URLhaus Database

You are currently viewing the URLhaus database entry for http://sangtaotech.vn/US/Transactions-details/12_18/ which is or has been used to serve malware. Please consider that URLhaus does not differentiate between websites thats have been compromised by hackers and such that has been setup by hackers for serving malware.

Database Entry


ID:90921
URL:http://sangtaotech.vn/US/Transactions-details/12_18/
URL Status:Offline
Host:sangtaotech.vn
Date added:2018-12-07 03:35:10 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Abused domain (malware)
SURBL:Blacklisted
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2018-12-07 03:36:03 UTC to abuse{at}digitalocean[dot]com)
Takedown time:2 days, 9 hours, 59 minutes Poor
Tags:doc emotet epoch1 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-12-08doc-2613187265.docdoc688770a69b2985abf2ab475f0b7f855918d9270b8f5324686762a476d1eb4c85Virustotal results 18 / 61 (29.51)Heodo
2018-12-08doc-5586025224.docdoc2a22be1295c6cfacf3fc52cb1dbb4c5ef26f83784eb9ff1ae2009ebea1359b68n/aHeodo
2018-12-08file-8865230597965307.docdoc3b787cdd9467d46141792d313de5ac4a3bd8d082bb17759399d54675d42ef42cVirustotal results 20 / 60 (33.33)Heodo
2018-12-08DOC-10712432223.docdoccefebc8f2b70693fa4826272e750c817720c33f9df9ba0af600aad8bda8cc25aVirustotal results 18 / 60 (30.00)Heodo
2018-12-08doc-6901309489.docdoc6b9b7e68ba6730d54c569cfaa439d2fdd20bef04b78c40a6f816a56cae2592beVirustotal results 20 / 60 (33.33)Heodo
2018-12-07doc-61519048829.docdoc30a7f4ae5734ac6e1f6ebddaa747745a02bf2b7d00d5bb584e9e88fc5875f318Virustotal results 20 / 60 (33.33)
2018-12-07file-693038454338.docdoc780a5038941f0d742863951025b8861a2990265615e42834c535fe741aae92ceVirustotal results 20 / 59 (33.90)Heodo
2018-12-07doc-272810269576.docdoc9bcb3f6a10269c4fc9f901748f7da0c280c57894e76343be67bb415d27938fedVirustotal results 18 / 60 (30.00)Heodo
2018-12-07doc-8503561008235327.docdoc29b2c81e773e1b14adeb17c16f93cfae6fe0af2b3fbd886868d87a57e20800cfVirustotal results 19 / 59 (32.20)Heodo
2018-12-07eForm-01132586726132.docdoc82c231d33d09314e8376bdf6cce2b82d62d92f8a9fce760e98bfae4dca2a9d9fVirustotal results 18 / 60 (30.00)
2018-12-07doc-48504680077621.docdoc06931ceab2aab4aa08c6fe91b3c59a63c51931bf32eef022aebfd78ad3f2a629Virustotal results 18 / 60 (30.00)Heodo
2018-12-07eForm-2503644189437.docdoc5f8ff1ef51141c4819d24f5aebefc11dd654eff470bf7dd2bf68f5d7e213961eVirustotal results 18 / 61 (29.51)
2018-12-07FILE-8493690917336.docdoc88f7c08e711bb92426806d665995e2d373ffc4af92aa6e0e141fee27b0dad0efVirustotal results 18 / 59 (30.51)
2018-12-07Untitled-2443876207383.docdocd70f0c25d91b778e5991c3947b89823a372efaf67cf6336c2a44fd479b9105a2Virustotal results 18 / 60 (30.00)
2018-12-07form-6228354449367.docdoc3dcaedfcb382a18661cdd38fcd2acb02d9b58b3f069aaccd06dfefe331ad0d04n/aHeodo
