URLhaus Database

You are currently viewing the URLhaus database entry for http://l7.net/portfolio/guhc-51/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1968441
URL: http://l7.net/portfolio/guhc-51/?i=1
URL Status:Offline
Host: l7.net
Date added:2022-01-11 20:54:07 UTC
Last online:2022-01-14 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-11 20:55:10 UTC to abuse{at}liquidweb[dot]com)
Takedown time:2 days, 14 hours, 44 minutes Poor (down since 2022-01-14 11:39:22 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-12Slmfpt58.xlsmxlsm d46253bb266476f81af4c47a2ff0ae04f13ce9834bc2a63a810f79d2c5773f63Virustotal results 18.03% 
2022-01-12BY-8473.xlsmxlsm d7c5e393c24cfa74fecf95028ea14cd7289d5d7ddcc7720219c609424954e37aVirustotal results 17.46% Heodo
2022-01-12659357_252.xlsmxlsm 8bb091f18d04a9755e558790e1de67915d26c147739e9257d312824176872febn/a Heodo
2022-01-12M17417.xlsmxlsm e51255b61860adae1096b1521ad1fcaaa48b92d4c992c8fb3c449339af2d01dfVirustotal results 17.46% Heodo
2022-01-12SPMI_148.xlsmxlsm a1d6ccc8d4baeb930c4466081955434ffc07b1ad4105058d4b3cafefe0d50098n/a 
2022-01-1235584199-31441130.xlsmxlsm f4d388e756c6671857985c8b0a17656c92e1f22da75e28cce94a65f17daf8266Virustotal results 17.46% Heodo
2022-01-1232365097-991064757.xlsmxlsm d396dc8d4f96a0295c0f5db969ab4116c03ab365e2c28400807c613656e87cd3n/a Heodo
2022-01-128741091_9740815.xlsmxlsm b8681f632bce705fb03b48e0be34a9b624d6241a90019ffcc55b0d4a5912d8d5Virustotal results 17.74% 
2022-01-1262272366.xlsmxlsm ac1a9c4299618d4a3024d88f644e7ff3813627c6b91a5be1b6ea64c037ec7c99Virustotal results 17.46%Heodo
2022-01-122007_07098824.xlsmxlsm 6511bf0cd0a150e9e4530b6b27ec3c9227b0e6ff38eafd6f6045f71ded06bc03Virustotal results 17.46%Heodo
2022-01-12681799434-45.xlsmxlsm 5af2a325f143af92ffc1ad4c45442f8ebcce5937fcb00a77ff3b51c1effdebbdVirustotal results 17.74% Heodo
2022-01-12LSD_20127692.xlsmxlsm 27d6855c830f8df3fde9a9f56e1cf9c88ad097a4cb45b4983f63e70a7c0517d0n/aHeodo
2022-01-12KTL57133.xlsmxlsm aa0e7e06ef6a8326e0d55630872406ec5a56ab4677760157c5b8cf9c7bc49623Virustotal results 17.46%Heodo
2022-01-1208_853.xlsmxlsm cc9a3186ed59f67e245a6076b2f2bd30650692259e6665b4c3a46aa9d044f814n/aHeodo
2022-01-12NR58.xlsmxlsm affa54b3db10f641a6ae745e9cb62df1bb81224d94bbfa93489357f1572d62fdn/a 
2022-01-12487588.xlsmxlsm 2051d6466a893843330b994b1f7584192cc51ba381b1ccd71b4bdcf79d69a0f4Virustotal results 18.33%Heodo
2022-01-12WE_90.xlsmxlsm 1ac9eded30edbaf2faea6046d10ae01b4198654689f23a87627ad11d3c73e274Virustotal results 17.46%Heodo
2022-01-123905973729.xlsmxlsm 0bafd60ddca971a6e30bc4b88c757eb075c063b03d728b237331e60e83e33f63Virustotal results 18.03%Heodo
