URLhaus Database

You are currently viewing the URLhaus database entry for https://liubaozi.cn/wordpress/zzz5sKmAD9YZno0aPGVl3uOy72T11/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:945655
URL: https://liubaozi.cn/wordpress/zzz5sKmAD9YZno0aPGVl3uOy72T11/
URL Status:Offline
Host: liubaozi.cn
Date added:2020-12-30 15:57:05 UTC
Last online:2021-03-05 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-30 16:10:03 UTC to abuse{at}mail[dot]sthost[dot]top)
Takedown time:2 months, 4 days, 12 hours, 40 minutes Bad (down since 2021-03-05 04:50:55 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-31G8B2FD.docdoc 43af38ecd27585f00463abfee0ca7f492fb36fa862c8d215447d59be27652589Virustotal results 50.00%Heodo
2020-12-31HPB43GU0KZJXZ.docdoc 34ad021f12350af1a03416b20032f108ede23781e7d7d851810e65a97592097bVirustotal results 49.21%Heodo
2020-12-31IX8UAOCYG58RF7.docdoc e43be8ecf4cbc6b3d85f07d75f2e9e4666b38fbe656d5179697bca7246a4d924Virustotal results 49.21%Heodo
2020-12-31SH7CMO6.docdoc 9651a07acbd2f95c8b7d7387cd69c27521ab0254d4b7e47f684dffd6bfc94ddcn/aHeodo
2020-12-313HWTARW.docdoc 2aae32497917afd5a493a921d6bae0556badd6dc783eabf9b3322806281435f9n/aHeodo
2020-12-311YB7ZS79IAQI1C0W.docdoc accd0141dbb5a3924866cfdbbdeca2edfd396cfbb611880588d8cfab0cd986c3Virustotal results 49.21%Heodo
2020-12-31JEN1M9.docdoc f13634d2bd3bc1469174a0cb871c0d10bcd89c1431232838e1251c25ce568a0aVirustotal results 48.33%Heodo
2020-12-31W8LEC1S.docdoc fcd4936265c3d59d43ed6c51658cafd788f22ab0e3601f832346c762c3d97c2bVirustotal results 47.62%Heodo
2020-12-31DXDPU1D4Y534.docdoc 6c4a7652f59aa03c67961983f167f86eb3a64ba568f0c4629c5adf18c82e2ce8Virustotal results 42.86%Heodo
2020-12-31PCJRNLS.docdoc 2af797939c0c67519484491cd884c884c2a345daa208a6d1ba67e3917edc04f6n/aHeodo
2020-12-31TIJOJ7K7XRK.docdoc 575d1371fffeb5877c6a769757f0e62ec244b41f834d609312b916b18c55d7a2Virustotal results 47.62%Heodo
2020-12-31RIMIOK87A.docdoc 92f3ec8ddadbace9623d6af0c230b651775947b4da83ae9b5ab3ea42f866a62an/aHeodo
2020-12-31T1UIL4.docdoc 97a4dbe571c81cf11a56f00a073dca297a48d859ad36ecd46a9d5aff9c3eaa97Virustotal results 50.79%Heodo
2020-12-31WDJJUR.docdoc cef8b994dc5f1845b385523d62337a44acee6a6b6fde88bd8801e65cb4074ee6Virustotal results 46.77%Heodo
2020-12-31AK1WQW587GF.docdoc 91086dde82b6ff0a38dcc4ceafee71808d2af326520ab5e0f610f0c2fc6637e9n/aHeodo
2020-12-31RFZTNJD5LJWCAYES.docdoc 18bb61d704aea3eb9f1d69649f16dad532c1236486dbb9891c0bf5054c63aa16n/aHeodo
2020-12-31UFIOXTQVI.docdoc 48242492ae400d1b2e95ed96ed2298bc76c87036b1f79e92d38a07e5cb14712bVirustotal results 41.67%Heodo
2020-12-31HJLH69F9F4OY2.docdoc 12648728174c80a68b9992c8759df7e021f27fef6bbee5bed8af71b18a7fadd5Virustotal results 46.03%Heodo
2020-12-31K6VAQL.docdoc c531afa39691d1fec216f1c5c1016c155176f104b4b83189b1f4ca82efcdec60Virustotal results 40.98%Heodo
2020-12-31NVQTI49.docdoc 0b9ad72f95097098c7273fc3e89e96d14537deadfe1570a2e36b8ec40bf241a7Virustotal results 41.94%Heodo
2020-12-31YFMG1S.docdoc 712989be681e3a6e8cd47b84ce5feb957d2cfb47367d96bbc7dcd6551bef1f51Virustotal results 38.71%Heodo
2020-12-31W8Y763ZWUZB.docdoc 214c118a6ea6243f11f97d6a83c14ce0efa696dcf534eb46de221d4199cb7c88Virustotal results 37.10%Heodo
2020-12-31AM7DYN9Q2N.docdoc d6dae3570b800a4a54bbb661e945c2870952058174a0ac704127c7cfe8330bcdVirustotal results 39.34%Heodo
2020-12-31FQSJX8QXO11W96VM.docdoc 68dafb6ed5bb318a77e710fd66f9beffc66a4f84579fb3c160bb3c8c8b457acfVirustotal results 34.92%Heodo