2018-12-07doc-12600543352.docdoc63b4b91e9cc294cc6ab6f1c95d8f8989dfaed22eff2791a5c84fb54d7c379346Virustotal results 19 / 59 (32.20)
2018-12-07DOC-2906940946474162.docdocee31da561fda319dda8e6f278befe3d6c063dc64dd93fe0e083378d5571ddabcVirustotal results 17 / 58 (29.31)
2018-12-07doc-262242117736.docdocfa056d23707f85751c275afe45805c5ecc53a7268da0911f788e9c31021bc05dVirustotal results 16 / 59 (27.12)Heodo
2018-12-07FORM-1645466886283.docdoc280b03be699024017d9aea4798286ebea9402ae6e1abcb90c675438efb47157aVirustotal results 16 / 58 (27.59)Heodo
2018-12-07doc-6558273813140660.docdoce5e89ba0563ef81e70411d184508b12670dc78b2d1187b77e697a5627e0a5434Virustotal results 16 / 58 (27.59)
2018-12-07eFILE-170200351356131.docdoc07c7a2b43e547f2f88af7bc32501f029d657aa8cb98d501a6419cdb7dee9d473Virustotal results 16 / 59 (27.12)
2018-12-07DOC-436198010498.docdocc2a4afb1ead07a63db90cdcbd05b6d14e9df3892b97994016deb5b4755a151afVirustotal results 16 / 61 (26.23)
2018-12-07form-8746416237.docdoc3c0e083f257ae49ebcdfb1ebebedd038b8cdc98bfc019002a2050e70764dd191Virustotal results 16 / 59 (27.12)
2018-12-07doc-926283463308.docdoc259ca4d02c038286a4ce84449a6d959d495423dd5e49762b5066df9b73ee3136n/a
2018-12-07file-13598640579.docdoc3c0c5bc1f9a86f3193182f7857ea7d71aa1540963ea93ac36028317ce30f0ee2Virustotal results 16 / 60 (26.67)Heodo
2018-12-07form-4685471736746.docdoc0f3cf74627d46291c341380cc4f9ec69fd08dea1b3b318fc5732d792e338a3acn/aHeodo
2018-12-07FILE-0778593940278.docdoc67019f477f684a6a1169fa2bee1ca4fbc81bf74da982b1262861c0be73ce0c80Virustotal results 18 / 60 (30.00)
2018-12-07FORM-9244295709293.docdoca22e3bbc4d8d74fc3ffc90f28bf1830c9ae6bdb3bd931332a92190a0847d2e33Virustotal results 18 / 59 (30.51)
2018-12-07Untitled-2748772907447.docdoc2f3c0251d9c980c8439b488e529b0450c5ef5526442ba3fb332258ac9132858bVirustotal results 18 / 59 (30.51)
2018-12-07file-3638380396.docdoc33438668cbb979f93fe65494b5fca84d56eac8c49ecbec364d9d27e2751b6b84Virustotal results 16 / 60 (26.67)Heodo
2018-12-07FORM-3167604010399.docdocad3fb6138eecb6720b870f9f83cb239d5cdfa292a4cbbd459ae54c12da9282efVirustotal results 15 / 60 (25.00)
2018-12-07eFILE-53844277982129.docdoc5fb518fa8ae74ca7e70018d0f0b209a13074c64620b06b3779056bf873cd2faeVirustotal results 15 / 60 (25.00)Heodo
2018-12-07Untitled-0141972397228628.docdoc91b43ccdca4d7fc841c291b1919b56f6c7183c3e2f02b8a2d68995b1b85878f2Virustotal results 14 / 58 (24.14)Heodo
2018-12-07file-1392333513.docdoc7af520baeb7ab2431a9f87ec30ecccf65339a6a257f38c37d99b4a2e718f72b6Virustotal results 14 / 59 (23.73)
2018-12-07form-9419884735.docdoce8da3a2455ab14a9ba664f2bba4189d6ddbe20eaaa832375bb4fb6d7ff39f1f2Virustotal results 14 / 58 (24.14)Heodo
2018-12-07eForm-90213698292.docdoce5ffc538f0d107bed7d7876ca9d9afd66846a122a7edc6c0f5fa880171a9e255Virustotal results 25 / 61 (40.98)Heodo
2018-12-07FILE-1564962599605700.docdocef20366effcd55f342dda0a1af98f8e77db174c05bb031a4945d45b5fe869082Virustotal results 25 / 59 (42.37)Heodo