URLhaus Database

You are currently viewing the URLhaus database entry for http://kongjiantang.com/s/Qobgq5n36WJYRYWaRkNToQcn0J1sEAye0B/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:955847
URL: http://kongjiantang.com/s/Qobgq5n36WJYRYWaRkNToQcn0J1sEAye0B/
URL Status:Offline
Host: kongjiantang.com
Date added:2021-01-12 17:20:10 UTC
Last online:2021-02-28 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-12 17:22:03 UTC to ipas{at}cnnic[dot]cn)
Takedown time:1 month, 16 days, 14 hours, 25 minutes Bad (down since 2021-02-28 07:47:11 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-15XE0RJXP0DCHQ.docdoc 597b8464e7a69a051b7a0aadc83994392224fc8455ae37614c4147b340483a0an/a Heodo
2021-01-136C446JEEZKST1SO.docdoc 841f665e7fa0dafb08a148c375fc49b0594eecdf01d44cc9b7ea8e6c6b5fe024Virustotal results 41.94%Heodo
2021-01-13P9KZ9917.docdoc 393be9ca086f60f8b72c71dd63ce7c68009a9eb41579c59986a1ff3b364712f3Virustotal results 40.68%Heodo
2021-01-13Z50ZRUKM5ULJM3.docdoc 5dc4c3f58fab032df0417e80aff4b59576063bf6de4933fb9c726823e26bfd0an/aHeodo
2021-01-13LH4VFEB35TFFQP5K.docdoc 87cccfbf24ec4787cc20e07cfd4f09ad67411698bd37854407087fb7ac721a1dVirustotal results 40.32%Heodo
2021-01-13ZI2RPP8S17X.docdoc f400967f088ce94383aa01857a6c797a4d0073813b29a8c1ccb0769342caa4c0Virustotal results 39.68%Heodo
2021-01-13EPRFF45AWQ0.docdoc 2ee522d96c0744b6c157ab83379d1e335b9367df639620dfd9a78a3172d28a1eVirustotal results 40.00%Heodo
2021-01-13D701M1.docdoc 4ac3c771a4cf5e381984161bbef7c1df3a4c5b75d22d5c6dfd6b494d0cdfc073Virustotal results 39.68%Heodo
2021-01-13Q36CTIKK.docdoc e7fa2a17209d359c64add22c0de40f7f9189e8bd88e22d26aa7a441e2df65826Virustotal results 37.29%Heodo
2021-01-13DUND5YZZ2HURRZ.docdoc e50c941c576a54fb30415ca63016572e9104d7be02cf3a1f220e72e6aec6a1ffVirustotal results 38.18%Heodo
2021-01-13Q40UQJ.docdoc a6dc0ded7d05e28b3d600051b7e81134a117c5314d07e3cbc5284ef742af4aeeVirustotal results 39.68%Heodo
2021-01-13PL4Z49PTLKENTQ2L.docdoc 13ede1e9cb06a6abe06852ba6a76f88ddb689b084f5aeba3e0191db38eb60818Virustotal results 38.71%Heodo
2021-01-13DJ4B6NCNQ7S.docdoc 69d9dc566e89715d0579eaf0478cc5266a91f3535c5dc33db6c532c500a2737cVirustotal results 40.98%Heodo
2021-01-1319VLGLBSM.docdoc 69213fe20f37b11ee793f1a08646e8743dd43057e3590d982c1dcbe9c59e9cd9n/aHeodo
2021-01-130J09ZCT.docdoc 5108bd26eac69910dba769ef8434a799db506304bd38e56cdf7cf180f046770cn/aHeodo
2021-01-13L6JZANZCP8I6BV7.docdoc 3045a0410a648c72c32b3518de76c2515c2a25a83b49c50dd0f76b684e256cfcVirustotal results 38.10%Heodo
2021-01-137Z0ZYBR72IDR.docdoc 4b0fc81c56dac2f6f2af440333f257bc04a338944fb5ce831dfb9aa19685d94eVirustotal results 38.10%Heodo
2021-01-13DB2RDRC7IK1UTG.docdoc 3b34e75cce4b617fd876f0145c30b4ea5af865c2edb3b8cc89fdc268bb347b1aVirustotal results 38.33%Heodo
2021-01-13I8B4OGCCM21KJ.docdoc e32bd8de7f26c5027890204a36365081a960b2216702ab6ebc21515d33b43ec0n/aHeodo
2021-01-13VZBPJ7.docdoc 21fbf4fad1a3c433a33e1e70f775b52d7f6243128a4b3864e4ccc686bdd8948dVirustotal results 35.48%Heodo
