URLhaus Database

You are currently viewing the URLhaus database entry for https://destinationone.uk/wp-content/e6t055TU/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1967159
URL: https://destinationone.uk/wp-content/e6t055TU/?i=1
URL Status:Offline
Host: destinationone.uk
Date added:2022-01-11 12:51:05 UTC
Last online:2022-01-11 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2022-01-11 12:52:20 UTC to abuse{at}cloudflare[dot]com)
Takedown time:5 days, 22 hours, 16 minutes Bad (down since 2022-01-17 11:09:06 UTC)
Tags:emotet link epoch4 heodo link SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-12mKUzih_732871.xlsmxls d3d61558116adba228714e7e660ef421ae85b439fd2224a440e617fdeae70987Virustotal results 27.12%SilentBuilder
2022-01-12KAGSR_007.xlsmxls ca65e9146957f09c7cdbb479666279a91d9065b309e29fea80fc5e3b7bd49393Virustotal results 28.33% SilentBuilder
2022-01-1288446998QSVV_8407.xlsmxls ecaa8fa10f2e5726552f68f4c691133bb782d791b23c96e2c26b5c4838a00e68Virustotal results 28.33%SilentBuilder
2022-01-12VDYZS-73816.xlsmxls 894ae1ab382fe85d09096d1997f468b8e5f327326c39e15bd1ba47f4c4d2f14fn/a Heodo
2022-01-12qtQ_21826408.xlsmxls a196a7f762ccc713b4c96a96ad4d8d50c3a27964758730b87741f65f609c91abn/a SilentBuilder
2022-01-12514628_53963.xlsmxls 05dc48ca9e5d5feb04a32c1ef3a8d18453a2a679e7257ce24856895a5dea268bn/aSilentBuilder
2022-01-114983_98381.xlsmxls 66f5d61a2c4246c3bc39141c46e41bdc84c3f12a7db0b2ec3090eace070392d6Virustotal results 22.03% SilentBuilder
2022-01-11ALTNG207.xlsmxls b5207887a27a42330a6b8e863e0550008a6375de1f4c9c6c0edcc7a9bb6d548fn/aSilentBuilder
2022-01-11851332.xlsmxls a7fe36211a0be63df4c3929830b8fc4e21fc0548b5446377ce9c83b3d1fd9339Virustotal results 20.00%SilentBuilder
2022-01-11712993786_48815131.xlsmxls 9b3fb2f88edc75661d9aba9ccac4bd15607dbf2fa7542c47be3d533c0db5cbe5n/aSilentBuilder
2022-01-11098548_31.xlsmxls 14222deeec10d32091a2947e045833bd25c041a662f4090df26e50381cf922c6n/a Heodo
2022-01-1198882091W.xlsxls 446d074d88398efd9a59c8bdabf3f4909ae1bc5c12c418b98c3f185459844fafn/a SilentBuilder
2022-01-11I3465483135880818Q.xlsxls 8ea7ac4cc4dd1576b45451813ade47420f9196a212e173e174aada937cb8f4a7n/a SilentBuilder
2022-01-1172539724168418350.xlsxls c7cc8c98988b0b5cdbd103db7c61f01a6e92f96f525c36f15bfaae039bb46cd7n/a Heodo
2022-01-11723682826601731823569.xlsxls b5d8116e0b4f01eb2affa09d857d1be4df2e18dd793e4ab0b6ad28e0d5eadc15Virustotal results 13.33%Heodo
2022-01-11332515646.xlsxls d92b0ebb1f64086c8c4d5b238f3683a3319bcf041cdfc9e6736f742a260a5ce2Virustotal results 23.73%SilentBuilder
2022-01-1198052524.xlsxls 067076b82d8006677b674411e2ac9d00f6b68e93ff460cb2f113d9150e73a88cn/a SilentBuilder
2022-01-119345827.xlsxls 3f4ddde39dc20ae5a2558fe48b7341187c1bba0dbd1c95a32644b14592a38653n/a SilentBuilder
2022-01-1101352690338678126.xlsxls 24160ff88a8c4ee8d12c4cad09dbd7e744c2bf1bfd24b636cb436cb047d3324dn/aSilentBuilder
2022-01-112980609109.xlsxls afe04f54612c86612a56bf8a3a228a2aeae275f4730552228f8a4bb6f71c292eVirustotal results 20.69%SilentBuilder
2022-01-116959842350858.xlsxls 18e24e9b03fde05fa41b9d86aa612dbbd5deabcebbe97ee5b3a3b7fa8fb43f51n/aSilentBuilder
2022-01-11X51919069122188.xlsxls 5567612a01ddde62a81334d73dc09a4e0f78d8e552d2686d44eb3e3910ecf13dVirustotal results 18.33%SilentBuilder
2022-01-11G33540770953274.xlsxls b8600d1365521e1a2f83ae356900d38cf8c44b60594bbe30df2ac04418cd823en/aSilentBuilder
2022-01-11E4798295462995.xlsxls 1e4e0feb94cf74d61c7557fd8b7883f71b80547083bc339bc808b9703d4c03c1n/aSilentBuilder
2022-01-1169013217519879121.xlsxls 14e585c42b502e7e5ba9cd07618751748e748fd0a938c114c51a379de2d1082bVirustotal results 18.64%SilentBuilder
2022-01-11O651616417.xlsxls 0237b96acc934eba1b920d0b6fa654c22128101417298a9f940ca2e53c85dab9n/aHeodo
2022-01-1121516847.xlsxls 1289c645dc8d8ff1a81ca74c01191f7f2deaa2b0b5337e534dc094a4510fd865n/aSilentBuilder
2022-01-11T48854325131442051.xlsxls 7955874a069fbde3eb5144ea8420f8b9e80d0c8ccd822c21b54150e53608116cn/aSilentBuilder
2022-01-11W66579360373N.xlsxls 0b52372793be51e4313df2cb64a2b43650e47eb55920506fa6ac3f0726da0a89n/aSilentBuilder
2022-01-11S62322107532007F.xlsxls 0a0fe064ed83d5fb4be5577a78d4659be6d7fec5ee345f01edda10c2e6221868n/aHeodo
2022-01-118198156134.xlsxls bcd9548679c87026f7119b2a46f731fa2d1c20fdd1ba546f5e20281b30ade8e9Virustotal results 16.67% Heodo
2022-01-11Q54813250.xlsxls 12db004e136ba9f8fd95d9d6e3a08d5b3cfde159c0ca3f99a75df8922fbdcd85n/a SilentBuilder
2022-01-11I960878849226269136.xlsxls 361e7457bfd87680419fd11b82e2c11ba668205e8421b38cfcb7e879e5267ddan/aSilentBuilder
2022-01-11W1100845331117.xlsxls 474cb0554cd5fb8976244c74a115a07164b25952cbbe6e7868a99045b435f535n/a SilentBuilder
2022-01-11S52531733.xlsxls b6695d0c24ee697dc9605c2f66c2f6c0688b9546bb2957505b238040001a1acbn/aSilentBuilder
2022-01-11R76093972907924K.xlsxls f0ca4bbe2594076644e5f27040111f3f422d61a3268078140077095c40d8dd6bn/a Heodo
2022-01-11P44066699A.xlsxls be0b11916ecb4101f05770478b70375165650d7ea4330c4e9c98c407058de722n/a SilentBuilder
2022-01-11861187026539370650E.xlsxls a8085602b4f2d9fa12e7cdc848185b57baef023cbe353df862fac4ff279cf3f4n/aSilentBuilder