URLhaus Database

You are currently viewing the URLhaus database entry for http://ayoobeducationaltrust.in/vzlv/OXQpFcz/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1967013
URL: http://ayoobeducationaltrust.in/vzlv/OXQpFcz/?i=1
URL Status:Offline
Host: ayoobeducationaltrust.in
Date added:2022-01-11 12:02:05 UTC
Last online:2022-01-15 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2022-01-11 12:03:22 UTC to abuse{at}digitalocean[dot]com)
Takedown time:4 days, 3 hours, 17 minutes Bad (down since 2022-01-15 15:20:51 UTC)
Tags:emotet link epoch4 heodo link SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-12741_8.xlsmxls aa65a34067b0c50e89c1078d0c7ff08de43e5036241404574f846265de6ff6bdVirustotal results 28.33%Heodo
2022-01-12263_391104.xlsmxls 66f5a05e98200743eb34cad5877b89dd359fbc2c8f4ced8da536851e0ac44689Virustotal results 28.33%SilentBuilder
2022-01-12G-766520.xlsmxls 788c6ae40bf00e27769846c7ab03bfee240d5ee52f765f498918a0333498eb82Virustotal results 31.67% SilentBuilder
2022-01-12RP22.xlsmxls fea0e3dc5015a4f0d14555e51520aed1594e9b0a3310bac2598db38f11e311c7Virustotal results 30.51%SilentBuilder
2022-01-12272226_182567.xlsmxls aa0e36780912b94ce9abefe196de12d6f4097dbc7fa864d24778638043de4084n/a SilentBuilder
2022-01-1257525433146194.xlsmxls 046d125d4eaf4ae30ad4a794405fd7c905b58db18824dfbe24dff1cd4cfd13b6Virustotal results 30.51% SilentBuilder
2022-01-12C_5279420.xlsmxls 796cb1dfe07dac51d9dd955ef372b6283adbfc38e34c92ee379fff29c89bacceVirustotal results 27.12%SilentBuilder
2022-01-1263574_780691.xlsmxls 8642a84875b30eeae2bec0b16db37715f4a2ff15caf6e5185a4012107ec1e87bVirustotal results 26.67%SilentBuilder
2022-01-125192_53299.xlsmxls 926c822e2c4d78b252f788d3fa75a77bfed1380ad50cdacf21f3efddf15b0b26n/aSilentBuilder
2022-01-12MJL-96109874.xlsmxls 1b7581c8be4bf9197005067c42e581bcc1c41b10d6d9768daa8c4642f6e3ef7bn/a SilentBuilder
2022-01-1272463066_2044.xlsmxls f7d338277f13461262faa21c960479146f4261acc6efe564964f5cd0370afd6en/a SilentBuilder
2022-01-123665851199407.xlsmxls 59f00806db4a68a10acb6aa0f9ea1d21c2e8527ff2b82d0ab36196ba0bda9183n/aSilentBuilder
2022-01-114418579603610.xlsmxls 034eaef52f3dc5154e7a94121703ea759fd19784df604e48c8e73ff4fa06cfdan/aHeodo
2022-01-11KLH-9.xlsmxls b5207887a27a42330a6b8e863e0550008a6375de1f4c9c6c0edcc7a9bb6d548fn/aSilentBuilder
2022-01-1147_357.xlsmxls a7fe36211a0be63df4c3929830b8fc4e21fc0548b5446377ce9c83b3d1fd9339Virustotal results 20.00%SilentBuilder
2022-01-11NME81030083.xlsmxls 0174c6534f42113ca8854a6ae91e267fb1915bb32b5760b52bbb551aa1580da2n/a Heodo
2022-01-11DoZ_8.xlsmxls 4732ca576ac4a1b57726b01684356326dabe72f56f1f90308801953e421ce1dfVirustotal results 18.33% Heodo
2022-01-11648639963541121.xlsxls a88137e6086255207269b721d3cdb9d6a67cbb8861ba98d4681f83945fa29299n/a SilentBuilder
2022-01-11W2836936475665.xlsxls dc1a568534305e8dd82443bd62f3fefe364de2073558c8237bbe099593714259Virustotal results 16.67%SilentBuilder
2022-01-11960687941259V.xlsxls c7cc8c98988b0b5cdbd103db7c61f01a6e92f96f525c36f15bfaae039bb46cd7Virustotal results 16.95% Heodo