2022-01-12949358856.xlsmxlsm ba7c1dc54af2f71c4737c1122c4092af41db3769d6f6883cfcc27636f9f133b0n/aHeodo
2022-01-12EvR-835434.xlsmxlsm 6a5cc935c531fd25704f51dfeea8ef98efc1344dd50cd209bf3881776c383080n/a Heodo
2022-01-1273641_3.xlsmxlsm ea3e85162646a07f1e9328a85f012d22517bf42b58e0eb11987d8fc701357292n/a 
2022-01-12252095_3.xlsmxlsm 6de523cf03d5a8cb34cc06b2f41ccd57f611201fcf36696d9f9c601bae54cd40Virustotal results 15.87% Heodo
2022-01-1239483-3392143.xlsmxlsm 24500afc55a2aeda51f02a46650d3ab1b4819cd32182f7cd39048098aee011den/a 
2022-01-123571322ZVWCGEYQX242.xlsmxlsm 1ceb6ae7bb554145cab1b5890a3f695d20a8d9184c9d5bfd2b7c0dd04d33c03bn/a Heodo
2022-01-12PN_79523083.xlsmxlsm dfaa9720cb4f937590ea74a1050a9e577415c0160135fbb5718f48f518be6758Virustotal results 9.68% Heodo
2022-01-12COFDC546.xlsmxlsm 8679aa6bfcd5e3177948929f4722ebf6ba365309370d3bd101aef94395d428e4n/a Heodo
2022-01-12L_52.xlsmxlsm a171fe47aad91856984e779b31770f3e33598e208b8b3a63a510159937d43766n/a Heodo
2022-01-127126185613316.xlsmxlsm ff196870dffbfb68e5fb4ec42c7d57297a1ec288f1b004d7d08dded3ccd1d1b4n/a Heodo
2022-01-1231222009-13565735.xlsmxlsm 0931df1c8f6f64bb1eed834909d091c56fae86bdef99bc2f0ceb31098b86cf17n/a 
2022-01-12xMP56.xlsmxlsm 79f3b373fa9006ca74b6f4bd4eb82a98eed7e7377038b7a4dd821a937d01f38en/a Heodo
2022-01-1284483214.xlsmxlsm 73f5720060fdda952a06d091e8fcfdb5ce66b633769feed355fc3727c83c334en/a Heodo
2022-01-12QGAYU_41742847.xlsmxlsm 3a719e95a6725ae8c2fa8ea52d712af379dadf6f819f6a2d28a4cb5c32270e18Virustotal results 14.29% Heodo
2022-01-12e-11.xlsmxlsm de017049eca352dd5d9af6c3d715c5f84b0093ff26a1c6d273166e77cd7ab317n/a Heodo
2022-01-1283820761UOAFWD-026.xlsmxlsm 50f5a67e3e4adb54941c9094c9f9ec98aeea6c506f89efcaab79405a11d7e5b9Virustotal results 14.29% Heodo
2022-01-12rXbft_249.xlsmxlsm d4864682c7ec6c7464511d321df944a7133cf2b0b3fc435d5a88d19cbec3df3dn/a Heodo
2022-01-122441841_2501.xlsmxlsm 6913af2de9271a92bd9c7c9afe4923a08f237459d7e1e03d171e96fa291e39eeVirustotal results 9.68% Heodo
2022-01-128961_963392.xlsmxlsm 1432dfaf66fc92262751cc8a85c31df66552687538effa62d8df537136495e1cn/a Heodo
2022-01-12067_90150.xlsmxlsm 1d0424d58a2a17d5a1336182893fad1f2715ebcccf96698402c7e5d92082e928n/a Heodo
2022-01-1244543404939.xlsmxlsm 43b1fd1045c3f14e9e12685a2fd7074bd2a0d7cf9e47d23af2e2ff8dca2a2f5cn/aHeodo
2022-01-12VSV_188858.xlsmxlsm e7edcb66e0cea358c917eaec3bf8213bc710be53f9d78c1ae88a70e99d0b6bd2n/a Heodo
2022-01-1262ORJ73710172.xlsmxlsm d673944f6e07fe7ce4c888e084fa16d4756d77ec24f1ede05bc80d35ef24d8b5n/a Heodo
