URLhaus Database

You are currently viewing the URLhaus database entry for https://zzznan.com/wp-admin/NL9wu1TisXOy1RVpkCyGfvtoQe8r2Grvon8eggV0MNTeI7RUUBIi5ntluBkrAF/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:935859
URL: https://zzznan.com/wp-admin/NL9wu1TisXOy1RVpkCyGfvtoQe8r2Grvon8eggV0MNTeI7RUUBIi5ntluBkrAF/
URL Status:Offline
Host: zzznan.com
Date added:2020-12-21 17:13:10 UTC
Last online:2021-01-04 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-21 17:14:07 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:13 days, 14 hours, 29 minutes Bad (down since 2021-01-04 07:43:12 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-23S3RV9570XV.docdoc 6a99fa281763f28746b1f915866c7f2897b69d09801f3b0ac0a61517f17d90e7Virustotal results 27.87%Heodo
2020-12-23IF4KXRSFZKPRJ.docdoc 63725aa4926dac422d6710c815b80ad10e66b882656195a75ef13b9816cf7c53Virustotal results 26.98%Heodo
2020-12-237O3ULY.docdoc 9bba6813a6a0d038afc8a8bf8cd4e5beb879a954b0789d4d4e02cbd54d5c3795Virustotal results 25.81%Heodo
2020-12-23EXEKNKRT0P.docdoc 8f1c045c52f380a3dee934291859c8a03f17ef3f96084c3819678fe14f22c0c1n/aHeodo
2020-12-23QB654JVQNLFVKB.docdoc 8538d00638c32a97eac2e8a9e1766a39268d8effa55c28026d3b75fe114dbc18Virustotal results 23.81%Heodo
2020-12-23ON4E2RB.docdoc afca4fb94300e4d7cd65cf15d802e9a4e1e6fe20051f8c2428b3a821bb3c8cbeVirustotal results 22.22%Heodo
2020-12-23TO3RY6JU4AY.docdoc 15231bea81bede2d3149669c6501c6a8ee8338cdd374c53eb34c9737249b040fVirustotal results 22.58%Heodo
2020-12-23XXH940UVTT.docdoc 1b7862cdd7e11129f0b2efba625efa4a4298cc9610881f0e2ecfef4299a10afaVirustotal results 22.22%Heodo
2020-12-23JXL1IHP.docdoc 241c359520f4cef1af1de9d4789bf620f8086c7feb5aa2deba772b87aef3d514Virustotal results 22.22%Heodo
2020-12-23YJ3SVFTEJXMKKKUC.docdoc 318cf158cf886f17e7e947feaaf989f25e514c91bec35e9dcca2a4f2ef4baa95Virustotal results 22.22%Heodo
2020-12-23FIQ5D5V.docdoc ebfadd85753d033e248aedd9f9c5772331aff8dc35049d0842e8c423d64ea08cVirustotal results 20.97%Heodo
2020-12-235LW8P8UHYSQ5JX.docdoc f0a4ee510f94aaef257225740c62c4a65b2da3ced23ca6b1513b9fbe11fd3cd8Virustotal results 20.97%Heodo
2020-12-23PID960P9K.docdoc 56355a08b488d103b9a4d6226e1cf2cac8bfdc7381febb47feec6b0eff3ac332Virustotal results 41.27%Heodo
2020-12-2365O5Z5X2A7M24PZH.docdoc b534c439ac7a89c6af82331ebd70e5b5ce5e13a2e871bb7ab122b00004605e97Virustotal results 37.70%Heodo
