URLhaus Database

You are currently viewing the URLhaus database entry for http://a-z-riken.co.jp/wp-includes/RMxQYBvM/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1967329
URL: http://a-z-riken.co.jp/wp-includes/RMxQYBvM/?i=1
URL Status:Offline
Host: a-z-riken.co.jp
Date added:2022-01-11 13:49:09 UTC
Last online:2022-01-20 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-11 13:50:07 UTC to abuse{at}gmo[dot]jp)
Takedown time:9 days, 1 hours, 0 minutes Bad (down since 2022-01-20 14:50:42 UTC)
Tags:emotet link epoch4 heodo link SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-12RIU-142.xlsmxls 796cb1dfe07dac51d9dd955ef372b6283adbfc38e34c92ee379fff29c89bacceVirustotal results 27.12%SilentBuilder
2022-01-12201757728015275.xlsmxls d70eea3a457a572c1ee00b87e0c62ad39c9a8307340a7bff3bae0a08ade7c556n/aSilentBuilder
2022-01-12xsbzbsu-4739654.xlsmxls ecaa8fa10f2e5726552f68f4c691133bb782d791b23c96e2c26b5c4838a00e68Virustotal results 28.33%SilentBuilder
2022-01-12398588672.xlsmxls c51d8cb997287ed9a94d3d5dfd322c073e1eeea0634bfe18f7d92a3d7fd85543n/a Heodo
2022-01-12wppero80544921.xlsmxls a196a7f762ccc713b4c96a96ad4d8d50c3a27964758730b87741f65f609c91abn/a SilentBuilder
2022-01-12tP403737.xlsmxls 05dc48ca9e5d5feb04a32c1ef3a8d18453a2a679e7257ce24856895a5dea268bn/aSilentBuilder
2022-01-11JKDkn-945.xlsmxls 66f5d61a2c4246c3bc39141c46e41bdc84c3f12a7db0b2ec3090eace070392d6n/a SilentBuilder
2022-01-11HJI_54.xlsmxls b5207887a27a42330a6b8e863e0550008a6375de1f4c9c6c0edcc7a9bb6d548fn/aSilentBuilder
2022-01-11170_66282.xlsmxls d616af039b685a1e393e85dfd6d3558a0a062fc2cd776bfdbfd55dd1cca9e55en/a SilentBuilder
2022-01-11TBG-47928.xlsmxls e48f10cc12e08a32f523982c024f49dca076b06c6bd47b5cdf3d43aee5097091Virustotal results 16.67%Heodo
2022-01-11E85345609.xlsmxls 1b07cb00b2a9790fd3d3dbc858112dc7308a0fa920fbc8a8ba019af5ea216752n/aHeodo
2022-01-1159647846I.xlsxls 244f3b421f675868b3b87f562c2b307e3f4c3b914d67008406a8f9ed0594b4c1n/aSilentBuilder
2022-01-1153217809815376B.xlsxls dc1a568534305e8dd82443bd62f3fefe364de2073558c8237bbe099593714259Virustotal results 16.67%SilentBuilder
2022-01-11A773681074046231539413W.xlsxls c7cc8c98988b0b5cdbd103db7c61f01a6e92f96f525c36f15bfaae039bb46cd7n/a Heodo
2022-01-11B32482778V.xlsxls b5d8116e0b4f01eb2affa09d857d1be4df2e18dd793e4ab0b6ad28e0d5eadc15Virustotal results 13.33%Heodo
2022-01-11M7916239878908U.xlsxls b3a64afe3a1360279c7354909eb0733a15870549ca068a851cb8dc7b672ee168n/a SilentBuilder
2022-01-11D624481083630.xlsxls 426fda840765e44250686f1102e902242babe0cea36a756beac6c0757a73c28an/a SilentBuilder
2022-01-11O8617388366U.xlsxls a0a6e55d2714273e7c3866776a187cc320e9bfa5086632fc12ed94db2efbfc3dVirustotal results 18.33%SilentBuilder
2022-01-1194255584.xlsxls 7b273da870150fa002d6651be951c45565ecfb209c9516b78a60d5e6274d4f9cVirustotal results 23.73% SilentBuilder
2022-01-117618430327338.xlsxls 18e24e9b03fde05fa41b9d86aa612dbbd5deabcebbe97ee5b3a3b7fa8fb43f51n/aSilentBuilder
2022-01-11U01697281373.xlsxls a5a1c304ab3b2351a82da736cf9c022ea2ad1cbff6321b64b0a741b575c8a6c4n/a SilentBuilder
2022-01-11695609835159972959.xlsxls e540aa4c8a0a7eb9acf80aa3e76a804c5f492a69e052e33584c0ce432b33de75n/a SilentBuilder
2022-01-11C343647744920.xlsxls 1e4e0feb94cf74d61c7557fd8b7883f71b80547083bc339bc808b9703d4c03c1n/aSilentBuilder
2022-01-115853096334.xlsxls 14e585c42b502e7e5ba9cd07618751748e748fd0a938c114c51a379de2d1082bn/aSilentBuilder
2022-01-111923401844659912X.xlsxls c5850b16a368ab7c8f2d03cebcc7dd51173a704cdd1d6c105ba43083a40b6063n/aSilentBuilder
2022-01-11552105962934458950W.xlsxls 788a3d46892b3580cf799d66bb7348a0d50ad1543027c036530fc0fe5135bac5n/a SilentBuilder
2022-01-11E991244257808242.xlsxls 9e3e47f20134301b475d2d5477000f2ff061b7e2ccf7c02aa892d300c3da3b36Virustotal results 17.24% SilentBuilder
2022-01-11609581198469521.xlsxls b4f4e361680cbe98e26106393beca73acc80418fdae4ab118917b7e8bd9fc917n/a Heodo
2022-01-11L46755167486.xlsxls 5b8d0b12d4a393432ef70e1832915b20c0a39b948c524ac301e3ae5f9794b84dVirustotal results 13.33%SilentBuilder
2022-01-11H312101159F.xlsxls 17832170dc965d40f1a4b7b5abf6dd5f8d131468c82c281388bf6f6967b77490Virustotal results 18.33%SilentBuilder
2022-01-1190957354114607E.xlsxls d2c48bc93b2b0711be6bafd81a7eeddc944514e110ef2e1014151dac42e8ab62n/a SilentBuilder
2022-01-11B4735158910494G.xlsxls 89224af568d4e29e7836c2961d33045490b337a9d5d40db852137e1f2dbbfbf9n/aSilentBuilder
2022-01-11192878277449036490D.xlsxls 2d88cf677aeabdb77c1e2b34f7bd793635d9c8254af25ad79e8fd14cb2490fcfn/a SilentBuilder
2022-01-11Z0855956651372G.xlsxls 536dbda1b94a2895f0cd8c5a95d08b931ddfaaa3ca8a0d476810d6c3488b27f6n/a SilentBuilder
2022-01-11N345996314.xlsxls 4b62cf1957992336ee9fec25094b8df5b72020ad18bb2bd11c1b43249dc00f4en/a SilentBuilder