2022-01-12n-512306.xlsmxlsm 7bd438038cf3ae20c965eda9ebaa1805f9347adef486223ff8d6815a0ec40cddn/a Heodo
2022-01-12NCD_0422730.xlsmxlsm 4bdfc4d2f6481a25fe90516f5ec9235465fb26cb61e9099697c9c99002c9fd3cVirustotal results 12.70% Heodo
2022-01-12212399-51.xlsmxlsm 1703b3ed61314b55df26556fb39593560397c5da3dd952dba8f721744e14e1afn/a Heodo
2022-01-1284909640-15.xlsmxlsm 95761ae4efbb60ee498b7d56d6c84e48753a21ab59a655f5439b47167baf6ea2Virustotal results 10.17%Heodo
2022-01-12wtl183.xlsmxlsm cb40e8ee0194155a280843ae282b1b67c7eb701abea814501e34fde503a43e92n/a Heodo
2022-01-12P3.xlsmxlsm f3d1334b346c1bab22c541a6fb05cb2f0bcbfe8ba5a055d111b1c05505d5baffn/a Heodo
2022-01-12CDFBS850313.xlsmxlsm 768ffbfc5a50f759614ed049fcd10faade3d8c3a8a759f55dfeeae08265133c2Virustotal results 12.70% Heodo
2022-01-12936462260_77186784.xlsmxlsm 89fa80a72690391d6719db19caed2cfaf13d86a45b136c26dd6bcd9b17c1b73bn/aHeodo
2022-01-1297559308HCCORT_65512.xlsmxlsm 1ac0fa02c1e0521aa1c4ec8c12ad42bf25ebcd9fd246ec5ac22bc6be206393d7n/a Heodo
2022-01-12MUFOE89537.xlsmxlsm 59f05e00efec07cd4974aa3dc7797d632de2a2bca84c94d7a01b930c54e3cb11Virustotal results 9.68% Heodo
2022-01-1243522_36.xlsmxlsm 4cf81923aab75fc5428ba11b6f1a4772a4d964de456855f77108a344ca999bf9Virustotal results 9.68% Heodo
2022-01-12yud_4023109.xlsmxlsm c6dee1be235a1227fd16fba53a70a58e6464150c266b54cb66a2fa4162883ca7n/a Heodo
2022-01-12Hhy_45404651.xlsmxlsm 3c650d7a8587b1e9fd3720682611258f730d5762a31eec35e66269191f376295n/a Heodo
2022-01-12920857_75774294.xlsmxlsm 947dc8d6c337a63466168a9efb2e42e692fad8da89af9c4c295fcd174a89c979n/aHeodo
2022-01-12JS-80.xlsmxlsm f20a142423cea7ec0369d225894d4cf71f4c31d425bf0215de2b6277a5354192n/a Heodo
2022-01-11438165-3226.xlsmxlsm 427080f3d4da3ec0746fc297c0a922b5212a53ae04504f5efd17ff4f9208c662Virustotal results 9.68% Heodo
2022-01-1113170_7254.xlsmxlsm 6ec9e504112744f9f07ce60fb9315cdcd427d27a16c248fbe9746477bfc851afn/a Heodo
2022-01-11318689055_25.xlsmxlsm dd14be16e01e5fe53b7cf8199af830a979dbbbc33593606f3b25d7ea3b32697cn/a Heodo
2022-01-11449705834-6.xlsmxlsm 2a43f2180ac8723fc79222c637ad6743128611c7c89843cec720bd884dd1b72fn/a Heodo
2022-01-1174623567YKNVAXED_6782.xlsmxlsm 8ad61be673c186c9cdfb6c6c8d750fbcf80f920d4905742c0ed9d67833026ed7Virustotal results 9.68% Heodo
2022-01-11K-4.xlsmxlsm 69fdc8b909b3d9e8de4ffafb89dff475c99a4e3ac57eda41c014cea8ee8ddcb6n/a Heodo
2022-01-1166466-06327.xlsmxlsm 929fd76e8373d3c14a1fa542d4222dba73cb21f0c5cdaa0c8b7acea0a53d8f0bVirustotal results 10.00% Heodo
2022-01-118487583407936.xlsmxlsm c9e970aa711be04a18931e15dbeb8bc9e24beeaa6d8e95ec64d11c3c9d0eeff6n/a Heodo