2020-12-23UN7PUFKV5.docdoc e1624ae5f5ab385ff8468ca483e628d08be7ee14d23f030d3682a3f97d360c5cVirustotal results 38.10%Heodo
2020-12-23MIBP0PT8RKHWI88.docdoc 2cb1d46e5ca1af22841c4a613b16ee60be1c474065ae89053cc02c6d3740101bVirustotal results 32.26%Heodo
2020-12-23N1N8BWLHEQKFHZ.docdoc 0351492c5d95a607178dc17826f59c46ee6ed33afaec7f54ad50d4e3935112cbVirustotal results 28.57%Heodo
2020-12-23QT2GGFZXLM5R.docdoc 810ffc95c449b426c6bfc03c98c5e10cfbecbfff7858f10cd9c1c5ec29e2216eVirustotal results 30.16%Heodo
2020-12-23AJOXDKD31ED40Q.docdoc 57f57ee9a02ff9b2983b7b3110a0269f0ac9cf44c8163805edac226aa6a5cc01Virustotal results 30.65%Heodo
2020-12-23XODKQMF.docdoc 6983d0de072547b29fe27502cd474096e7831a387d6980280fd1519c1cd86025Virustotal results 30.65%Heodo
2020-12-236EU8DUJ9IXUR5H4L.docdoc 4640454cfd6ef0ed4ed3784c186840f5eae9bb870b37064a6f5ee53f245c325aVirustotal results 30.65%Heodo
2020-12-23D5Z8C8J9M.docdoc 1f0dd0263393040d067ed555d604d764634263e4eb014755feb5d319af9db68dn/aHeodo
2020-12-23A2IYM0I.docdoc 80eec607b84d6c759ebbb5743e91d1ce1581bb83128c11b70467d1dd2e4beff0Virustotal results 27.87%Heodo
2020-12-23LJ7BVPW7WAF69B1N.docdoc 158e3c1a9e0f1942aec57f44ff4569d2a576bad56846a77053f5b4f726c14258Virustotal results 26.98% Heodo
2020-12-23XNV4RZK7TO.docdoc 9a8b914d6bb8ae09a04b32fc897fdb9a9ffc073975b436b031ac837b7eeefb0bVirustotal results 26.98%Heodo
2020-12-234RC9GJF5N0SHEGXW.docdoc c693baac5d3227d362a0fe99ad187c18cde1f45a404c94c881d424023303a744Virustotal results 27.42%Heodo
2020-12-23TKROJZJN.docdoc 9d2ad424f8d1a39e1cf83b8d64131bc94d8b8ecf787b626e1118e348fc967f10Virustotal results 25.40%Heodo
2020-12-23A6IL25KEQFNYE11.docdoc 64e04bddf27b3d535ea895f4dc08267a98a4c401edadc68e3caf7f6f850c4f64Virustotal results 25.40%Heodo
2020-12-22MB6GZ2IO5.docdoc 80565ed0ada236540991976a90ebc0b137d35995ba34993db276fd2808832950Virustotal results 24.07%Heodo
2020-12-221FKYUSM8PXLA.docdoc 893d0822b033e0d5ea0484d9a61ce0354833603684cfb54e8e493f2740641784Virustotal results 22.58%Heodo
2020-12-22ZFHH71AJIFLJ9NS.docdoc bdfab9675a34c6da34487f2c70f297960002e6c3c2a8e6fdc60ae7edbe67101en/aHeodo
2020-12-22C4IUYCUF.docdoc d4f5f3aaeeddc099dd63c275bdb2ae1bfcb6c3232c75e93fa0f670eecb36e518Virustotal results 22.22%Heodo
2020-12-22JOVLMP4H.docdoc f03c5a8d271acc63d9646bb77c30ddbb5fae5ad755449342e6c34b5ca71a6980Virustotal results 20.63%Heodo
2020-12-22X3AV1WEV7T1Z3.docdoc 09539a4c4da9f2859e64cc2653090ed420b3788068156a3dd76a38c60dea7f35Virustotal results 20.97%Heodo