2020-12-31H4K00DVC.docdoc 14b98f981681ea78e6511ba3a68c28a85fee9696158358876cd49a9ac1110bb2Virustotal results 34.92%Heodo
2020-12-318Y4LYRUKFHWDV3.docdoc 24b9b439815155d6b338c75f2ae2d92deb41c580a893dac9153f5042abc8b702Virustotal results 32.79%Heodo
2020-12-3075JF2U.docdoc 48cbbf0f9680ad78df8965f1b76d756f88912c653711968364b7f7eb3f5795b0Virustotal results 31.75%Heodo
2020-12-30YA8KGL.docdoc d700110437e868378fd668cf27a7df7611da72d285f7b9d7edfd2d08475a47b5Virustotal results 30.65%Heodo
2020-12-30BQXEX2WHGSZP.docdoc 23fda72ec69de16bede947221d038976dcb2098381f7260eded817144b88709dVirustotal results 28.57%Heodo
2020-12-30GGL6J7DM1D.docdoc a2bee4290712595f0afb87e5a247cafe694d279fb7350e43bc163630e926aaa4Virustotal results 27.42%Heodo
2020-12-30W8FCQXCPUI.docdoc 58e9689587eedb1e893c93baa299ea296c05222359dbe281306ec12304d3a8c2Virustotal results 27.42%Heodo
2020-12-30IDT9XP6XAJ86UDFB.docdoc 7dbe3e3f4d5e95b69111858fc5e96f73c1b7f8284276a1280486ab64139324a2Virustotal results 40.98%Heodo
2020-12-309PF5RM0F.docdoc 6aac95dd3f2a6b9cdc5ddfbda6e548ab8d93a61f48640d3a0a98a312fad42e56n/aHeodo
2020-12-301GKHXA.docdoc 69cfcbc8cdcaf6fb79be3d871779d709afb32745e7e7ab35db31dcce9f6bcb80Virustotal results 42.86%Heodo
2020-12-30R7HZSV1L8ND6YU.docdoc 6b85d222fb12df6466d8b1dae31bb6e7706463ec73fd86f85e46ef7867183df1n/aHeodo
2020-12-30T8CEV4EJPS3L.docdoc 3bf59384c4c1a24eb5fef4453dd1fc63a75324f4aa6b86a62ba47de3393027a9Virustotal results 41.27%Heodo
2020-12-30RLNZVCHXH2PG66.docdoc 9d7889fe83c60f08711f29825a62cc029f17329e4008a7298e7c3ba5cb6ae8ffVirustotal results 41.67%Heodo
2020-12-30UW92JW7OSI1GV5.docdoc c3995c2fa8060e207a999e9ba7fac45ac419f717a024eb0bc1059e197a595595Virustotal results 37.70%Heodo
2020-12-30JURBS8KOAHI1.docdoc 399701ae00f1f4e019e97b788362403c8323b417cd0f72fef7f9a39dd4ad4436n/aHeodo
2020-12-30AY2HEA.docdoc cd86c55218a19d3c739795e4da8c0c8b34a731b1d89fcc0685a5ceed2f3f8feeVirustotal results 37.70%Heodo
2020-12-303H1Z2ISVNOI5S.docdoc b19c3ed6b6012da42e3a700410a21231588c6b1da97f92911a540b9e3ae71b08Virustotal results 32.26%Heodo
2020-12-30QZE67UKBFVIH8SX5.docdoc 643eeead31f1c79f2a2d191699189bd671ca0169fff0feeb3824ff0b57281e3bn/aHeodo
2020-12-30T4OOKG.docdoc cecc306de3cae60a1f3d988356054754d0d3dcf8666045f718d5cfbf53e6a730Virustotal results 28.57% Heodo
2020-12-30CE3ECJ.docdoc 2247e8d912eac0fe04e0d232db8ed716ddb81a5a2f24f343b03041e267bf3d7fVirustotal results 28.57%Heodo
2020-12-305GVH2FL.docdoc 71bab4125d8e53687619ff03b3dd9d67b832995ca1998183e77db10e3c2e0c5dVirustotal results 31.75%Heodo
2020-12-3045IZXDT2Q7I34H.docdoc b069777bc25c9afba5d6e9a7f25e8042c6de53dd0c82deff0df162c44c61a1a0n/aHeodo
2020-12-30EYG0I70B8XQ3.docdoc 102752bacabf212b2d93d7dab6e84615f2e94a7c17f88f88c23cd2e87643da1cVirustotal results 31.75%Heodo
2020-12-30GI5CQDX4GTMAA4P.docdoc bc7f4cd13c74dc42e2862078e4c814def5484f8cba7f2b61834770e2f0f0684cVirustotal results 30.00%Heodo
2020-12-30HPJX024KRT.docdoc 2e986e4cb07980f9225eb5e25529d2dbf45a90c5b57b74653efefe53ce972db9Virustotal results 28.57%Heodo
2020-12-30WNFRZAL2L4QG.docdoc 0d90ca158eabbf8ebd00e4093c2ccbd118833f31c3c6902dc7cc079b6ad27560Virustotal results 28.57%Heodo
2020-12-30DGDX31TG42.docdoc 285ab195d27a5ec3299bbf17ad460e833b3c265c80b1450bba5accc059d6cf7eVirustotal results 29.03%Heodo
2020-12-30RRWA8WUIJQ.docdoc 13f1c66896a1c40f53f90c4132994a55c9363a7044989a67b6ad42a8965f69eaVirustotal results 28.57%Heodo
2020-12-30XRAOY98.docdoc 7fef2f36b64703910def4f6a15cfe314b2ac2f9691465ecd3999a29daf6b25c7n/aHeodo