2021-01-13O3SE27906Y.docdoc a6be34fa6cf893e275df8c7de812ab38668c6b552a5ed46b7c168ccdb9e0535bVirustotal results 33.33%Heodo
2021-01-13B0SL00VBW0P7T.docdoc 16eb97b9e71a4f97f60c57a97cef02a96840cf2265de548a48d100c53682f079Virustotal results 30.16%Heodo
2021-01-13DHEMLWL3SSN.docdoc 516934f4b1dddd1c001c82e6f19d90214c1e05c076dfc0eda2f3e75f86027019n/aHeodo
2021-01-13MGFUR12P.docdoc 2d2fa64b93abf2055071f77d797832e29b37dcf63c6991b6dbfd0e779af8c115Virustotal results 33.33%Heodo
2021-01-138KQ6XT.docdoc 9617152d4977e3655150c324649d7b7a49dd0924d8da12bd8c7385f4288fec9dn/aHeodo
2021-01-13JQJTDMPK4.docdoc 2a53fabb5988ade6a70b074b8f0be78d6538fe2242407d2486b949d07e014b90Virustotal results 31.75%Heodo
2021-01-13AHLEETN.docdoc ed1d3d3103290456664d1042c875c1faef705150c5c1cb9c49bcd418dbe22160Virustotal results 29.03%Heodo
2021-01-13ZGBWX3FDMEY7O7N.docdoc a4b2c79223d87bc6523817efc6ae96ddb3a517b509a0907f5aa47ed93cf1bd78n/aHeodo
2021-01-13MTFEX6V.docdoc bf49563033ad40742badf4e09f7aa09e4d4bbeff563e4502c829662d47fd96c5Virustotal results 25.40%Heodo
2021-01-1319KWDB72.docdoc 274ec03dc6e83bf12177697052207e2413c15948b42bb11df4a4ee110eb84803Virustotal results 26.98%Heodo
2021-01-13TWQYITN.docdoc 8510370235baa3ba052e4110ae5571a7f1215dc584e1ef954934737a71a87b8bn/aHeodo
2021-01-13ZSNZQAQ.docdoc d28bde1ee5fdd7503e931d3388cc0fdfd2cd36fbd85ed35235e2b828bcc99b90Virustotal results 23.81%Heodo
2021-01-13ZT2ZGJ.docdoc 6dd61c1c1722407d98c22ce2bcbf6c2b85714a23daff8c45d5ea2f52cac15e7bVirustotal results 20.63%Heodo
2021-01-13LAF44U4HD1NXEQ.docdoc 5cc80cc17bbb89808db987af2bbfbe02975c1d67cfb77ac0a9a5af0468a36210n/aHeodo
2021-01-13EQ1KK85EOFUV4MD.docdoc 8d5c3655c17e7b52765884c6c65f4accd5e2d174f1b28c4a9a25b5b3686c50b7n/aHeodo
2021-01-139WA494Q2O.docdoc b80739d7b435e5a620e5c121269e1f8a2050a87d1a4d6b934107346c62d09ddcVirustotal results 20.97%Heodo
2021-01-13M9N4JI8Z0CQPT.docdoc 4a2fa6f89bd5826c3451e003332646d61f90c6ecd276a9d2178122bbe1293059Virustotal results 20.63%Heodo
2021-01-13VY94WEJO.docdoc e09bae676d8815d4702fabeb1ef597939a2bb90033048d1b25e1788fcb13fbcdVirustotal results 19.67%Heodo
2021-01-12B8SOCT1A8WIM1.docdoc fa94db36e6f47c1aaf4d141055594716287ceb31cfd4b5ce0ab5c350cffc7969Virustotal results 20.63%Heodo
2021-01-125T6249MTEUH.docdoc 6a315fd4a06b02bf1f99d4b3ab1aaaaed955bca3224dc90447f6135160434f85n/aHeodo
2021-01-12C91VPBXH5JKZH4.docdoc bd45f2cb32d66093175c05e0b8e9060fbcc0fcaca57454dfab3abf0d54711f13Virustotal results 20.63%Heodo
2021-01-1203TSQ6ICFTC.docdoc 301d903a09e27602747f3a822625776a38c01ffd4fac6e3dcedafdf6f49369ean/aHeodo
2021-01-127R02O7F.docdoc b75406d6fe0aa668a576c191ab39489f0384ceeed853597d9f951bbf8b11326fVirustotal results 19.35%Heodo
2021-01-12P8DMFFM54MCIJ.docdoc 96cbd7697693ba15448da3ba557fe23297abb87009576650ac39c49ca38052a7Virustotal results 20.97%Heodo
2021-01-12SHDQRMIUDC9CO5.docdoc 0f2701f8a2887d860bdb0dfe233f7e25ee8852103dc87658ff1b67b34a1c30b7Virustotal results 20.63%Heodo
