URLhaus Database

You are currently viewing the URLhaus database entry for http://bawatingbarter.com/wp-admin/Hj7/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1967322
URL: http://bawatingbarter.com/wp-admin/Hj7/?i=1
URL Status:Offline
Host: bawatingbarter.com
Date added:2022-01-11 13:47:06 UTC
Last online:2023-07-20 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2022-01-11 13:48:09 UTC to sandro{at}canaca[dot]com)
Takedown time:1 year, 6 month, 14 days, 14 hours, 34 minutes Bad (down since 2023-07-20 04:22:48 UTC)
Tags:emotet link epoch4 heodo link SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-12589756591_6579.xlsmxls 769ecd4d91e53cc734ede1b06a3935096e838020e44061032964dd769dda3968Virustotal results 28.81%SilentBuilder
2022-01-1262339_2.xlsmxls 9b11e81f1bfc3f451bbdd806e824f0d31da068337b6cb9917dd053e1ee6f1e80n/a SilentBuilder
2022-01-12277972-91756.xlsmxls 926c822e2c4d78b252f788d3fa75a77bfed1380ad50cdacf21f3efddf15b0b26Virustotal results 26.67%SilentBuilder
2022-01-12482159180-10.xlsmxls 9d277bf6e9b937c6b9d79db16b78f65ef5346b79c5c68fd3fda71a4e18171fe7Virustotal results 23.33% SilentBuilder
2022-01-122492_40.xlsmxls f7d338277f13461262faa21c960479146f4261acc6efe564964f5cd0370afd6en/a SilentBuilder
2022-01-1201192861_2586049.xlsmxls 59f00806db4a68a10acb6aa0f9ea1d21c2e8527ff2b82d0ab36196ba0bda9183n/aSilentBuilder
2022-01-113496883393.xlsmxls 66f5d61a2c4246c3bc39141c46e41bdc84c3f12a7db0b2ec3090eace070392d6n/a SilentBuilder
2022-01-112101GJKXDQVXJ_17.xlsmxls b5207887a27a42330a6b8e863e0550008a6375de1f4c9c6c0edcc7a9bb6d548fn/aSilentBuilder
2022-01-1172141_46576732.xlsmxls 207177c3c5eb0fe56e8614f9107063106f39167ae239ada435312ba0455fe349n/aSilentBuilder
2022-01-1199998226EXUQW-83985.xlsmxls 9b3fb2f88edc75661d9aba9ccac4bd15607dbf2fa7542c47be3d533c0db5cbe5Virustotal results 18.33%SilentBuilder
2022-01-116708908-7244.xlsmxls 14222deeec10d32091a2947e045833bd25c041a662f4090df26e50381cf922c6n/a Heodo
2022-01-1153871798P.xlsxls a88137e6086255207269b721d3cdb9d6a67cbb8861ba98d4681f83945fa29299n/a SilentBuilder
2022-01-11403138521811459229494E.xlsxls 8ea7ac4cc4dd1576b45451813ade47420f9196a212e173e174aada937cb8f4a7n/a SilentBuilder
2022-01-11K44401624068I.xlsxls 1db259b0063d26f9af684e7246d336250e289514a4e900eab1337ee9981a866bn/a Heodo
2022-01-113556218109.xlsxls b5d8116e0b4f01eb2affa09d857d1be4df2e18dd793e4ab0b6ad28e0d5eadc15Virustotal results 13.33%Heodo
2022-01-11Y2856515.xlsxls b3a64afe3a1360279c7354909eb0733a15870549ca068a851cb8dc7b672ee168n/a SilentBuilder
2022-01-11320684824B.xlsxls 426fda840765e44250686f1102e902242babe0cea36a756beac6c0757a73c28an/a SilentBuilder
2022-01-118253657198T.xlsxls e8ada03261f05e1c91d784bf58d10322d3765c686bb4a52278362e0e62288d1bn/a SilentBuilder
2022-01-112281766131.xlsxls afe04f54612c86612a56bf8a3a228a2aeae275f4730552228f8a4bb6f71c292eVirustotal results 20.69%SilentBuilder
2022-01-11Z4784467Y.xlsxls fbc4a5db3ab48741c10a226dae4e2b64d924110962224bef57910478251cf3c7n/aSilentBuilder
2022-01-11097022626.xlsxls 60fdf680c8e0272784588bf87ead2814df683a2fcb697522ddd4ef323166440aVirustotal results 15.52% SilentBuilder
2022-01-1176522833K.xlsxls e540aa4c8a0a7eb9acf80aa3e76a804c5f492a69e052e33584c0ce432b33de75n/a SilentBuilder
2022-01-11P274030505.xlsxls 1e4e0feb94cf74d61c7557fd8b7883f71b80547083bc339bc808b9703d4c03c1n/aSilentBuilder
2022-01-11F88191384H.xlsxls 0c9de24621d73ddfb33b0d2607b84d523a103ff59e318980f134dac1726e11a6n/a SilentBuilder
2022-01-1167647773.xlsxls 0237b96acc934eba1b920d0b6fa654c22128101417298a9f940ca2e53c85dab9n/aHeodo
2022-01-11261719509725978.xlsxls b68760371e947df68d4f69a1f9b43a56de082932df771b0ef088adaae130931cn/a SilentBuilder
2022-01-11O375636611.xlsxls 7955874a069fbde3eb5144ea8420f8b9e80d0c8ccd822c21b54150e53608116cn/aSilentBuilder
2022-01-1162404717294Z.xlsxls 2f80ecbe8f3eb45c354fb36640dc4be6b13064be8550f2d49e41090e5c113b72n/aHeodo
2022-01-11428404288.xlsxls 445e137304a2c43b06f0c98f4655f6fc4d69db7ae73ddf9094295c48f0701047n/a SilentBuilder
2022-01-116080501675610973Z.xlsxls bdb3e9a556bc850867023c8e1c5ea1e20cda48c72bd0396ef667d3352b14d65fn/aSilentBuilder
2022-01-11O2949249962F.xlsxls bcd9548679c87026f7119b2a46f731fa2d1c20fdd1ba546f5e20281b30ade8e9Virustotal results 16.67% Heodo
2022-01-11R1803069133.xlsxls 12db004e136ba9f8fd95d9d6e3a08d5b3cfde159c0ca3f99a75df8922fbdcd85n/a SilentBuilder
2022-01-11C28459020740.xlsxls b5772788406d55232df72c3ea2ae90ecda40f165c5246b1328bc173905630adan/a SilentBuilder
2022-01-11U1447284.xlsxls 474cb0554cd5fb8976244c74a115a07164b25952cbbe6e7868a99045b435f535n/a SilentBuilder
2022-01-1111809209508018.xlsxls 47a014028cebed64173cb46e977d3e69a2e2f9093b15d2b3e4aecb9d9edce1a3n/aSilentBuilder