URLhaus Database

You are currently viewing the URLhaus database entry for http://odbq.yacstatic.com/assets/F64164089/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1968657
URL: http://odbq.yacstatic.com/assets/F64164089/?i=1
URL Status:Offline
Host: odbq.yacstatic.com
Date added:2022-01-11 22:09:04 UTC
Last online:2022-01-17 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-11 22:10:10 UTC to abuse{at}digitalocean[dot]com)
Takedown time:5 days, 19 hours, 38 minutes Bad (down since 2022-01-17 17:48:14 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-12925169530_520.xlsmxlsm 6511bf0cd0a150e9e4530b6b27ec3c9227b0e6ff38eafd6f6045f71ded06bc03n/aHeodo
2022-01-1294083182189.xlsmxlsm 5af2a325f143af92ffc1ad4c45442f8ebcce5937fcb00a77ff3b51c1effdebbdVirustotal results 17.74% Heodo
2022-01-1254805-4735445.xlsmxlsm 27d6855c830f8df3fde9a9f56e1cf9c88ad097a4cb45b4983f63e70a7c0517d0n/aHeodo
2022-01-12SENLo_5.xlsmxlsm 1ac9eded30edbaf2faea6046d10ae01b4198654689f23a87627ad11d3c73e274Virustotal results 17.46%Heodo
2022-01-1206070-324.xlsmxlsm 0bafd60ddca971a6e30bc4b88c757eb075c063b03d728b237331e60e83e33f63Virustotal results 18.03%Heodo
2022-01-1234119_520443.xlsmxlsm b73be43b52094fb92e8b8d58def03cd5521d7e3421833ec6d60249a14f7883a3n/a Heodo
2022-01-128135389.xlsmxlsm 6a5cc935c531fd25704f51dfeea8ef98efc1344dd50cd209bf3881776c383080n/a Heodo
2022-01-12KU-88.xlsmxlsm ea3e85162646a07f1e9328a85f012d22517bf42b58e0eb11987d8fc701357292n/a 
2022-01-12ti_38979.xlsmxlsm 6de523cf03d5a8cb34cc06b2f41ccd57f611201fcf36696d9f9c601bae54cd40Virustotal results 15.87% Heodo
2022-01-1275CHODNXCGVV-986424.xlsmxlsm 24500afc55a2aeda51f02a46650d3ab1b4819cd32182f7cd39048098aee011deVirustotal results 17.46% 
2022-01-126925_0758789.xlsmxlsm cf829587ffb5a1c3781d3cad3a56024af4c9af07812e7e0ffdabdcd44b984c97n/aHeodo
2022-01-1294282851708.xlsmxlsm edd636c8f738b0cf504e216d9ee701b4d5dc59238f23581ce530df5f8b3c1968n/a Heodo
2022-01-121601323-30.xlsmxlsm e518a3d4b343b833889a08edf75c2fe705a104d737d51dfb31b6f4907b099c62n/aHeodo
2022-01-12ZYKWE_859055.xlsmxlsm ff196870dffbfb68e5fb4ec42c7d57297a1ec288f1b004d7d08dded3ccd1d1b4Virustotal results 14.29% Heodo
2022-01-126842_63154409.xlsmxlsm 8a6158a2ff4695e06f93b318856526a5ffa730ba8ae4027796d172cf338286e3n/a 
2022-01-1259970734602.xlsmxlsm c4d0f3ae42ee96525f7c0b08e3e7eab28f6560c351b324b2926d0e74cd8c004cn/a Heodo
2022-01-1268996542.xlsmxlsm f005cf1bf27f53cb79db476f4f0e7870b84fd49bfbe6997bf29bb75de459977cn/a Heodo
2022-01-1233784303_749.xlsmxlsm 009fcd5e4bdcdcbc640380482ae293b7becc5dc522eab10e0bc3ccb143ff2331n/aHeodo
2022-01-121786_9692.xlsmxlsm f3c5183187bec6e03d69db279fdacf6ef6da9f243b263c82fff3a206ae4879a3n/a Heodo
2022-01-12941_66718719.xlsmxlsm d2b2e45f8404ab43fb5167938f1772e600534364d4a6206404e59e13c4425c44n/a Heodo
2022-01-12hlre_19013.xlsmxlsm 7a51acd202737a1d65c2e42f2924cb9a20e996383b579a3dc49148e4d62600e3n/a Heodo
