URLhaus Database

You are currently viewing the URLhaus database entry for http://ozvita.club/wp-includes/663709_94968492/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1969357
URL: http://ozvita.club/wp-includes/663709_94968492/?i=1
URL Status:Offline
Host: ozvita.club
Date added:2022-01-12 02:23:10 UTC
Last online:2022-06-24 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-12 02:24:14 UTC to network{at}abuse[dot]team)
Takedown time:5 months, 13 days, 0 hours, 29 minutes Bad (down since 2022-06-24 02:53:19 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-12B_11.xlsmxlsm 8f99cab09eb9674d602d903701978b39bbe6bf9eb123a358837b44e4076a5e86n/a Heodo
2022-01-12694519_6.xlsmxlsm 7b4efd070c35df0f74d87cecaf1a4c39f792e206ac1a830ab6b2a8eb2cddff42n/a 
2022-01-12638072541_956439.xlsmxlsm 8bb091f18d04a9755e558790e1de67915d26c147739e9257d312824176872febn/a Heodo
2022-01-12265-4953.xlsmxlsm f92091f4bf9b99100b516a015bbcee3bb1107b3f1084307aefb368863e3ef9cdn/a 
2022-01-1264_8250.xlsmxlsm 30890f213f71b2008ae8b074bb35412d67375613a462a88aa7e4593151188e3bn/a Heodo
2022-01-12tfxwoif07016.xlsmxlsm 383d6a730a28d0d9206c191bae830c3084f5980bd4a45be32b5f9cd0cfd8e9ecn/a Heodo
2022-01-12WBN_62605285.xlsmxlsm 57dd75934f8e97adf3ea865291bb9766cae096c65aa55bcf8df2ff2325779fa1Virustotal results 17.46% Heodo
2022-01-12DS619896506.xlsmxlsm d71345f2aba73f7209585626467e21128fb342e43c8a64c475e1c9d8a052527fn/a 
2022-01-12wbmj_41.xlsmxlsm 306c0ade7aec03b53887263f4de92b9b0c8ab0a469f9b195b0cc172121258e86Virustotal results 17.46% Heodo
2022-01-12HQ_5731611.xlsmxlsm 513bc7378d724e7a7c4cfb48291919fdfa001bb5e07b6cf06fc33c19055e057an/a Heodo
2022-01-129017TMFP-41.xlsmxlsm 8e8348093645d1a6a11195a85467887d6f06ad0e5b1f5971fe2edd002912e775n/a Heodo
2022-01-12RL_7262549.xlsmxlsm 27d6855c830f8df3fde9a9f56e1cf9c88ad097a4cb45b4983f63e70a7c0517d0n/aHeodo
2022-01-12LAhZs_56.xlsmxlsm aa0e7e06ef6a8326e0d55630872406ec5a56ab4677760157c5b8cf9c7bc49623n/aHeodo
2022-01-126306146_1958.xlsmxlsm ce390c83df0a362de9c0a4704f3a7a22d52e5e536a46f3d64618812f24e7ad27n/a Heodo
2022-01-12AE_31.xlsmxlsm 4b175157c120102063bc5249ee3b1cb426d7f6ff5cb5efd584de04e324ef202bn/a Heodo
2022-01-12VFH539055.xlsmxlsm 2051d6466a893843330b994b1f7584192cc51ba381b1ccd71b4bdcf79d69a0f4Virustotal results 18.33%Heodo
2022-01-12vxsmkk_97.xlsmxlsm c5b975c17c0bb735289b89373ddf4a74f1c092098730f47ee94905c37d05df03Virustotal results 17.46%Heodo
2022-01-1275967593_16601597.xlsmxlsm 0bafd60ddca971a6e30bc4b88c757eb075c063b03d728b237331e60e83e33f63n/aHeodo
2022-01-128851229_6536.xlsmxlsm 8872f32f4d3040e9544fd6eebc8af2d86387b5008a960e8a1392ce3039a379b8n/aHeodo
2022-01-12781MVHETJ-4.xlsmxlsm 5b8c11198dceda8da8407fe0e68a5a0053b213f03e157317f0e9961f818fb5e7n/a Heodo
2022-01-12ILDeEX6488657.xlsmxlsm 2b9bf8d43b4a3d9da842f18416e6c3d424c46b2420872ff52e1b86b9656d764en/a Heodo
2022-01-12H_36435231.xlsmxlsm 9e910d12471987837a058b121eaf6b83b73675a82eafc3f6ac1710da61dcf16fn/a Heodo
2022-01-12B-0598522.xlsmxlsm 24500afc55a2aeda51f02a46650d3ab1b4819cd32182f7cd39048098aee011den/a 
