URLhaus Database

You are currently viewing the URLhaus database entry for http://fara-trading.com/examine/LTZ5439/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1968867
URL: http://fara-trading.com/examine/LTZ5439/?i=1
URL Status:Offline
Host: fara-trading.com
Date added:2022-01-11 23:28:05 UTC
Last online:2022-01-13 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-11 23:29:16 UTC to abuse{at}hetzner[dot]com)
Takedown time:1 day, 8 hours, 32 minutes Poor (down since 2022-01-13 08:02:13 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-125725181_8807.xlsmxlsm e1fa1422cf042c89d2940c31c51527d743738886bb94cca88aed63a664e650f7n/a Heodo
2022-01-12185693_139547.xlsmxlsm cc9a3186ed59f67e245a6076b2f2bd30650692259e6665b4c3a46aa9d044f814n/aHeodo
2022-01-1284239.xlsmxlsm affa54b3db10f641a6ae745e9cb62df1bb81224d94bbfa93489357f1572d62fdn/a 
2022-01-12D_928122.xlsmxlsm ff0dd0d6c82eabd6f0c69da4f366755d7e300e845e1eb68342107fa69d83b53eVirustotal results 18.33%Heodo
2022-01-1224165667WPBHQX9081.xlsmxlsm 1ac9eded30edbaf2faea6046d10ae01b4198654689f23a87627ad11d3c73e274Virustotal results 17.46%Heodo
2022-01-12rtqu9070.xlsmxlsm 8872f32f4d3040e9544fd6eebc8af2d86387b5008a960e8a1392ce3039a379b8Virustotal results 17.46%Heodo
2022-01-12O-813.xlsmxlsm 37716efca84be104afed69676c133a7710e46c5242ba0f4b97e008b8c46da7d0n/aHeodo
2022-01-1273729-20030297.xlsmxlsm 5b8c11198dceda8da8407fe0e68a5a0053b213f03e157317f0e9961f818fb5e7n/a Heodo
2022-01-12253900_01067797.xlsmxlsm 7dcd68024365fd30579b4707f0a9ad5f12f539cda108142174ea46efcf32f7f9Virustotal results 14.04% Heodo
2022-01-12Y958540319.xlsmxlsm 9e910d12471987837a058b121eaf6b83b73675a82eafc3f6ac1710da61dcf16fVirustotal results 16.39% Heodo
2022-01-12QN_2676.xlsmxlsm c9c2bdbfd9418db13bdf5b96a5d8003f7b924235629db4766ad743a09f30163bn/aHeodo
2022-01-12yarqv_564026.xlsmxlsm 09e0a532c503c252f36af5077f4ce5dec6a8113c032b2afd7b3759c65db15139Virustotal results 15.87% 
2022-01-12LFJkN_15.xlsmxlsm 7f01218c46abccb4c220bcc2cd981cbfe87127a1edd1676ec4163823e239d414n/a Heodo
2022-01-12KvDU-90110025.xlsmxlsm b34ba405eae43784dea2e89cee8c5fee71bc8de8ad674d58d7d6bdacd2ac52a1n/a 
2022-01-12APAVI938.xlsmxlsm d2bcf2bda4b017286f8f68c4a613bc34f230670d136e5140fce43194dda7c86en/a Heodo
2022-01-12NgNCW8978.xlsmxlsm 17f03ce4ff3120ccad3cb69b71f73257b385061b7fde11370a98257caa36b273n/a Heodo
2022-01-1244967_19158.xlsmxlsm 3e7066da17af7c130e2a5ca11a470f3061cda5bf089c34ed3831dd8cec6bee96n/a Heodo
2022-01-12FPZ_7049289.xlsmxlsm 2290d005f9baba04f5ee48f1545bb6cbc2db9d5bada9763698233eb8a95c033bn/a 
2022-01-1216308_0620.xlsmxlsm 009fcd5e4bdcdcbc640380482ae293b7becc5dc522eab10e0bc3ccb143ff2331n/aHeodo
2022-01-12zi_2775.xlsmxlsm f3c5183187bec6e03d69db279fdacf6ef6da9f243b263c82fff3a206ae4879a3n/a Heodo