2022-01-1162561129978371.xlsxls 416e811b6839dbe39092f82dbb62064350da5400ce2e1fd94870f305f5b2b77dVirustotal results 16.95%SilentBuilder
2022-01-1107949297739T.xlsxls 5f92249e79cd23d3c654651ded3d14a67529e851b3652e1f9c767ffb0c7127f0n/a SilentBuilder
2022-01-1123020543156305468892.xlsxls 067076b82d8006677b674411e2ac9d00f6b68e93ff460cb2f113d9150e73a88cn/a SilentBuilder
2022-01-1108949075530276465407F.xlsxls 3d2ad015f60956cee32029cb7d6fee846f34a91d0f6dae2b68cfde31c99b4a77n/aHeodo
2022-01-1131668324147721Y.xlsxls e9a7a09bdacc562bedc71638c17bacb72b445281366d192033d7c8c85f83ce7fn/a SilentBuilder
2022-01-11K5553002251.xlsxls fbc4a5db3ab48741c10a226dae4e2b64d924110962224bef57910478251cf3c7n/aSilentBuilder
2022-01-11Y9973403267979511724Y.xlsxls 60fdf680c8e0272784588bf87ead2814df683a2fcb697522ddd4ef323166440an/a SilentBuilder
2022-01-11Z23256951.xlsxls e540aa4c8a0a7eb9acf80aa3e76a804c5f492a69e052e33584c0ce432b33de75n/a SilentBuilder
2022-01-113764238777878873.xlsxls 1e4e0feb94cf74d61c7557fd8b7883f71b80547083bc339bc808b9703d4c03c1n/aSilentBuilder
2022-01-11X5768106244427.xlsxls 14e585c42b502e7e5ba9cd07618751748e748fd0a938c114c51a379de2d1082bn/aSilentBuilder
2022-01-11360876725057K.xlsxls 659c21119c192bd5c4c698d0e9c0ef6c5d0ed38bf40907318ccbc4dece45ec76n/aSilentBuilder
2022-01-11028039969Y.xlsxls 1cdf6133fd1d4138849b8f2b29f199d90ccce54c369b74a88a14e8329e1051c3n/aHeodo
2022-01-11A40888971176003484M.xlsxls 9e3e47f20134301b475d2d5477000f2ff061b7e2ccf7c02aa892d300c3da3b36n/a SilentBuilder
2022-01-11747091019.xlsxls d4ab41fa48cb03ac55da7c05e857ea1b5a88a2b31cde074f3036f6129662a10fn/a SilentBuilder
2022-01-1174792502007269452.xlsxls 2b6937e90b3f57eb3f26b8a3f50b86def03b2d4b3bc30d93e1af1c96656bb4dan/aHeodo
2022-01-11O0141844297525353X.xlsxls 17832170dc965d40f1a4b7b5abf6dd5f8d131468c82c281388bf6f6967b77490Virustotal results 18.33%SilentBuilder
2022-01-11620206916631903333669.xlsxls b53a3f09073ba4c63f1634b32bc6328f22d9965ebc1384797a886d07959313fan/aSilentBuilder
2022-01-11299386251130.xlsxls 89224af568d4e29e7836c2961d33045490b337a9d5d40db852137e1f2dbbfbf9Virustotal results 12.50%SilentBuilder
2022-01-11N994610584016594357556S.xlsxls 645258c3eec8a24b056403664b65d66c43f78566a0f33270723a6edc4d0c7ed8n/a SilentBuilder
2022-01-11203732938809095088C.xlsxls 06b383970ed4fab68a430bc021dd0744b77518ec82ef09f6d167c8edbf50fd53Virustotal results 15.00% SilentBuilder
2022-01-1154812456974656389.xlsxls a672f734a98a5b287eb96d134893701f055f20573dd9f9d778b1e7953b00a944Virustotal results 16.67%SilentBuilder
2022-01-110896196459489.xlsxls c17cf152edefc6ce2ed0a5fa783f3bbfd6348b41a22f0da9cdd2722311ddfd62n/a Heodo
2022-01-117492704879331.xlsxls 54517f5914c526589a1b1ad61249c75209d239c1885cd72f638d9924d53983den/aSilentBuilder
2022-01-11Q1239500277280549J.xlsxls f218c6867a0a060d313d1592c39f606f2193f4d587a404b4372971a6344d0f16Virustotal results 16.67% SilentBuilder
2022-01-11227180073134721O.xlsxls 2c100919fb5cad55230897d07dbce3bc2b04df71b4776e51ea5d68390e308b40n/a Heodo
2022-01-11J79462304024015963.xlsxls 244e38598a1d03f533889b35b310f7e2a83cbf5b57b93c116b57a73482176a22n/a SilentBuilder