URLhaus Database

You are currently viewing the URLhaus database entry for https://sanghuangcn.com/wp-admin/jCIhuactHmRxNmY8pprcr0mzD6HupnPu99OJU/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:945940
URL: https://sanghuangcn.com/wp-admin/jCIhuactHmRxNmY8pprcr0mzD6HupnPu99OJU/
URL Status:Offline
Host: sanghuangcn.com
Date added:2020-12-31 00:07:07 UTC
Last online:2021-01-04 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-31 00:08:03 UTC to abuse{at}alibaba-inc[dot]com,intl-abuse{at}list[dot]alibaba-inc[dot]com)
Takedown time:4 days, 14 hours, 11 minutes Bad (down since 2021-01-04 14:19:03 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-04B763UV.docdoc 43af38ecd27585f00463abfee0ca7f492fb36fa862c8d215447d59be27652589Virustotal results 64.52%Heodo
2020-12-312OQHDEX70R.docdoc c68350e42d1fb6e27f14eea5b6a5994cc3d6f0a4c09880eaf03f6fe1382ece1fn/aHeodo
2020-12-31A4ZB8NQ9EY506C.docdoc f4ba2bce0a0fcc57183c73e46feb6f6fddfcac25d12032d47d93302aa9bb40b4n/aHeodo
2020-12-315WR34IFJKN1W587K.docdoc 6c1e317361243614038a172a218b2050728fbcf3f6dc18937d02f92e1ff92354n/aHeodo
2020-12-31WJKDAOHG1NSELA.docdoc e05aadbe41028646840c187217377776330ff87cf0c0aad82cb1cf15236243cdVirustotal results 42.86%Heodo
2020-12-313ORQL9Q2.docdoc 92f3ec8ddadbace9623d6af0c230b651775947b4da83ae9b5ab3ea42f866a62an/aHeodo
2020-12-31AW5QC7SYGH03R.docdoc a60ff35ef82526eb15d040ad870e8c2808dc694bb52b1095ba863c960b40678bVirustotal results 51.61%Heodo
2020-12-316PLQZOWZ.docdoc cef8b994dc5f1845b385523d62337a44acee6a6b6fde88bd8801e65cb4074ee6n/aHeodo
2020-12-31O8Y5LLNZG.docdoc 5bda7d2a96d144775448c820a8e5ba511c421864f4bdee023b96ebc8f375a861Virustotal results 45.16%Heodo
2020-12-3121N143XN8ZR25.docdoc 18bb61d704aea3eb9f1d69649f16dad532c1236486dbb9891c0bf5054c63aa16n/aHeodo
2020-12-31YULGI60TS2GIQDM.docdoc 75e6fc7e5c98a20bc64f7944d2bead6901f575fe20135e9aafe210ee2e1e2c49Virustotal results 42.86%Heodo
2020-12-31CU4CAV1PNR.docdoc a076dfb0f7e5a9217dd1cde4b003fd8714d6693b990f2ac4fd1b70fdbea38296Virustotal results 42.86%Heodo
2020-12-31KNW02ADST7P9KVR.docdoc 3d426817cb9506ac02f7d7ae3cebe38e2125efde6eb7ee4af0251a6afdfa2d26Virustotal results 42.86%Heodo
2020-12-31SXP257GK.docdoc d6704fdc1942538d16ddedbe3eff3c429e462d4378b33040597c5a218c0e852fVirustotal results 42.86%Heodo
2020-12-31I7E91BSXWWZA60.docdoc c3995c2fa8060e207a999e9ba7fac45ac419f717a024eb0bc1059e197a595595Virustotal results 39.68%Heodo
2020-12-31W33A3GR.docdoc 62ab4ab746aa32f2fc56a4441eb18d109e5174400f6eec250495e2b513ac63c9Virustotal results 39.34%Heodo
2020-12-31RFXO5YBU0Y.docdoc cd86c55218a19d3c739795e4da8c0c8b34a731b1d89fcc0685a5ceed2f3f8feeVirustotal results 38.10%Heodo
2020-12-315895LP00QE0FXD2L.docdoc 24b9b439815155d6b338c75f2ae2d92deb41c580a893dac9153f5042abc8b702Virustotal results 32.79%Heodo