2022-01-12XV_20.xlsmxlsm ca3b70bb575b63fa0d338b50c754cc20f08794e00eba276722d96e3d00b5a2c1Virustotal results 14.29% Heodo
2022-01-121494806.xlsmxlsm b08722cba6eca08166fb77ae936fb350b4265fd666a8cb8af13aa886f0344409n/a Heodo
2022-01-1247-94402283.xlsmxlsm b2fef7d6f0eacaba6aef7309a7d25c631e3b48d950a01ce5968b7964cf354679n/a Heodo
2022-01-12V_074378388.xlsmxlsm c5c876d6f6b6e574a81a8bed49438524642ab31c620f8acb35c76098ea4a032fn/a Heodo
2022-01-1272072342-91142.xlsmxlsm ae07a783e2db5694e8dc897f18d6303fb09914626708dec41aec7a4f43d1f74bn/a Heodo
2022-01-1233791XYPMJDRE_925481.xlsmxlsm 31f54e459b699cc0a4f9c9cf15481019ede90771c2921cd1424361acd40044e3Virustotal results 14.29% Heodo
2022-01-12235610225557518.xlsmxlsm 775e8ead32426df8843052b194bb6347952c58b1e93c88fcd4b5332c9cb72a41Virustotal results 15.00% Heodo
2022-01-125368_24557864.xlsmxlsm 6cb3272ca6160c0e01f7084ecda308e0d4599b5107c80b3cdbf497268a05b540n/a Heodo
2022-01-12946175967.xlsmxlsm 0ac0e45bf6bddf2f149dc232e277e24170f4ae358af7a92e02ebe95eab27361dn/a Heodo
2022-01-12818905588_761.xlsmxlsm c3fa8b9cc4ef363ee4e4c3a85b6c193d7c5fbe880eeb049cf36feba33777ade3n/a Heodo
2022-01-1214180_32936424.xlsmxlsm 263dc5247e15db142100c5f3868fbb16eb2d25b2ce86ebaf407be909a39e6406Virustotal results 11.29% Heodo
2022-01-12272DBOPLRN6866095.xlsmxlsm f3d1334b346c1bab22c541a6fb05cb2f0bcbfe8ba5a055d111b1c05505d5baffn/a Heodo
2022-01-1246101280-7509.xlsmxlsm 599ee297e7f0005588a3ec6437b689e5c4d2c07be1d974d3b0011f4cd1b5cc15n/a Heodo
2022-01-12DFOvou_741402.xlsmxlsm 55a7a0ca3ef2db732c121d6006f048e100d0f94d136c94316d0e378fb8569a6en/a Heodo
2022-01-12MHIK_37740638.xlsmxlsm 1ac0fa02c1e0521aa1c4ec8c12ad42bf25ebcd9fd246ec5ac22bc6be206393d7n/a Heodo
2022-01-12D_00.xlsmxlsm 18bb9fc6b0ed30350713c8e1f45feb512e0120b4fd7c052c74811b300fd597cfVirustotal results 9.68% Heodo
2022-01-128356_953801709.xlsmxlsm b94a04d3a5f75fb0370e59e96488c49848647fd60e1b9ef2a9e898ff5b53f6can/aHeodo
2022-01-1290972914431978.xlsmxlsm b34e6de4f7fc9427651923dbdfab0c34ff83e99f9d44a4bfea838e1b4e59907fn/a Heodo
2022-01-1271_85884632.xlsmxlsm 978af74bf15d2a91d89790b36c10deb099346510e755e8915883f43401b3fe10n/a Heodo
2022-01-12646192.xlsmxlsm d193efb518a026a5507a4bb6bc168c2f7922c39ce1bb8fd5553512152cc2b88dn/a Heodo
2022-01-1139708129HPLXNRKFRQ_124.xlsmxlsm d3e6a6a97ad6e4f79e73386e88cddd5b958d0f8745c551837dd366b929671704n/a Heodo
2022-01-11g82341.xlsmxlsm e06e1cc33f42f59f86b44d17359234628540e287dc10a39ac66ae21449abd380Virustotal results 9.68%Heodo
2022-01-11wyIu-6302.xlsmxlsm d232986e906c448669c346c5edefc1d51b9224b6d53afd360e4768f9861eafadVirustotal results 9.68% Heodo
2022-01-11Qrt5552634.xlsmxlsm aa920a2c74b8982c5dd77f97f0dd2d6c7fd69f047983447d6ae43cdf1573b07dn/a Heodo
2022-01-11NE4058.xlsmxlsm 8a9101b7343bf1a4608ae17b84bd290c1e40f510ec792e9c5d3cc5ace4ca5490Virustotal results 9.68% Heodo