URLhaus Database

You are currently viewing the URLhaus database entry for http://congtyherbalife.com/wp-admin/images/EN/CyberMonday which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:85245
URL:http://congtyherbalife.com/wp-admin/images/EN/CyberMonday
URL Status:Offline
Host:congtyherbalife.com
Date added:2018-11-26 16:31:12 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2018-11-26 16:32:01 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:2 days, 20 hours, 16 minutes Poor
Tags:emotet epoch1 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-11-28cyber_monday_coupon.docdoc2b0a63c91508bb789bd77a9cbe39216adf916497b983e9557ac4f0c246c30461Virustotal results 15 / 58 (25.86)Heodo
2018-11-28CM_COUPON.docdoc3c8fee2861c81163b8fd984b9203aad1e6b46806e0be35383a8ae5c5422a2409Virustotal results 14 / 58 (24.14)Heodo
2018-11-28cm_coupon.docdocdad095906ae65bdc696283ea43dfceaa55a034f59ba351360777b509e572ccbdVirustotal results 14 / 59 (23.73)Heodo
2018-11-28cm_coupon.docdoc2e42e3e2a10d2946f440d8e1cea4b814b627dd649128d87825f2f7a59c12b833Virustotal results 14 / 58 (24.14)Heodo
2018-11-28cm_coupon_file_60331.docdoc912b2935a76ce2a52d461d87b93e20ba77ed5b6a15742e063b1f359442831951Virustotal results 14 / 60 (23.33)Heodo
2018-11-28cm_coupon_68997.docdoc4b6bb70862b8b576eabc9b0c2074e0fcd3993fd7910875a21d3bb1f05c677aa8n/aHeodo
2018-11-28cm_coupon.docdoc641b3827cc57b54413cc2cea42f48144a4baf5d4a68d5c7dff07280528b7c014n/aHeodo
2018-11-28cyber_monday_coupon_file_8647.docdoce8f48d2527f3dd6acef3a98fb1caf5b3146170a45677cfed21fd2d8431f57b09n/aHeodo
2018-11-28cm_coupon_58961.docdoc0da44be038d0321cf029dc1498af4b7c45ec709134ea83646f82c36b599febd1Virustotal results 22 / 60 (36.67)Heodo
2018-11-28cm_coupon.docdoc74cab6e5378c3f19642bbc98a382c27f0c9696ff2ed70e9b64ddf0acdc2e48e9n/aHeodo
2018-11-28cm_coupon_63776.docdoc0cbacc766bd3e23b359ba2195e7af8b60a35c75067eb81bb35a59da2ffda7c49n/aHeodo
2018-11-27CM_COUPON_FILE_69186.docdoc29500fa224729900fdb264a63148b6b2a6723bebd3f333a38e60848df342815bn/aHeodo
2018-11-27cyber_monday_coupon_file_16499.docdoc3273e36283f53d159a20ce1c0cb67733fb976fdf8fe1953130817c4fa9aa4323Virustotal results 13 / 59 (22.03)Heodo
2018-11-27cyber_monday_coupon.docdocac816d07c14a4975a79ae55877f233772b94b4038fafafcc422bce5edb2a1f87Virustotal results 13 / 58 (22.41)Heodo
2018-11-27cm2018_coupon_file.docdocaf9abcab7f3b61d69186253db56c658fdec135d7b37a7cd7d0b4715b991158f0Virustotal results 14 / 60 (23.33)Heodo
2018-11-27cm_coupon_45455.docdocc400daa426b8a4de575e1917faeb59143908e739591a17c5ad4b73124fca918fVirustotal results 13 / 59 (22.03)Heodo
2018-11-27CM_COUPON_60870.docdocdcfaf56d1973d683b60b002626e4831c76852fb72316ad5fd9dd6f966ba5f7b9Virustotal results 13 / 59 (22.03)Heodo
2018-11-27cm_coupon_82392.docdoce18247caed44ec7fd8c298387caf16d3f253c11e3163d0d7d46920d85e5cd949n/aHeodo
2018-11-27CM_COUPON_49804.docdoc8484bbd101fb2025904dae575cdc636d4a44958bf1526eee80ee86edcb86ffa6Virustotal results 16 / 60 (26.67)Heodo
2018-11-27CM_COUPON_29963.docdoc3186dc2f65bafee9420752229e7449a30114b3da7a98c7c92f2169c62d11b112n/aHeodo
2018-11-27CM_COUPON_FILE_2401.docdocf4aa05a0dd91fd7c481f3d68643970e4e3f97150c212260caf26471641a038c4Virustotal results 24 / 59 (40.68)Heodo
2018-11-27CM_COUPON_FILE_34021.docdoc67408a9f0bbc9b6958bc45e113642bd82b718afc61dfad50d39cf9e09db8ca85n/aHeodo
2018-11-26CM_COUPON.docdoc13d326b36b1abde4400ccf7512333625139a4908ad180399290b18f928a62540Virustotal results 22 / 60 (36.67)Heodo
2018-11-26CM_COUPON_FILE_7171.docdoc677cb9576c6e6e5b286ae5727a7afdd7518a79530eb44c9f757a1771545e7f3bVirustotal results 21 / 60 (35.00)Heodo
2018-11-26cm2018_coupon_file_6074.docdoc61270d45f26f526979f912ca51ec5fdc09f68e7d50a413ace244be2ceda54c64Virustotal results 15 / 57 (26.32)Heodo
2018-11-26cm_coupon_2087.docdoc923f2426912f7da11dca948e3f8aac9c6f5b220acde9bd85a714eb7b4a6959a8Virustotal results 15 / 60 (25.00)Heodo