2020-12-22GYV1MYWT.docdoc 44b69ab822ea1d2cea11bde2cbf85cb033e753dcc8b5e30dc49cb042d3310aadVirustotal results 20.63%Heodo
2020-12-226B2YT5T0PX.docdoc 7202951f9a61583025149c17fbbfd11c028ddf3fb0c080886b3022f117c9b0e7Virustotal results 19.05%Heodo
2020-12-22WEPIPXFZOE4T3V57.docdoc e50ca86a89c2be0f4e271feba71c17c73e846bfdfc1f3ebd69d442f098acc0a0Virustotal results 20.00%Heodo
2020-12-22Q7Y23PRM.docdoc b5cabad4213a8d3f738e1ad1145a3130b3f5fe2739bcb8e5aa1f1ac3fa3fcd7cVirustotal results 20.63%Heodo
2020-12-22AG53HUI47JH31A.docdoc a5bdf83f7a7007f23b721bd73c5219830d2685673835bcb9a2af37e47ad2603dVirustotal results 19.35%Heodo
2020-12-22L91L8G5UDHGOW.docdoc e5614cfb775d155e08d37cb94f971696d9f60791a83ac671d7e6929438337933n/aHeodo
2020-12-22EQ8GPWUOE5PT.docdoc fabd2798310f1b90dc1321bffbfa1ee8c41695839459d40fd6e32618d3df7ccbVirustotal results 45.16%Heodo
2020-12-2253MGKL6I86DPNRYB.docdoc 4665b18e5944f23543e9221d4726aac54759376ebfec0ef20574655e71d77076Virustotal results 45.90%Heodo
2020-12-223O9QJCDJPLW0Y5.docdoc 488f8395eba5921015765418ae513c78b43c6d199637c8f1df754431da65cb91Virustotal results 42.86%Heodo
2020-12-22SVFQ4E.docdoc 5b4a0dc192486378dcf0eea12dc55425b6166fb54866abce0b8a339b36d2fa26Virustotal results 42.86%Heodo
2020-12-22G1YX3XFJGFD1.docdoc 14bd83ddc0151fe3a56edd4209b619cd49a7ec1d198bb98d31972295a7b0375aVirustotal results 38.10%Heodo
2020-12-22M77TQG0.docdoc b6f5d596ae94d5a89345ffcca756a1f396c38980ff0403a0991f8f36a38533f5Virustotal results 34.92%Heodo
2020-12-22JZM968LP.docdoc ff2954eadcc20b415743bd17518e46bff0bd81c42bafb57b28eba3bed664b041Virustotal results 35.48%Heodo
2020-12-22TPPMAL09Y.docdoc da6ae027905e668507b86b9b9b4dd2dc2585d7ac3cb4800e01b88c63796e89ecVirustotal results 35.48%Heodo
2020-12-22R30BAJXEKCC.docdoc d1f80b7c07e821a23ed98aea9fea39b3cb0c0e9dd65fee3291a32c01a8086659Virustotal results 36.51%Heodo
2020-12-225QF0PX.docdoc 5d45aae2fb42f515daf99e0df859fe8fb728ded811e109bb5221a8b34bcaaed4Virustotal results 36.51%Heodo
2020-12-22H55BIXGUBMI9.docdoc bcd43a28292c3b23ddb842d173e09e82095f9de58af9eb9feec0035c916e8156Virustotal results 36.51%Heodo
2020-12-226VMTX01.docdoc 7292c516ac9113d592f6b1c71e307b9f68ae9ffd6b43230a57356f3ebdc776e5Virustotal results 34.92%Heodo
2020-12-22IASAZ0ZG.docdoc c36ccb44ed8e4738a008a47a2f239b959c43bccf182812765cb32671cbf943bfVirustotal results 33.33%Heodo
2020-12-22S1DVHQPZQN38Y6.docdoc f632c7ea1c66bf64c0739bf9fed1f3b60fb630f7cc9bcc6bf05dd0ee9bc26cccn/aHeodo
