URLhaus Database

You are currently viewing the URLhaus database entry for http://ckfoods.net/ALFA_DATA/MiXvER9fyxpKc4hXFoZEnyDmkHRhl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1851748
URL: http://ckfoods.net/ALFA_DATA/MiXvER9fyxpKc4hXFoZEnyDmkHRhl/
URL Status:Offline
Host: ckfoods.net
Date added:2021-12-04 13:12:09 UTC
Last online:2021-12-08 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2021-12-04 13:15:17 UTC to abuse{at}liquidweb[dot]com)
Takedown time:3 days, 16 hours, 33 minutes Bad (down since 2021-12-08 05:48:54 UTC)
Tags:doc emotet link epoch4 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-12-05LCJFTRG.xlsmxlsm 33dc0546d60f496508e95293772364bf7e913d52ec3d606b326adff6cbfe7fd7Virustotal results 35.59% Heodo
2021-12-056E85NFSB1AM9PY0.xlsmxlsm 2817f73ca4e9ffeba86f2ba0aec66e164f1b2a836ed98aac854c150cefb9f1den/a Heodo
2021-12-05XYGOJO77IL09WS.xlsmxlsm 17b2b094465ed6a13d97e9ba8fe7c2ce9b16234305ae829c0f608496f412f9e0n/a Heodo
2021-12-05B0LLYZSBMHFHNPS.xlsmxlsm 9c5845715beb7e59c636b2f6334fee733da39eaf635bf7f44ff00f044a53509bn/a Heodo
2021-12-05VHHKC4OAFFX3D0Q.xlsmxlsm 07de6d5b2af9a9d490d36eee97cbf89fd307ebb8943653ef6815272984a7186bn/a Heodo
2021-12-05IQOZR2O40O7TY.xlsmxlsm 6be7115cd91f8c6f739410ce06ab8dd93b8e4daa7c64feffcec4579456d5751en/a Heodo
2021-12-05SUA1CBYCTM.xlsmxlsm 52ad735a805a790e77433759257f1f3c72d202bf18d56d83d0a39843d1d46b6fn/a Heodo
2021-12-05RNNEOH3YC4AG.xlsmxlsm c55496aa3102b469a63433fff09292a6d66a8baa95586a85a9e34d5f0bb95832n/a Heodo
2021-12-05CZVNIO9YAE9FSPI.xlsmxlsm 47b48be726e216626dd7eb27bc629218d6d7de060f525f3880b843c3ece3a4c2n/a Heodo
2021-12-052NZVZ2MQMECNH.xlsmxlsm 5790ff223fdb398b262e593d6a3918fe0b6dd6823486ec80fb48a29ad4f1c7b1n/a Heodo
2021-12-050M5Y2EG1.xlsmxlsm b0f4453e4a0a1ddf23506c0e5bc31fdde5b33d5c2a3c2411d6fcb98a602da9a1n/a Heodo
2021-12-047GB6TR9.xlsmxlsm ac2de8ef726500ae270f587aff768d969c1c95b21e407bba49ef598ab60ea9e5n/a Heodo
2021-12-04LDRB0KL03N42ANA.xlsmxlsm 302ef213ab61b467abd082b4fc2aaab74092e468f3844ecb7804b8be88e01f75n/a Heodo
2021-12-044FVTGTNUCEH.xlsmxlsm 3ff7f98d0a7d75765a01942ae1d5074dbddfeb2fd525902bf536c263d1bd6fe8n/a Heodo
2021-12-045E1U96V4Z8QJB.xlsmxlsm a15f2aa1b48441d49527d074755aca2926254119a20ba129ac1c5717dc67d846n/a Heodo
2021-12-044XN9P8T54XV6PM.xlsmxlsm 28f2433f1444eb6e9f61d9dbad0f192dde883be209b175a4fc185bd13a2d1163n/a Heodo
2021-12-04B7DIYTV.xlsmxlsm ac4625994264b4101e5196c791a447aeb5fca9f346573a810d83b0a96be22e9dn/a Heodo
2021-12-04SK3P6RQMQ5J.xlsmxlsm c538307a14f55d21ff46077411598baa5c27a6e7c442b690b436687d56fa4cd5n/a Heodo
2021-12-048SLJDNFL2K0PQ.xlsmxlsm e3e7fb31fd489506b7917f61b5b63995d4649948e78338ebaadc759292f267d4n/a Heodo
2021-12-04GUTFTHB2IS.xlsmxlsm a0145ae81bb655ae1beddb852af9f1a05752ee368e0c34fc06a9ee2e73cb1143n/a Heodo
2021-12-04R0KVK6S5.xlsmxlsm a2188e329da2699db6ace92829b385063eea0c8ac5f90ca5535a5a0eb74b956fn/a Heodo
2021-12-04MT8HMRPVD5G9MY.xlsmxlsm 52c5eb425b749b970ca3a8ed72ad859791dd1ef48d02128682d3a7d94728bf20n/a Heodo
2021-12-04VYBUGFC.xlsmxlsm a7d03f17183bb638685c605beab0ede01a7acd0d14654689b90ff598480f2420n/a Heodo
2021-12-045KJJXGOJ9.xlsmxlsm 459f9e401d040a233f805db5ae53f477b23e8a2e1875bd43294baadb72837e49n/a Heodo
