URLhaus Database

You are currently viewing the URLhaus database entry for https://viajandocontaiger.com/wp-includes/ds9nWbq7c7LmEIqS1/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1850332
URL: https://viajandocontaiger.com/wp-includes/ds9nWbq7c7LmEIqS1/
URL Status:Offline
Host: viajandocontaiger.com
Date added:2021-12-04 01:52:07 UTC
Last online:2021-12-04 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-12-04 01:54:11 UTC to abuse{at}1and1[dot]com)
Takedown time:2 hours, 11 minutes Good (down since 2021-12-04 04:05:50 UTC)
Tags:doc emotet link epoch4 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-12-04L66OG7716.xlsmxlsm 1d82c0876d48a1d3b8b7d0cf658042b8c7bc4e0e609eb880e495f7024c3ab334n/a Heodo
2021-12-04ELK270X90JXFZ.xlsmxlsm 6a6eda4fd56454e5d870e442e86bb36984c3505a2f1ebef42a2a9bf85f23fdd1Virustotal results 18.33% Heodo
2021-12-0417Y85J2I6AGYT9OA.xlsmxlsm a7f86bbc2dccff9201f12934e593c83525ba4d7fd303b747b9f2f557745c4d56n/a Heodo
2021-12-04HSIMDJQ.xlsmxlsm 3a7b80be417d47a53348d0054cd67391c87750b5e035896df8907159a79a948cn/a Heodo
2021-12-045H1LUZX9BXK3G0WM.xlsmxlsm 640cb770dd4906e04ab1bf31b293f900e2dfcba94e6316378398136a7dd3e644Virustotal results 23.73% Heodo
2021-12-04EEBFQAPWMA7.xlsmxlsm 7200a15a0affbcfad1470e03b9a6f41914d6bf1144a3dee8179c77b04f2ab8bcVirustotal results 20.00% Heodo
2021-12-04F45TG66YX1.xlsmxlsm 15666dac5f7bd316c184cb98eee40a8efc335a8147c302cd9f739bbb449dc15bn/a Heodo
2021-12-04XTT8CRIQM.xlsmxlsm 471c8e2b2ca763f492c622da41259379490e7d7f9736239de5b883d0b675e9a9n/a Heodo
2021-12-04F3L5PZM.xlsmxlsm dcf245593c7020c9b0f17ecad5df852b6b24ce05ca72e6a0a7081ef3c4491c56n/a Heodo