2020-12-22O9JJIYX7DN5.docdoc 9720a3e0e322e5daf89a2d48916ae17a8d58eadcf34fdbddd7955ecf2d7007e8n/aHeodo
2020-12-22P8FQMNV2T5X26MAM.docdoc bafc5c7e5ab808736b9a5cf9e676927645b1c02cf9834bf1feb49eb5c5954d24Virustotal results 32.26%Heodo
2020-12-225DPZWPY71QSD.docdoc 7b84062b282e976585eba365223c01dff9e42cf3351fe5c6e5df65cf22a2932en/aHeodo
2020-12-22AO6ASUN8L2JE9TZ.docdoc 02170586397abeca0120b55a547fd80c877eb800f02d55c6aad2473b369f0a3dVirustotal results 31.75%Heodo
2020-12-22G6KEMPYIL52.docdoc 01b23b3d610f9308bbf2c4e27581457a719ef6a98e8eb217241da2059b6df644Virustotal results 31.75%Heodo
2020-12-22ZINYQFMK9.docdoc 5149cb89cfadd9c7f7be6ff7dcd70eecba452c53d75bd5622bbb334b4ae587dfVirustotal results 32.79%Heodo
2020-12-22YTN9GP3TNABBJJN.docdoc 9601f016a1235d605d270ec6de961991f18f2a75688f9c0b6d2cee36271c2143n/aHeodo
2020-12-229AZ6UV1VBFVP09.docdoc e832702bcd4a1bc593af89baf3e22083205d412a049797b164db2d6177678325Virustotal results 48.28%Heodo
2020-12-222AB89ED.docdoc 330855c6fb6887b109239e67fc7ddf99aa7173ca57731eea0aa95aa901dc099cVirustotal results 47.62%Heodo
2020-12-22II666MH.docdoc 419de57605bb9474687edcff1207a053c0da9c08c58d7ad4671981603cc08743n/aHeodo
2020-12-229ZE0KMD0HQ.docdoc 2e2845f894af1842a98bb01b55cf68757e6c573d1d97c11cf41818de4a70f82bVirustotal results 46.77%Heodo
2020-12-22LSA73YIFDKS8D.docdoc ba2bc32f4daa30fda2e05c5960a6a160167101889384e98690e6abbeff973434Virustotal results 46.03%Heodo
2020-12-22XPJARL8FQU7B8GC.docdoc 6adf12a084ccf2eb6dd19a35742a35f03bcba878416ef83b9c520e17d55ac329Virustotal results 50.00%Heodo
2020-12-22Z2YX0YBP0ELMARFM.docdoc 173291cf73cc4f82f9a217cbdcc192f4e0b7557e7068133ce2231a023a47ad28Virustotal results 47.54%Heodo
2020-12-22QVLZFBUZ5ZAD8.docdoc 6c26774c4763bbbc05c970dbe0b96045fefbdffc80c2d7878e8ca8089f0215c9n/aHeodo
2020-12-22WU6KAY77.docdoc 2e9ec962d345ba4cd081dc1bd3c89f72f8e52fa86cc06152f1cab0ead72042b7Virustotal results 43.55%Heodo
2020-12-223PE6GS1KV7QUV50Q.docdoc 0c2c97f9c94b970cc23cc8f11be9fcbaf1630395d13060ca289eb0d9284b4a7dVirustotal results 50.85%Heodo
2020-12-22RGR62ZYPOHY.docdoc 45defa35954d6268fe26f6ffec131a6de427af2f682079ef11852a33ff1db07dVirustotal results 46.03%Heodo
2020-12-225EEZ3BPF4ME1.docdoc ba1218e38d9223acf507cfc1a458681e54567ca72f03040901578a63ffc0ba06Virustotal results 42.86%Heodo
2020-12-22P2C4BG1WQ31HLM0.docdoc 47d01951e8e4d0425373658359ab6e4e764c29adf9f0a674dc51fc859ee31719Virustotal results 38.10%Heodo