2022-01-126248873_0315.xlsmxlsm 1928ac3a586ceb8a287c3ccc22d16909b626992d6bedd6f7c272f7abbc48834an/a Heodo
2022-01-12NZN_41074.xlsmxlsm d2b2e45f8404ab43fb5167938f1772e600534364d4a6206404e59e13c4425c44n/a Heodo
2022-01-120488187_6904072.xlsmxlsm 7b23d6a5346b658b23fc0605fb5fdbea6bad8cb3846ee1b076479ff6e560a289n/a Heodo
2022-01-12fTgenh-7296859.xlsmxlsm ca3b70bb575b63fa0d338b50c754cc20f08794e00eba276722d96e3d00b5a2c1Virustotal results 14.29% Heodo
2022-01-12UZE4.xlsmxlsm b08722cba6eca08166fb77ae936fb350b4265fd666a8cb8af13aa886f0344409n/a Heodo
2022-01-12495591131277470.xlsmxlsm dd4bb165098876eece296f603bcaad2abaf3a306255559022fbe195553139c96Virustotal results 14.52% Heodo
2022-01-125296492-58754970.xlsmxlsm 7ee5d7c6d793d39fefbad3dd41511f94fe3b893e6c4080916fe6a00d6b41e3f5n/aHeodo
2022-01-12473SFQMU46.xlsmxlsm 001ac1d881c5184db609260ba9220966f1eed9f1a5a6ed4ad6069d5ba3e1f89bVirustotal results 14.29% Heodo
2022-01-12j-5479308.xlsmxlsm acd443ef2f68c0b1baafb6725d59fd059ece05927748011eb9569ad41c5d74f0n/a Heodo
2022-01-1265002_895.xlsmxlsm 775e8ead32426df8843052b194bb6347952c58b1e93c88fcd4b5332c9cb72a41n/a Heodo
2022-01-12XFMN485017.xlsmxlsm 697527009070e730447f346637ff5ff6ad458be500e870bfed11d033c4015631Virustotal results 9.43% Heodo
2022-01-12JH-3077904.xlsmxlsm 0ac0e45bf6bddf2f149dc232e277e24170f4ae358af7a92e02ebe95eab27361dn/a Heodo
2022-01-12I_536995.xlsmxlsm d82d4d05f3444d623fc0e7dbb2118559a11c6e421807cc6fbb411ceebfca2f0cVirustotal results 12.70% Heodo
2022-01-1281817-0145207.xlsmxlsm 263dc5247e15db142100c5f3868fbb16eb2d25b2ce86ebaf407be909a39e6406Virustotal results 11.29% Heodo
2022-01-126341192560881.xlsmxlsm f3d1334b346c1bab22c541a6fb05cb2f0bcbfe8ba5a055d111b1c05505d5baffn/a Heodo
2022-01-12TCT-13770.xlsmxlsm 599ee297e7f0005588a3ec6437b689e5c4d2c07be1d974d3b0011f4cd1b5cc15n/a Heodo
2022-01-1278350388.xlsmxlsm 55a7a0ca3ef2db732c121d6006f048e100d0f94d136c94316d0e378fb8569a6en/a Heodo
2022-01-124813-54459.xlsmxlsm dd8a4718b16ebd639c4622884cc34f8f052f1655e71421c5bdc10898ffcd9c83Virustotal results 9.68%Heodo
2022-01-128427974-3364955.xlsmxlsm 18bb9fc6b0ed30350713c8e1f45feb512e0120b4fd7c052c74811b300fd597cfVirustotal results 9.68% Heodo
2022-01-12RP_734.xlsmxlsm 663ca3b8545e4e02572b5d348a1f77c7ef30d1810e8adbe25dd699b2cfb1792fn/a Heodo
2022-01-12VR-71.xlsmxlsm b34e6de4f7fc9427651923dbdfab0c34ff83e99f9d44a4bfea838e1b4e59907fn/a Heodo
2022-01-12576958380.xlsmxlsm 90c68041ea2e1e9b44724b9e68a58b8490996a52a5c2eda58d2eef0247b37283Virustotal results 9.84%Heodo
2022-01-129865204-00635.xlsmxlsm 947dc8d6c337a63466168a9efb2e42e692fad8da89af9c4c295fcd174a89c979n/aHeodo
2022-01-11624197184727.xlsmxlsm d3e6a6a97ad6e4f79e73386e88cddd5b958d0f8745c551837dd366b929671704Virustotal results 10.17% Heodo
2022-01-1192389_16.xlsmxlsm e06e1cc33f42f59f86b44d17359234628540e287dc10a39ac66ae21449abd380Virustotal results 9.68%Heodo