URLhaus Database

You are currently viewing the URLhaus database entry for https://trendytomato.in/b/8dVnzMqfklU0O/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1967739
URL: https://trendytomato.in/b/8dVnzMqfklU0O/?i=1
URL Status:Offline
Host: trendytomato.in
Date added:2022-01-11 16:37:05 UTC
Last online:2022-01-12 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-11 16:38:09 UTC to abuse{at}cloudflare[dot]com)
Takedown time:14 hours, 55 minutes Good (down since 2022-01-12 07:33:44 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1214391034_158.xlsmxls 034eaef52f3dc5154e7a94121703ea759fd19784df604e48c8e73ff4fa06cfdaVirustotal results 27.27%Heodo
2022-01-11TC-84170.xlsmxls 66f5d61a2c4246c3bc39141c46e41bdc84c3f12a7db0b2ec3090eace070392d6n/a SilentBuilder
2022-01-11557RRWTI-601157.xlsmxls b5207887a27a42330a6b8e863e0550008a6375de1f4c9c6c0edcc7a9bb6d548fVirustotal results 16.67%SilentBuilder
2022-01-11TZI_012949.xlsmxls a7fe36211a0be63df4c3929830b8fc4e21fc0548b5446377ce9c83b3d1fd9339Virustotal results 20.00%SilentBuilder
2022-01-11dp_8072.xlsmxls 9b3fb2f88edc75661d9aba9ccac4bd15607dbf2fa7542c47be3d533c0db5cbe5n/aSilentBuilder
2022-01-110805307_8900246.xlsmxls 4732ca576ac4a1b57726b01684356326dabe72f56f1f90308801953e421ce1dfVirustotal results 18.33% Heodo
2022-01-110855627406565G.xlsxls 446d074d88398efd9a59c8bdabf3f4909ae1bc5c12c418b98c3f185459844fafn/a SilentBuilder
2022-01-1133014366.xlsxls 9ade9daf48cb63c929cd8e7ec03ac77ed41d362efaa79453d0eda4553747c404Virustotal results 18.33%SilentBuilder
2022-01-11F84828803410974059521G.xlsxls 1db259b0063d26f9af684e7246d336250e289514a4e900eab1337ee9981a866bVirustotal results 21.67% Heodo
2022-01-117152549793841393M.xlsxls fd3087fa953ec989caff35845ec2bc3cc41303ac26e0f0d0b8e25a325fee3a29n/aSilentBuilder
2022-01-1176451481732030315C.xlsxls e8b123fd61bfeabe7b45797f6cceaef77207d8d93d2a2b38065976603120c558Virustotal results 20.00%SilentBuilder
2022-01-11576115281.xlsxls 03319a0f6c37911983650f91c2a01b29eac84b17bd99133626d11d08952ad9d4n/aSilentBuilder
2022-01-11T69138889N.xlsxls e8ada03261f05e1c91d784bf58d10322d3765c686bb4a52278362e0e62288d1bn/a SilentBuilder
2022-01-11U89695621319552997H.xlsxls 7b273da870150fa002d6651be951c45565ecfb209c9516b78a60d5e6274d4f9cn/a SilentBuilder
2022-01-111310419673186864.xlsxls 18e24e9b03fde05fa41b9d86aa612dbbd5deabcebbe97ee5b3a3b7fa8fb43f51n/aSilentBuilder
2022-01-11D8276788I.xlsxls 60fdf680c8e0272784588bf87ead2814df683a2fcb697522ddd4ef323166440aVirustotal results 15.52% SilentBuilder
2022-01-1190192663306168449J.xlsxls e540aa4c8a0a7eb9acf80aa3e76a804c5f492a69e052e33584c0ce432b33de75n/a SilentBuilder
2022-01-11351416379344512104K.xlsxls 1e4e0feb94cf74d61c7557fd8b7883f71b80547083bc339bc808b9703d4c03c1n/aSilentBuilder
2022-01-1108089646.xlsxls 0c9de24621d73ddfb33b0d2607b84d523a103ff59e318980f134dac1726e11a6Virustotal results 16.67% SilentBuilder
2022-01-11199801596241322478.xlsxls 37e872cc3b4e9e0f9e1472f6865ac985496582ef138fd1646fe13bd14bb92c0fn/a Heodo
2022-01-1135071533634146847.xlsxls 1289c645dc8d8ff1a81ca74c01191f7f2deaa2b0b5337e534dc094a4510fd865n/aSilentBuilder