URLhaus Database

You are currently viewing the URLhaus database entry for http://anko-st.info/vizowfvh/sja1W71eYTaTj7j/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1967754
URL: http://anko-st.info/vizowfvh/sja1W71eYTaTj7j/?i=1
URL Status:Offline
Host: anko-st.info
Date added:2022-01-11 16:43:06 UTC
Last online:2022-01-23 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-23 14:51:19 UTC to abuse{at}amazonaws[dot]com)
Takedown time:11 days, 22 hours, 31 minutes Bad (down since 2022-01-23 15:15:58 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-12c0044789.xlsmxls c468d97804e7a9fa569cfab4952c6fda72685adc622cec8aee02bb9c8f1a79aaVirustotal results 26.67% Heodo
2022-01-12193204781_8269.xlsmxls 796cb1dfe07dac51d9dd955ef372b6283adbfc38e34c92ee379fff29c89bacceVirustotal results 27.12%SilentBuilder
2022-01-12AAPT5.xlsmxls 8642a84875b30eeae2bec0b16db37715f4a2ff15caf6e5185a4012107ec1e87bVirustotal results 26.67%SilentBuilder
2022-01-12HU_4388300.xlsmxls 926c822e2c4d78b252f788d3fa75a77bfed1380ad50cdacf21f3efddf15b0b26n/aSilentBuilder
2022-01-1248186840_06515638.xlsmxls 1b7581c8be4bf9197005067c42e581bcc1c41b10d6d9768daa8c4642f6e3ef7bn/a SilentBuilder
2022-01-12bles_556.xlsmxls 9e0c891bd4b687d10b5c7d8082a2d4c7d24a0c9ea90b1d0aa09dafa6dee22047Virustotal results 23.33%SilentBuilder
2022-01-12rCcAk_2711616.xlsmxls 05dc48ca9e5d5feb04a32c1ef3a8d18453a2a679e7257ce24856895a5dea268bn/aSilentBuilder
2022-01-11WAS_412085579.xlsmxls 034eaef52f3dc5154e7a94121703ea759fd19784df604e48c8e73ff4fa06cfdan/aHeodo
2022-01-11065300588_3.xlsmxls 44c675302c6fd62e15e5c9ae9bb98325870093ceed92a30601a13ad1dc2bd4f2Virustotal results 16.67% SilentBuilder
2022-01-11851624.xlsmxls a7fe36211a0be63df4c3929830b8fc4e21fc0548b5446377ce9c83b3d1fd9339Virustotal results 20.00%SilentBuilder
2022-01-11EM55.xlsmxls 9b3fb2f88edc75661d9aba9ccac4bd15607dbf2fa7542c47be3d533c0db5cbe5n/aSilentBuilder
2022-01-1126366351651152.xlsmxls 14222deeec10d32091a2947e045833bd25c041a662f4090df26e50381cf922c6n/a Heodo
2022-01-11517712447249K.xlsmxls 22a6627b4fdbfe7fd3bf73f4dbed682b4b450d18908aea0b23642c11996e75ccn/a Heodo
2022-01-118430334395868970924.xlsxls dc1a568534305e8dd82443bd62f3fefe364de2073558c8237bbe099593714259Virustotal results 16.67%SilentBuilder
2022-01-11G56411227951.xlsxls 77d7199bee787fb17ba47e4461be479b626921734ac55b7b76d42531c3b1a211Virustotal results 21.67%SilentBuilder
2022-01-11988497406181.xlsxls fd3087fa953ec989caff35845ec2bc3cc41303ac26e0f0d0b8e25a325fee3a29Virustotal results 22.03%SilentBuilder
2022-01-112715684119782553.xlsxls e8b123fd61bfeabe7b45797f6cceaef77207d8d93d2a2b38065976603120c558Virustotal results 20.00%SilentBuilder
2022-01-11A02976746950424578009.xlsxls 03319a0f6c37911983650f91c2a01b29eac84b17bd99133626d11d08952ad9d4n/aSilentBuilder
2022-01-11748320022789551454149.xlsxls e8ada03261f05e1c91d784bf58d10322d3765c686bb4a52278362e0e62288d1bn/a SilentBuilder
2022-01-11I8666006538482R.xlsxls afe04f54612c86612a56bf8a3a228a2aeae275f4730552228f8a4bb6f71c292eVirustotal results 20.69%SilentBuilder
2022-01-11N0161752339076.xlsxls 18e24e9b03fde05fa41b9d86aa612dbbd5deabcebbe97ee5b3a3b7fa8fb43f51n/aSilentBuilder
2022-01-11T57256509797756339E.xlsxls a5a1c304ab3b2351a82da736cf9c022ea2ad1cbff6321b64b0a741b575c8a6c4n/a SilentBuilder
2022-01-1105972559932717289470F.xlsxls b8600d1365521e1a2f83ae356900d38cf8c44b60594bbe30df2ac04418cd823en/aSilentBuilder
2022-01-11B05613856105049897211.xlsxls 38b51ee1239079bda9d7d55d94ad241f9595a1bad8a9538a140cd3504ce559c0Virustotal results 21.67%SilentBuilder
2022-01-1122018749303539753T.xlsxls 14e585c42b502e7e5ba9cd07618751748e748fd0a938c114c51a379de2d1082bn/aSilentBuilder
2022-01-11G2120669747.xlsxls 659c21119c192bd5c4c698d0e9c0ef6c5d0ed38bf40907318ccbc4dece45ec76n/aSilentBuilder
2022-01-115455948288682041.xlsxls 2709ea59d34478c496b08e82eb77182fba9c9af001b75cfab5aaa44621d359bdn/a Heodo