2021-12-043DIRH96G0RB0EMC.xlsmxlsm ef779a646e1ef3fa6a4b1ecb645656a42cafbc4c449d6b38f5a759ef926c925en/a Heodo
2021-12-04PZW5MZP1QT2A.xlsmxlsm 0c92820b38ba2dd338e9358ce834883c0ac426e18b614592c70a6c20d737b2bcn/a Heodo
2021-12-042XBQHLFP.xlsmxlsm 6f7305b8bb4dcc7bc16c2ddb743d507a26f81a41e090fc5e4e365a70a27412c4n/a Heodo
2021-12-045RKM3EJSMZS5.xlsmxlsm 3465954f518dead663b5a353c55a6baead67ff5a7d16010ec23ad80b5e1b79b5n/a Heodo
2021-12-047YE2D0LBWZ.xlsmxlsm caff998cb1c01034f139c2b57f6e69c7b0c8338d2b25d2722a85ec807e20b248Virustotal results 24.19% Heodo
2021-12-04T4GK3KYN2IACXN90.xlsmxlsm 9fa6d82253573b5ce7329fb237981d0e927f47a243ce03eae5644c508652d4ean/a Heodo
2021-12-04RDUEYGVLKP.xlsmxlsm 0c8aab06e4566372ae22379a532b615321d08af711d825d4bef4447a17e3c9ban/a Heodo
2021-12-0482U808KKU97ONK.xlsmxlsm eda42816182306a1cf78a7c3f3f0dd5cf01814e245e9cde27a2f8a6ec3445448n/a Heodo
2021-12-044UV4FUGL0O.xlsmxlsm 57e7b9e9e0649b39613558375db1ea28c08319461d2ec830a4f2797101a34dcdn/a Heodo
2021-12-04R8U04473Q0VZ3.xlsmxlsm a870a495bd65f773f81f61dfd6ee952e405f995bc8645011b846c861ae5dbdc4n/a Heodo
2021-12-04T2F3KV9RMIF3TT.xlsmxlsm fd42b37fba9558e0017ad0591a7828d6ca247eda50d525616e0b0cf6379766d8n/a Heodo
2021-12-04L3W2Z4TPW.xlsmxlsm f623d3abffc341c87700595fbea396420f28ff0ca78607fbedb7ce6ae73e0144n/a Heodo
2021-12-04U9XBULHBHAZF.xlsmxlsm 337cb6b90ae12fc3facf122a44887bcabee2d52d91c5557684a148a0932bf846Virustotal results 27.42% Heodo
2021-12-04S3ANQN7ZQR.xlsmxlsm cf3b0d8b0a9153046d00599fd5f6a14af017d2b22f5d4c8d795b655427e05832n/a Heodo
2021-12-04H51Y06JWLWYEAWS.xlsmxlsm 4d97080c59d554255f5f5ef49ce08d7648fb484c72b27ce22c4fc89291d5e393n/a Heodo
2021-12-04IB4I4PG.xlsmxlsm 98d237f1b5c33fdea39cbd4f2cfcf7bab472437f1293485415a27223fbdf676dn/a Heodo
2021-12-04XC46GHZHZ.xlsmxlsm 5add7bb4d33246473937b1037e4a5a2e6ee04aed0bbf43c4c2ffbbe099d794b9n/a Heodo
2021-12-04RKD5T11397C8.xlsmxlsm d61f6cd16e25f3af408c729d1afde200d80f4af8ac996532a628b16c3120a4ddn/a Heodo
2021-12-04WT38BXW8.xlsmxlsm f46601ba2a64f9de9f4f50f42c35bde8565ad5f28045976b012f2ee3108cf80an/a Heodo
2021-12-04C0DCJWWW.xlsmxlsm ce0671248520f57143edf86e4176372eaa799d345718abc1085d7544f42ace4an/a Heodo
2021-12-04JZV2BK5QB81J69.xlsmxlsm 2d3fc2a151c8cf3230ebbf202fcc5210e14bebd19b918cc44012ac4c5c9c1ec7Virustotal results 26.67% Heodo
2021-12-04BDDX52IPKY14GCYA.xlsmxlsm ee70a9dfbea6bcd62a89831b51e91d1efc82e55cfb87216945f4260053c691b2n/a Heodo
2021-12-04K66VXYYWCJON.xlsmxlsm 28b509258cbc301a32a2d7623a9e3452cecd5b0446d8c3f8ee500f386b2d0b0en/a Heodo
2021-12-04T5Y38MUA3J76K.xlsmxlsm 9bbeb00ebe62ceb01bc9cc39b97e3ddacb8d21fe3dcd01551b9aaebc87b90a0aVirustotal results 24.19% Heodo
2021-12-04PWE6PCE.xlsmxlsm 1a42644608f98d5d74478e0021460a016a3a0162071d6c6a15bcb3cea0bcda85n/a Heodo
2021-12-04VN3GHQ221BWOGV.xlsmxlsm 836ecd93e4aeb5ecb8980e715a69a798cb4797e81ea9782e4f3963a39a081c88Virustotal results 27.42% Heodo
2021-12-04XYPKL5FZ4HR4.xlsmxlsm 0b326199fcfff5c386678dacc4a527c7c84b80727886d983225152ae395b9d53Virustotal results 22.95% Heodo
2021-12-048Q7MJ8DB70SM38.xlsmxlsm e5efab8162cc62849f574393540dbcb93581a620621d2a8ec85600ccd0658004n/a Heodo
2021-12-04RS4OV1FV8NYP8XV.xlsmxlsm 610ea093a34f13cf68a04c5d31bb7eaa0b304ff0b0bb5a3aed873c6fdc39182bn/a Heodo