URLhaus Database

You are currently viewing the URLhaus database entry for http://childcustodyjustice.com/assets/PSSyClK/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1967312
URL: http://childcustodyjustice.com/assets/PSSyClK/?i=1
URL Status:Offline
Host: childcustodyjustice.com
Date added:2022-01-11 13:42:07 UTC
Last online:2023-01-21 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2023-01-21 06:18:05 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:1 year, 0 month, 14 days, 20 hours, 36 minutes Bad (down since 2023-01-21 10:19:17 UTC)
Tags:emotet link epoch4 heodo link SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1274615594_05469.xlsmxls 05dc48ca9e5d5feb04a32c1ef3a8d18453a2a679e7257ce24856895a5dea268bn/aSilentBuilder
2022-01-11L-49052.xlsmxls 66f5d61a2c4246c3bc39141c46e41bdc84c3f12a7db0b2ec3090eace070392d6Virustotal results 22.03% SilentBuilder
2022-01-114726QCEWYDIOGL700536.xlsmxls bb32c9472ef2faeae273e266c7fd2dd749d5b200affe3e0e3d3cbacd4cf6e904n/aSilentBuilder
2022-01-1174494-07.xlsmxls d616af039b685a1e393e85dfd6d3558a0a062fc2cd776bfdbfd55dd1cca9e55en/a SilentBuilder
2022-01-11eryil_37622070.xlsmxls e48f10cc12e08a32f523982c024f49dca076b06c6bd47b5cdf3d43aee5097091n/aHeodo
2022-01-11fLDTca_19.xlsmxls 12e3064b327fef718bd5c25b6d26ad24846b3612bfff59eb566107d957b9f854n/a SilentBuilder
2022-01-117651840328.xlsxls b6221570f7605955141baf72141654a10cd2269e0c9c328fd7339bd40b4f83dcVirustotal results 16.67% SilentBuilder
2022-01-11M9200774.xlsxls 0bce8c631bc35e734c8be9fefb75ea3ce0e66a22e217c7ff6385afb1df2d0878n/a SilentBuilder
2022-01-11T0115389O.xlsxls 0e98916f880d74b048dab77d3d3ec4e6874ce24e9b297dd68f63469d3ca86d42Virustotal results 16.67%SilentBuilder
2022-01-11362355574607078263593.xlsxls 416e811b6839dbe39092f82dbb62064350da5400ce2e1fd94870f305f5b2b77dVirustotal results 16.95%SilentBuilder
2022-01-11J2090587O.xlsxls d92b0ebb1f64086c8c4d5b238f3683a3319bcf041cdfc9e6736f742a260a5ce2n/aSilentBuilder
2022-01-11P115610231572084014606.xlsxls 1ee39644692931c717336eb3e00db7e82c9a27e987a8931e45d3eca7abd009c1n/a Heodo
2022-01-11V749569597E.xlsxls a43e422bf49682cd2dd5c53f5e3c8b8712c76cd9f082309e92decc55f0f8f92en/aHeodo
2022-01-1120596266215J.xlsxls afe04f54612c86612a56bf8a3a228a2aeae275f4730552228f8a4bb6f71c292en/aSilentBuilder
2022-01-11X97340270995117776G.xlsxls a5a1c304ab3b2351a82da736cf9c022ea2ad1cbff6321b64b0a741b575c8a6c4Virustotal results 18.64% SilentBuilder
2022-01-11401431375.xlsxls 60fdf680c8e0272784588bf87ead2814df683a2fcb697522ddd4ef323166440aVirustotal results 15.52% SilentBuilder
2022-01-11J2153207V.xlsxls e540aa4c8a0a7eb9acf80aa3e76a804c5f492a69e052e33584c0ce432b33de75n/a SilentBuilder
2022-01-11188071648745250348399U.xlsxls 1e4e0feb94cf74d61c7557fd8b7883f71b80547083bc339bc808b9703d4c03c1n/aSilentBuilder
2022-01-11061611707491288457.xlsxls 14e585c42b502e7e5ba9cd07618751748e748fd0a938c114c51a379de2d1082bVirustotal results 18.64%SilentBuilder
2022-01-11I0400834584917901U.xlsxls 37e872cc3b4e9e0f9e1472f6865ac985496582ef138fd1646fe13bd14bb92c0fn/a Heodo
2022-01-11S94448719904.xlsxls b68760371e947df68d4f69a1f9b43a56de082932df771b0ef088adaae130931cn/a SilentBuilder
2022-01-118711693357220198944.xlsxls a6854cf37029a39a9a86de7f468e16d520cc046bef6fcd50290cd7c19843cd74n/aHeodo
2022-01-11B23403974298337311842.xlsxls 7955874a069fbde3eb5144ea8420f8b9e80d0c8ccd822c21b54150e53608116cn/aSilentBuilder
2022-01-11E2308712.xlsxls 445e137304a2c43b06f0c98f4655f6fc4d69db7ae73ddf9094295c48f0701047n/a SilentBuilder
2022-01-11D454056361163.xlsxls 0a0fe064ed83d5fb4be5577a78d4659be6d7fec5ee345f01edda10c2e6221868n/aHeodo
2022-01-1141692835660816054395.xlsxls bcd9548679c87026f7119b2a46f731fa2d1c20fdd1ba546f5e20281b30ade8e9Virustotal results 16.67% Heodo
2022-01-11859464321548815498.xlsxls 2b3edf1dce5ad17220c402308e28a5f2ca0032703557b04aa816d53bb30bb97cn/a SilentBuilder
2022-01-1155957027224161425693B.xlsxls bd70c3c5fc66e6e16f357179f6a76273bfd128d8f203716b035864ca4a4806een/a SilentBuilder
2022-01-11774177454701697.xlsxls 474cb0554cd5fb8976244c74a115a07164b25952cbbe6e7868a99045b435f535n/a SilentBuilder
2022-01-11N663051370539927.xlsxls b6695d0c24ee697dc9605c2f66c2f6c0688b9546bb2957505b238040001a1acbVirustotal results 13.33%SilentBuilder