URLhaus Database

You are currently viewing the URLhaus database entry for http://contentality.com/wp-admin/kfxgMXH3zuSQ4r/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1967183
URL: http://contentality.com/wp-admin/kfxgMXH3zuSQ4r/?i=1
URL Status:Offline
Host: contentality.com
Date added:2022-01-11 13:00:05 UTC
Last online:2023-01-21 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2023-01-21 09:21:07 UTC to abuse{at}amazonaws[dot]com)
Takedown time:1 year, 0 month, 14 days, 20 hours, 53 minutes Bad (down since 2023-01-21 09:54:59 UTC)
Tags:emotet link epoch4 heodo link SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-139678807_0324.xlsmxls e74813a3530752434c9dae40f5f1cbd367cc16a541547e3a2d5b35295539390dVirustotal results 30.00%Heodo
2022-01-113396667044.xlsxls 1e4e0feb94cf74d61c7557fd8b7883f71b80547083bc339bc808b9703d4c03c1n/aSilentBuilder
2022-01-11P0976109731468130520W.xlsxls e99c27037595f4931d753f7e372cbad60953e56c327d9ea2a2c3042db0f5f4e4Virustotal results 18.64%SilentBuilder
2022-01-114147313429738828090S.xlsxls 37e872cc3b4e9e0f9e1472f6865ac985496582ef138fd1646fe13bd14bb92c0fn/a Heodo
2022-01-1199656501201502451931.xlsxls 1289c645dc8d8ff1a81ca74c01191f7f2deaa2b0b5337e534dc094a4510fd865n/aSilentBuilder
2022-01-1169691390801025969615.xlsxls 7955874a069fbde3eb5144ea8420f8b9e80d0c8ccd822c21b54150e53608116cn/aSilentBuilder
2022-01-11G848777190077.xlsxls 7dcde20dd26c5388d734d658830ebb48bf5c1170cf9ec39a3e084d8e728715e8Virustotal results 16.67%Heodo
2022-01-11W71650393175864281939.xlsxls 445e137304a2c43b06f0c98f4655f6fc4d69db7ae73ddf9094295c48f0701047n/a SilentBuilder
2022-01-113330763V.xlsxls 0a0fe064ed83d5fb4be5577a78d4659be6d7fec5ee345f01edda10c2e6221868n/aHeodo
2022-01-114481951628403.xlsxls bcd9548679c87026f7119b2a46f731fa2d1c20fdd1ba546f5e20281b30ade8e9Virustotal results 16.67% Heodo
2022-01-11K915142612526J.xlsxls 2b3edf1dce5ad17220c402308e28a5f2ca0032703557b04aa816d53bb30bb97cn/a SilentBuilder
2022-01-11L2443886.xlsxls bd70c3c5fc66e6e16f357179f6a76273bfd128d8f203716b035864ca4a4806een/a SilentBuilder
2022-01-11R33804392343859T.xlsxls cab722a553d0e662a2c4e18e2300d30338fa957f7b0ade2c8f4450bd375bb8f9Virustotal results 16.67%SilentBuilder
2022-01-1155351782.xlsxls b6695d0c24ee697dc9605c2f66c2f6c0688b9546bb2957505b238040001a1acbVirustotal results 13.33%SilentBuilder
2022-01-1147148731283.xlsxls f0ca4bbe2594076644e5f27040111f3f422d61a3268078140077095c40d8dd6bn/a Heodo
2022-01-11F4716832E.xlsxls be0b11916ecb4101f05770478b70375165650d7ea4330c4e9c98c407058de722n/a SilentBuilder