2020-12-221CQSYM.docdoc 4be32fc9457cb3575d9f59665e4d11c4625dd3bff4cc13ff2f25aa739753173bVirustotal results 45.16%Heodo
2020-12-22CVEB4GKXC4PZDDT.docdoc 36e30272eaee03a311d4a319756851478a523b1f106e67cde2cef69490fe3dc0n/aHeodo
2020-12-21KZQW932YATP3S1.docdoc 474bdf90e53ddd00548e4df1cb15832ba181a53459588ce07109ac9d69f7ae4dVirustotal results 39.68%Heodo
2020-12-21WWWPPRG5GZNWTVW.docdoc 1b6b2ecc603828983b205c802ab3f8d0dda28658c0a31afc6aaff4024f2c161bVirustotal results 38.10%Heodo
2020-12-2115WG0Q4BP965.docdoc b0e697eb8ea66997602b281b7a989cdac530defaceadc9fba378fe5f7035bfd8Virustotal results 38.10%Heodo
2020-12-21SAWQUNRQO.docdoc 199329cd5b35fa9650fa7ddb3597cc3c1c1e88242b94558bda89b7aa7bd6c463Virustotal results 37.10%Heodo
2020-12-212HZ7PK0LRNIG.docdoc 38a05045c1e8dd70252d43a09d6aaf12e75e21ee3f9a7153ad1c99101f28d933Virustotal results 38.10%Heodo
2020-12-21VWK8ISGOHELHW.docdoc fa13f739d7daab6441023db9bc57ce4f7a72a4ceb953df2927293d1155187b7bn/aHeodo
2020-12-21KMGRRSSU.docdoc 2719607de7f3a89aa9f7f9d319f4fa0047663655a7787d1dc640dbb0eccf0f0aVirustotal results 38.71%Heodo
2020-12-219AO40YXLIJBA0EEI.docdoc 95a4d2480290315c02470416ede2042f9a39ce8c447cacd3e4fa514460ddb9b8Virustotal results 37.10%Heodo
2020-12-21C079XIJR7S3HGHP4.docdoc a9f0983929e4cd87eda566f59d2b64fda06bddf030ea2d91dd3c244d558bfb7an/aHeodo
2020-12-21V6TY8I.docdoc 54138600d3fb1cdeabb57a8d00b7d8a67f80c43c5b95cfe91b904c0bb1008dben/aHeodo
2020-12-21IZCSDNNTDN1Y5.docdoc 90e1495a2c7344bdf9fb28bad26f421f3a6354df2677d46bc90c664002fd7d84Virustotal results 32.26%Heodo
2020-12-21CR4CZC.docdoc a6aaee1740696f4bc42d2007fddb6e34843804bdea734b6cff3ba82fdbf1245fVirustotal results 31.75%Heodo
2020-12-21ZE1G4BOU6Z.docdoc 9491499f9854851a7f0966b78a7dca7e7c6be55712f14698e2e8c99b68604869Virustotal results 32.26%Heodo
2020-12-210DVRKZ2F.docdoc 54e22af8fbd6868adc09b32bb9cfdfd5ce1160c986e240d098de778e83c49392n/aHeodo
2020-12-21Q86S9S9JX.docdoc 7aa33052cd3c35a7bdc92eea4e0a679460e45b389719af8fc1673ba2ae070fd9Virustotal results 30.65%Heodo
2020-12-21X5E00FE.docdoc f11d9a9bfece263b7dacf9ca88574da61d4eded4e7dbb86ec54938e8ea4d9fe0Virustotal results 25.81%Heodo
2020-12-21C9KQ86363F1ZZ.docdoc 28bce7e35bae6f9a6fc481f6228be51ef61d0e9af380c3301f0020ae42b2553cVirustotal results 25.81%Heodo
2020-12-213P0ITJFM2Y2R.docdoc fcf459586d11a7317af00079ac0b7aebb66474ca03130e11c65da6e11b20a12fVirustotal results 26.98%Heodo