2022-01-1225229821358.xlsmxlsm cf829587ffb5a1c3781d3cad3a56024af4c9af07812e7e0ffdabdcd44b984c97n/aHeodo
2022-01-12OCVRW_69204203.xlsmxlsm edd636c8f738b0cf504e216d9ee701b4d5dc59238f23581ce530df5f8b3c1968n/a Heodo
2022-01-12cmbizek_3686776.xlsmxlsm b34ba405eae43784dea2e89cee8c5fee71bc8de8ad674d58d7d6bdacd2ac52a1n/a 
2022-01-123709932192973.xlsmxlsm a171fe47aad91856984e779b31770f3e33598e208b8b3a63a510159937d43766n/a Heodo
2022-01-128555_52363247.xlsmxlsm ff196870dffbfb68e5fb4ec42c7d57297a1ec288f1b004d7d08dded3ccd1d1b4n/a Heodo
2022-01-1291135501_1.xlsmxlsm 0931df1c8f6f64bb1eed834909d091c56fae86bdef99bc2f0ceb31098b86cf17n/a 
2022-01-12VRY-6.xlsmxlsm 79f3b373fa9006ca74b6f4bd4eb82a98eed7e7377038b7a4dd821a937d01f38en/a Heodo
2022-01-12Q_49204.xlsmxlsm 73f5720060fdda952a06d091e8fcfdb5ce66b633769feed355fc3727c83c334en/a Heodo
2022-01-12EIPNS_1805780.xlsmxlsm 1f9b4bc8c1ee54caecc94b2989ecfff909e63e0d527ae3bc9d1e81506cdfa1b5n/a 
2022-01-1284381_1407370.xlsmxlsm de017049eca352dd5d9af6c3d715c5f84b0093ff26a1c6d273166e77cd7ab317n/a Heodo
2022-01-126707607-7078676.xlsmxlsm 50f5a67e3e4adb54941c9094c9f9ec98aeea6c506f89efcaab79405a11d7e5b9n/a Heodo
2022-01-12g25.xlsmxlsm d4864682c7ec6c7464511d321df944a7133cf2b0b3fc435d5a88d19cbec3df3dVirustotal results 15.00% Heodo
2022-01-12126270_156509.xlsmxlsm 6913af2de9271a92bd9c7c9afe4923a08f237459d7e1e03d171e96fa291e39eeVirustotal results 9.68% Heodo
2022-01-12817335137-345274.xlsmxlsm ccce76a8bdbf4b43e1db7615e0f06949b8a6bb7f1ea5009f25bbd6815a35e7a0n/a Heodo
2022-01-12MWX-70519966.xlsmxlsm 1d0424d58a2a17d5a1336182893fad1f2715ebcccf96698402c7e5d92082e928n/a Heodo
2022-01-12ELT76298.xlsmxlsm fd430afe622e1d99902b0a4c1bba73111af6e5193852959c880ce5471a5e6181n/a Heodo
2022-01-12U_8825.xlsmxlsm 4b2ced5ad04b4256bef5bee0fb95867913b271eabac843923fc16220f924b332n/a Heodo
2022-01-12363102_3426.xlsmxlsm db88756a23fe6c0998ddbf1864efe7e4a28073dca342fa7712775388ac757529Virustotal results 14.29% Heodo
2022-01-124492_201976.xlsmxlsm 7bd438038cf3ae20c965eda9ebaa1805f9347adef486223ff8d6815a0ec40cddn/a Heodo
2022-01-125009VDMNUI_432440.xlsmxlsm 4bdfc4d2f6481a25fe90516f5ec9235465fb26cb61e9099697c9c99002c9fd3cVirustotal results 12.70% Heodo
2022-01-12070649699.xlsmxlsm 1703b3ed61314b55df26556fb39593560397c5da3dd952dba8f721744e14e1afn/a Heodo
2022-01-12JI_46257.xlsmxlsm 95761ae4efbb60ee498b7d56d6c84e48753a21ab59a655f5439b47167baf6ea2Virustotal results 10.17%Heodo
2022-01-1257938_30.xlsmxlsm 8232bffcdf155d94e02d6bf3de90b25764ddf81e8d0071b283d866debed7e5a3n/a Heodo
2022-01-12617200100401.xlsmxlsm 1c873e22b4b174756cf0b84c5fd5af1b12515761507c3723ff77a95572ef0823Virustotal results 12.70% Heodo
2022-01-126848SAC_1308071.xlsmxlsm 4ada56134f54ea531dee11439079824f14dfc17f2d7b25f2f82595f7d50377e5Virustotal results 13.56% Heodo
2022-01-12mkPeu_44.xlsmxlsm f0cff93d93518d0fd32049d8a197ab064d56fe1d4d0709b408ae50f3e21c480cVirustotal results 9.68% Heodo
2022-01-12R_29548.xlsmxlsm ef5bb2b9bf9fc8c4f7d325cddd5202c205f256d0d59689570a2b332203c23314n/a Heodo