2021-01-124ERJOWN.docdoc cf0c2aa78b5e10bf8d17ef6ad77f3ea8f356d6e4d9976f133893dfac8edfc45dVirustotal results 23.81%Heodo
2021-01-122GG4B8GQ4O1YSXH.docdoc 1d440920de91c2d72252e75e275ddaee530d32e6c5c0618b018345728f07e567n/aHeodo
2021-01-12TXS43T.docdoc ba4d03e5f94c5bf30113d71b59256af87266e9ac0916f2782a915e207131d88aVirustotal results 20.63%Heodo
2021-01-1219PIRCNCL.docdoc 33baf9af5a5d507568251af1a9ed84e084c180208720e68b748a8feac76e95f6Virustotal results 22.22%Heodo
2021-01-12GU49TMGSZLHWBFX.docdoc 6b3c800aa92f35c0c920e2681573b53b32c7768fb1072fefadd132f8fbf46906Virustotal results 23.81%Heodo
2021-01-12PP5C4ULFU.docdoc 4334cd9034034a010c16d6a513c49609e86abc21febccab0c0994b720c4c8beeVirustotal results 23.81%Heodo
2021-01-121KWHMT1C7FFORU5.docdoc 137602cebf7c61fe1bb6647160167813271afbd74a52fcccf03a0ad590a9ef61Virustotal results 23.81%Heodo
2021-01-12ONQB87.docdoc ebb5db5be8f6c48e1ccebf34406cd5635332781cbfe45782a0cf3b535cfc0aedn/aHeodo
2021-01-126I2KCBAHHK039.docdoc e0b3fe914319d6fbbca54226cc93de6f4b5c84a9f076aaa3a897f7a46a45d6cdVirustotal results 21.31%Heodo
2021-01-12ZG606P.docdoc 27b122df98f5e4ed1eed2bc92bc3634afbe44136cb872621c2a62d8acf28ae82n/aHeodo
2021-01-12795CK0FPP.docdoc a1e885ba7afda7bc1a64cc0527ebb4fd9e6690d0d41360104c717700238fe420Virustotal results 25.81%Heodo
2021-01-12HV3FTTU.docdoc 9da23b3c04fcfa19a1abc9124178a69e76e95246fe1a5065bc2a0876543890daVirustotal results 26.98%Heodo
2021-01-12YJG50G.docdoc 6200332e69c1324e80fc9a4aaf521f8f0379cdf22474d40d0638b1b5c51a4218Virustotal results 26.98%Heodo
2021-01-12587X4GM6N8YXSR.docdoc b142fa1e2d0996a6e33f8ee0ae3d42f87ecd62b3c86a1a0535b0cba6f4ae28d0Virustotal results 26.98%Heodo
2021-01-127E2RWKPIG7I6E.docdoc 66732b32c134ca0f64b5f3a526b4232854bc11ef34861a78ded6bcfa03112d4dVirustotal results 26.98%Heodo
2021-01-124266F9TAGI.docdoc 49f5b14a2563126acf83387ca2eda75fcdb050d5052cd756a7627bf75499dbe8Virustotal results 27.42%Heodo
2021-01-12B71NZD.docdoc 4417323790a71e0855574b64de3789a939924e8556031e06939310245d52263cVirustotal results 26.98%Heodo
2021-01-122OOVEE982DY.docdoc b6278fa190059a4aa35b99db07331dafae707d9b30255ea5c69b1a747a386ad8Virustotal results 26.98% Heodo
2021-01-12GS1HX7L3J67Y.docdoc e7cde8607a700a44ae8cf5c0b8d5f65043a7e3814e869e45a0cfdc8a5e33e597n/a Heodo
2021-01-12CV8P32.docdoc 3fbfae79bf1be85a61f75e7d23e1864ef66662e6cc7714bda2072feae62dd902n/a Heodo
2021-01-1268XWBH4WQP7D8PEP.docdoc a82aee5b05a1f8714068bf50b59b239fd6119efc6f5759385763c2080ac69c9dn/aHeodo
2021-01-12M7501O2JNPPKBZAN.docdoc 6accc97a530bd44453afbef50abb762dc580472d982b3765b7b00454b79619f1Virustotal results 26.98% Heodo
2021-01-12UQI4AX.docdoc c46a1e6b0923ac1c820c0147d305ff554dbf9c6a7255f230441f7648ddbb243dn/a Heodo
2021-01-12XBM0RXPA.docdoc 896f4bea1bcf6db54bbfe68bf6b19a004e075a9c845a9f7f8a9320e81dc26c25n/a Heodo
2021-01-124I6MNC281TYKNT.docdoc 441078cf128e9744a2961ea7150a709ed85ad8ed5267977b6a79c03f7b772922Virustotal results 26.98% Heodo