URLhaus Database

You are currently viewing the URLhaus database entry for http://historyshop.xyz/Hainai/2MQeMZINy6t4wMvCP/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1850369
URL: http://historyshop.xyz/Hainai/2MQeMZINy6t4wMvCP/
URL Status:Offline
Host: historyshop.xyz
Date added:2021-12-04 02:12:06 UTC
Last online:2021-12-09 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-12-09 19:38:02 UTC to abuse{at}hetzner[dot]com)
Takedown time:5 days, 17 hours, 26 minutes Bad (down since 2021-12-09 19:39:41 UTC)
Tags:doc emotet link epoch4 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-12-0475M97BUAW1Q27MUK.xlsmxlsm b3621a46497e5f08466c681db94aa177a33c2dc246a197a72865e041f5d23fb7n/a Heodo
2021-12-04R2X5QMSWI2VLQKE0.xlsmxlsm 2e16f73fa92313ca662571bebd97fcfe0139374a3453af41c0a1128c1760e13eVirustotal results 26.23% Heodo
2021-12-041QSQ8J1D98G.xlsmxlsm b9430960d9255fc29e165bdfc78a03d4962a8c0a05407dce10adb30c3b22f58fn/a Heodo
2021-12-04EHO0SBHJ882HG.xlsmxlsm 320195527c03da3aab763734fc72fd4730d8481933f03bbba45d350775e74f64n/a Heodo
2021-12-04OKX7YK94Z8.xlsmxlsm 33b2ef335cf97c8dd1ccd6344b4064b639406e3e390ad2b6e7bbcfae9df6a377n/a Heodo
2021-12-04X0PM3PRVH.xlsmxlsm a428f81a832ce012d7950fbab55a8a105eb9c4e567b143be09766bd01e7e44d2n/a Heodo
2021-12-04FCGA24U9RK9.xlsmxlsm 607f7405f5b90bab707fa9a28a738c736bc0f526b4eb1a1a442a017fce81cc8cn/a Heodo
2021-12-04F8GY7A3UQUD.xlsmxlsm 08049d7a7bf044cc00d2c0797d622a12da70451c5b7e5f0c8651f41902ef35c0n/a Heodo
2021-12-042HZCDCD.xlsmxlsm 0ce65a8b3462b173246d399d398596c313d8685cfd5c9fa9c97af5ec5397ac10n/a Heodo
2021-12-049RMZC1HOLOSKT.xlsmxlsm e4794249145bbd54d312dc4f8a1327e51ec4321d58ffae657a8e37b1d4cdb8a5n/a Heodo
2021-12-04QE4L3VXORB737SCA.xlsmxlsm af0ac9988fa124d9634af8a7108da032d14244d47ff43445b01da171a2fe99e6n/a Heodo
2021-12-04VWVTW952.xlsmxlsm 6d24abd45e6e56639459f0f81751333341057bd1b0c111baeb506b3a7a6a3504n/a Heodo
2021-12-04QJVPNMIS.xlsmxlsm f4d33e567cb1707d6546c579dd4291dbe2c6c77b5772fabcde07381cf53a5eacn/a Heodo
2021-12-04KKXA7IOJW49M.xlsmxlsm 02b22c30e1d82022b865ad2774c483ff395d3f0a7f21032babdbd073c8a5650fn/a Heodo
2021-12-04BCRNOVRZ4.xlsmxlsm 3cd034945552b0db20496f64fe019b6100c496de25e609d070c799243a373837Virustotal results 21.67% Heodo
2021-12-04IU3OBTPMILXSC.xlsmxlsm 9725802185b8ecc287a729eb4b1aa5f849af76fb7978734dbfd7de31f9592d37n/a Heodo
2021-12-04MUF998Q.xlsmxlsm 652c1722795e5f1fb2dfef6c65bb377030b0a0a4a00b3aedeb1bd68ebeee6c5bn/a Heodo
2021-12-04OOELITCBB.xlsmxlsm a121651d1e49e1fd488fad17113705077ca0bd13220cb35ab800bd08d656f51bn/a Heodo
2021-12-04JYSEOC2.xlsmxlsm 792da2db0a368dcafacdb9c6789bba643e29f4730383572e66acf3cb6844fe8dn/a Heodo
2021-12-04TB3DW57E9V.xlsmxlsm 7f9b39a20fa33c77f9dcd15092cb393c3eca8869d02b437717a50d7872a2f718n/a Heodo
2021-12-04MTVZTDP70.xlsmxlsm b19fa68da79aed1b8fbcdb6e041f97fbe2baacb4b2c234dde783c9707ceff8d7n/a Heodo
2021-12-04JKJMJDM3R7.xlsmxlsm 4392f053539c61c480e7128d85af7c7a04683066bbc965ba5f5c0038df7db369n/a Heodo
2021-12-04G3AP3S81VS137ON.xlsmxlsm fedb63cc8f611d2b9254c5d0366337bdfbeb858225468097c4e52539c5fea3bfVirustotal results 16.95% Heodo
2021-12-04EORT6M9LGM.xlsmxlsm ebe3424670b3c82054330f3f7dae2173634c70d1ebc14f336b2cf852a8244f47n/a Heodo
2021-12-04EGD5HGH4YT4G6K5H.xlsmxlsm f7cd0e7b41837269b956f4229a78d6249d8a64a152716dd31191605f56340a34n/a Heodo
2021-12-04O4GN1L4CT1Y.xlsmxlsm 4cd06ae56d216f369c0fc1956d794e869e403b789872ac8ddee9cac00e9a653bn/a Heodo
2021-12-04H83FHZLP.xlsmxlsm d48cf0af7d3709b68afd7493329e2f1161803b5ca3e4be6651dbce001491e014n/a Heodo
2021-12-041ITIRG9Z8GN.xlsmxlsm 1d82c0876d48a1d3b8b7d0cf658042b8c7bc4e0e609eb880e495f7024c3ab334n/a Heodo
2021-12-04QDN3RNYW0FGI.xlsmxlsm aadc859ad87c5f31121568585d28b8d34dd2c70301f30505eb8932cdee5e0683Virustotal results 16.67% Heodo
2021-12-04ZF184HEM.xlsmxlsm aa6ab408990b7923655e0f63198f3779e70179a46a0599f8a16fcb027243486dn/a Heodo
2021-12-04BYQ8WR0CXVF4.xlsmxlsm 3cc2e2a09778df58d5c2688dc3732abf599dcd5e33ec04753317b843db4f296en/a Heodo
2021-12-04IDJ0Y86SA8.xlsmxlsm 949ce22f844edb02181c2b13dcd0eff88f154c740092510aa897680f667eaf2dn/a Heodo
2021-12-04ABYG8Z93ULM.xlsmxlsm e6b2c71227209358945acbee370485c612f6efea1e9ccde566f793ce07b37402n/a Heodo
2021-12-04AXKS1M24I85F.xlsmxlsm 15666dac5f7bd316c184cb98eee40a8efc335a8147c302cd9f739bbb449dc15bn/a Heodo