URLhaus Database

You are currently viewing the URLhaus database entry for https://giaoduc.giaodien.vn/cubase-10-abg6t/wUIk/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:936468
URL: https://giaoduc.giaodien.vn/cubase-10-abg6t/wUIk/
URL Status:Offline
Host: giaoduc.giaodien.vn
Date added:2020-12-21 22:30:09 UTC
Last online:2020-12-22 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-21 22:32:02 UTC to abuse{at}choopa[dot]com)
Takedown time:4 hours, 33 minutes Good (down since 2020-12-22 03:05:39 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-22GZGJFP2AP0E.docdoc 173291cf73cc4f82f9a217cbdcc192f4e0b7557e7068133ce2231a023a47ad28Virustotal results 47.54%Heodo
2020-12-22KPHIF6Y9M.docdoc 6c26774c4763bbbc05c970dbe0b96045fefbdffc80c2d7878e8ca8089f0215c9n/aHeodo
2020-12-22V12N9ZYDEG.docdoc 200414fe067c46610fc5739841fdbd2c50b2c19b65693fffa9e8999c094b45feVirustotal results 47.54% Heodo
2020-12-22VQQLJ7CBT6SL8E.docdoc 0c2c97f9c94b970cc23cc8f11be9fcbaf1630395d13060ca289eb0d9284b4a7dn/aHeodo
2020-12-22WWMZ1KOJ1WKLDT.docdoc 97f5f7f2c37a21e2f3934ceabe0df7eea42d7925f1b3a4e9a194fa005509dcc3Virustotal results 37.10%Heodo
2020-12-22A2GXUD878N.docdoc 030e36a413762e2f8af5fc02794b19feee62548caa2c30a024baac536b1706ccVirustotal results 46.77%Heodo
2020-12-22GYNFG5.docdoc ce6fb78ce0ce59ac239eebb55984e0497f6f9616a5a4ab3fe28b63e8456f3e8aVirustotal results 45.16%Heodo
2020-12-22C84FR4A6.docdoc 36e30272eaee03a311d4a319756851478a523b1f106e67cde2cef69490fe3dc0n/aHeodo
2020-12-229R1UQTFVRHF.docdoc 8d2ae082e8f889f77d8baf7d2ec4f555cde4362a0faa1b4a95d804d429bfc812Virustotal results 44.26%Heodo
2020-12-21J03WVV.docdoc 83e9ba22a2d674453b12f9150d400d11d35d268d6965b4082c08f070fadfa169Virustotal results 40.32%Heodo
2020-12-21DZZ8Y3Z2CAVB.docdoc 6a7525a409509ac4ff33649e2dab4cc9580795c516cf135dc3a0b5fb5ad0003cVirustotal results 39.34%Heodo
2020-12-21JVLQAOJ.docdoc 798206f85b1ad48e7117fee89bc496a003d67f0b2079a39f3d80d975e8f20c78Virustotal results 38.10%Heodo
2020-12-21GNJQE8.docdoc aefe4fff4d754c7faf5c1ba8e33586ac4732827c66e5621c0fe5a711895657c2Virustotal results 38.10%Heodo
2020-12-21GQ99BGBMZCD.docdoc 199329cd5b35fa9650fa7ddb3597cc3c1c1e88242b94558bda89b7aa7bd6c463Virustotal results 37.10%Heodo