URLhaus Database

You are currently viewing the URLhaus database entry for http://gardenmanagementserv.demo9lec.co.za/b/586948_6500304/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1968214
URL: http://gardenmanagementserv.demo9lec.co.za/b/586948_6500304/?i=1
URL Status:Offline
Host: gardenmanagementserv.demo9lec.co.za
Date added:2022-01-11 19:40:06 UTC
Last online:2022-01-20 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-11 19:41:07 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:8 days, 15 hours, 41 minutes Bad (down since 2022-01-20 11:22:37 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1238437791_09728.xlsmxlsm 697ea1260245ebb08b7387e6d6f4eddd9f9d37d4849abb996244b79526827a11n/aHeodo
2022-01-111649WSLDKYEP_95844219.xlsmxlsm 2bcd5baa2d280f6afd51a5beb204c382fce0fa58f20ff76076d27cb2323e8ac6Virustotal results 9.68% Heodo
2022-01-11qvylrx_88.xlsmxlsm 1df00c09db9bfcf4e493dacdef73f2b732cd06ae4b931bd356516667a44c47e2n/a Heodo
2022-01-1174356256_7339007.xlsmxlsm d232986e906c448669c346c5edefc1d51b9224b6d53afd360e4768f9861eafadVirustotal results 9.68% Heodo
2022-01-11241782LZSCOFO-123081902.xlsmxlsm aa920a2c74b8982c5dd77f97f0dd2d6c7fd69f047983447d6ae43cdf1573b07dVirustotal results 9.84% Heodo
2022-01-1150HUWMYAB_3802619.xlsmxlsm 2a43f2180ac8723fc79222c637ad6743128611c7c89843cec720bd884dd1b72fn/a Heodo
2022-01-113787JNZ46463007.xlsmxlsm 8ad61be673c186c9cdfb6c6c8d750fbcf80f920d4905742c0ed9d67833026ed7Virustotal results 9.68% Heodo
2022-01-11459547736.xlsmxlsm 71da6e57fe5adfa0b06f8ba9525e6db95e7c25246179fa8563561d24e79e6c65Virustotal results 9.68% Heodo
2022-01-11PYMKX_821884.xlsmxlsm c4bc03a927a72a21be0b15c8c55124264c456a940a325d8071f5cbcb7032f1c8Virustotal results 9.68% Heodo
2022-01-114814168MCLLFGBTQ-10.xlsmxlsm c2cb81db208398e070c47e7d03e76709142dec85ddaa985883536283a0acbb14Virustotal results 9.84%Heodo
2022-01-11CW_52.xlsmxlsm b2e32fd80b92a4e339994bd61b8c272c15beb0946c91a51b61e98617947ed54cVirustotal results 10.17%Heodo
2022-01-11DRT_4.xlsmxlsm eabf9bfbdc503869315be500dab8f676c77bc6111c99ebeaec1981e1dc95af9cn/a Heodo
2022-01-1178103737TXU-620387.xlsmxlsm 5adadc6927b59028b67a48bd2cca061b9d05c1c9f250f8f356fe58103a3af5a9n/a Heodo