7c2b6c6b76bc40435c1d0ffca154764349deefbc46f9d6ba453bVirustotal results 50.00%Heodo
2020-10-31inf_58TIJHSKTC5H6.docdoc 60e4646ea5fbe72e1daf6f3d015b37205898569b303dcfc791e0d02a754c9bf1Virustotal results 53.97%Heodo
2020-10-31rep_93053879.docdoc 9210f9032280641d080e5abde6a49a3032839cec91f757f2469a4eeeb4080afcVirustotal results 54.69%Heodo
2020-10-31file_PO_10312020EX.docdoc e5cd96964e28663db382662eddfbd4bcd53693acaa9f14bf3c7382c61a16aff5Virustotal results 26.23%Heodo
2020-10-30file_PO_10312020EX.docdoc 84f8bd87a1f8207da3a4722b9eee322be498919fed6323fe33c0ce60ef7aadcfVirustotal results 53.97%Heodo
2020-10-30dat_1RV56PGAGH9.docdoc 14a8572928770f8d61fa05890c3e0a5cd4396bfde2ce2763d533e89d05120d34Virustotal results 25.00%Heodo
2020-10-30file_34817083.docdoc 49931e499615a1dc36cda98151d3c406413f1c47504b38f2bb658631313c273fVirustotal results 54.69%Heodo
2020-10-30Rep_PO_10312020EX.docdoc 5041a2eae4b04f23df9804031b3a30e815e0c2310bf42d82176cb89618617933Virustotal results 55.56%Heodo
2020-10-30mes_KY7923936148ZI.docdoc 4a1ebe8938ac9ac6ae7b502c4561bf514bc47ccdb87abae9777a5ac526d6540cVirustotal results 54.69%Heodo
2020-10-30ARC_PO_10312020EX.docdoc d577446435b94d0af2a829f1160b594e95c8051f6b069400ff61fa38d151ba54Virustotal results 51.56%Heodo
2020-10-30rep_PO_10312020EX.docdoc e37545649e9e7c9250af64a93a2fa3e37fd90ab7f9c16e96b4469290f309b52bVirustotal results 23.81%Heodo
2020-10-30list_KBJ_100120_XLQ_103120.docdoc 4f6d5190871bdf4ebad7eb4520c7a651e3a2f4d8def1ca783c0efb807bdc7ec3Virustotal results 23.44%Heodo
2020-10-30List_CY3500982220UK.docdoc 75ca20340c21dbd94ba3ec4c8eeb14f3a78e68a955701cbdc754c29163674a3aVirustotal results 33.87%Heodo
2020-10-30Untitled_PO_10302020EX.docdoc 6263b8ea9431ac48bf402098737c84a9cf49c01488319875132ef15ef7d5c6e7Virustotal results 34.38%Heodo
2020-10-30B_VFU_100120_CKZ_103020.docdoc 6270902fc810af901f9685bb0b3251f8cf96445514e9bd288b51d51156701665Virustotal results 25.40%Heodo
2020-10-30LB_201301899119496354171.docdoc 5fc665986d6e0e5763554e4d9f9db9ccc61b2c20fc408e955d286a458f622f48Virustotal results 47.62%Heodo
2020-10-30Untitled_69110417459376445142.docdoc b0f3557b0ac948f3137f3cc926504dbe28038ea00d282c81a33fd46b93af1c25n/aHeodo
2020-10-30arc_PZTEDAFC5EVRGO7.docdoc 023fdae311195c64889d2c87831a470d7c4826a755cd385729dc6bb02281c4e5n/aHeodo
2020-10-30arc_MUQ_100120_VHQ_103020.docdoc b18e3759dd3b354e50e0db8720941a9a8d9d8e74237cee5ee82b1e1abd8f5d8eVirustotal results 42.19%Heodo
2020-10-30MES_OJW_100120_XRL_103020.docdoc 4e1fa1070d35befd506b61e5fcd7757c603c2289e9c09d657c6378bdfa6b8583n/aHeodo
2020-10-30ARC_PO_10302020EX.docdoc 12b4329a9b823283ea081ce2769d7115a1f1922106019611973ea41b4dae5fbdVirustotal results 42.19%Heodo
2020-10-30UNTITLED_04015601.docdoc 4eea09772ca2174c6dee225349ae15f55b9e8a91ac3aed6f961a4815ea86f462n/aHeodo
2020-10-30REP_53755686.docdoc 005b9b3299e128a79fe21a998375eccf999a16aeee899a934ee2cdf578137d13n/aHeodo
2020-10-30MES_OK6SRR4BOX.docdoc ee781329e536d1270bc3e7ad2496b545535f3ceba3db2743fa213b6405d011a7Virustotal results 43.55%Heodo
2020-10-30file_88396541.docdoc a3c09116b3564a812d894ab750990565e22b18b97a47c138b3b271f1e7e5f666n/aHeodo