URLhaus Database

You are currently viewing the URLhaus database entry for https://foryou22.xyz/wp-includes/css/dist/77755819959/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1970570
URL: https://foryou22.xyz/wp-includes/css/dist/77755819959/?i=1
URL Status:Offline
Host: foryou22.xyz
Date added:2022-01-12 11:52:04 UTC
Last online:2022-01-13 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-12 11:53:07 UTC to abuse{at}amazonaws[dot]com)
Takedown time:1 day, 5 hours, 28 minutes Poor (down since 2022-01-13 17:21:43 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1348_6.xlsmxlsm b162080b1a9cf6b9208bb7dc46d33193e3314f9fb02235f6d5b792f430c4f0fbVirustotal results 26.98% Heodo
2022-01-136837_00724649.xlsmxlsm 2428a6248b7bcc60abaa1acbbe53598eb6787bca46c66775fe9e34257c73c01fn/a Heodo
2022-01-1369442126643093.xlsmxlsm 915354db100b6c7c744bede05828fd397ef2ab000bced2ac46e799b5d5a8e9d5n/a Heodo
2022-01-136518915_29113.xlsmxlsm 9be7257858cb4a52549d8339ff573f9a1a8e1aaf43bfa52506caf9ae6993252an/a Heodo
2022-01-1316553363_4364766.xlsmxlsm d47dc5f481df3ec15f19e8625c29b0beaf33c401b23191b818c9ecf885e3c8dcn/a Heodo
2022-01-13jfS_5.xlsmxlsm a66e83486f88332a7ba17fd3016818963ea4b45c47f1f19b4b01a099add5e3a3n/a Heodo
2022-01-13358251FPJW041695.xlsmxlsm 7868deb5db79806b2f44fe8be58524a914c2817d975f7acd996694dc218b70ebn/a Heodo
2022-01-13RWH_9721941.xlsmxlsm 333b10335a845fe3fe0445baa8b1074298419a02c030c8c32b69652f1745ba88n/a Heodo
2022-01-13508711552-45821128.xlsmxlsm 5565b21769b33d137d9835ab02eb09c93f36f8627ebce91b5b81d1a9d4107312n/a Heodo
2022-01-130899-587686285.xlsmxlsm 22ed1803ea7fa2aa21adb614d88627eaf141fb5663bac536d56f3db835dd0811n/a Heodo
2022-01-133023937-64.xlsmxlsm 27142990970a1968021bca00b4005ef206e3a553179b2e717e82ebfe8a8af1b9n/a Heodo
2022-01-13XX600767.xlsmxlsm 8e8824a855908e301cb873fe67e37eb4af99b32f75fb1ea8997af913540ece02Virustotal results 19.35% Heodo
2022-01-133437_84180.xlsmxlsm 7116287ff5fc3e837e06fb2ea4d6a131127ceecf8ef165f088114fdc8aa9e17bn/a Heodo
2022-01-1361803-8241.xlsmxlsm 5ecaca761cd39de3bd3acc762b09edb997c02a40e3a20e53e466c70524bd639fn/a Heodo
2022-01-13huiburm_13.xlsmxlsm 20d7c4f7e882c414b403403773c244fa421744c48bb9e52a2f9236825be9a76fVirustotal results 11.11% Heodo
2022-01-13361QFFLTA_0.xlsmxlsm 40c1afd52c86bae8bfb0c51cace1a0eb0e0ba0c12003ff8685f47df8cd3f9348n/a Heodo
2022-01-13V-385.xlsmxlsm ff782330fa53c402a91c06a1199ccdc467f8470af11fb786ee746df1ab19f594Virustotal results 11.11% Heodo
2022-01-13550448_8720816.xlsmxlsm 32d200a99b9495fe0dfcab75190eb5fcb348e6fa879763d132c924fe25bfc799Virustotal results 17.46% Heodo
2022-01-13GXZHB_446.xlsmxlsm 89136b644b6aa4c447540dd585039676d3308c0a434bc3f72322a45bc35df7acVirustotal results 11.29%Heodo
2022-01-13vlnionu_953719.xlsmxlsm e1de888c89a83b9cc12fc5432961766a1de1ad53ebd4aa7f3cda06d9c8cce841Virustotal results 22.95% Heodo
2022-01-1382073508GEQVNA-1.xlsmxlsm 876844b7e19d8b57429b07b92fd1092f3847f3e2521cb00e52b9a418fab8b6a1n/a Heodo
2022-01-13L8219.xlsmxlsm d9d0e65da97a353a9cc189af41082ae0bf1dff0acb39bb620a34ddb0c642ac79n/aHeodo
2022-01-13147TSKLLXVQ_750.xlsmxlsm 5e9b0c9265b7d3fc1ff598bf2c6da327b90d200944fc0462f1079231b5403185n/a Heodo
2022-01-136784487.xlsmxlsm 4e334f1e7d8c85ec0ef565959898a1ddbe225377df8590e806143832bc768320n/a Heodo
2022-01-13AI990499.xlsmxlsm ad80a159607095ce60f84198a537f9ed0bc3b5205b2a84a49c8173d53d942e60n/a Heodo
2022-01-1309637-5892014.xlsmxlsm bda64d87a6c5a5cd6926f31ff7be5bbe30123e2285e026e4d00028eb2e3221d5n/a Heodo
2022-01-13I5514.xlsmxlsm bfc5772205c81262f1c0e3bd7742f6aa7d2f41e03cbdd43729f2376a9b96ea16Virustotal results 8.06% Heodo
2022-01-1388477-3795.xlsmxlsm ed02cf2428790fc05964cbe66c268a67503551249437381125a51401de15e753Virustotal results 14.52%Heodo
2022-01-13WAESF377.xlsmxlsm 07efdf65fbb6c43bdc3ac46453701f3d1bb0f284bad5865fb4f4cf54c127708en/a Heodo
2022-01-13282714560-3500.xlsmxlsm 00714061c46c2698b29d0f88c92096cc433a3b26acac70825717dde40e0ff407n/a Heodo
2022-01-1339912770_750896.xlsmxlsm ae3ac0659210f9f66b73bb14858d53a215ed91ef3c5b812c671fd4e824ee150an/aHeodo
2022-01-139461271YNDMZGUACB_32198.xlsmxlsm 1463c17a7f06236bf5e8cf4ce7964cc17b2eabaedf00822387824b45f83021b5n/aHeodo
2022-01-12ckvxf-440.xlsmxlsm 2ece719378f63a328fbf4fcb4a059dea6cbb9a7d2be5481ec168f1e681fc7c56Virustotal results 8.06% Heodo
2022-01-1247_7.xlsmxlsm c2ddab3e04d60aef6cc2b227982e2701eeb4fb51f6a76c1f3047dffe536fccaaVirustotal results 8.47% Heodo
2022-01-12kyiq-81835463.xlsmxlsm 2b7d52fdf5cf60cf008016216c752a2fc6d74308772073a7157f9cd29cfd0d1eVirustotal results 14.52% 
2022-01-1218928101.xlsmxlsm 45a53e72db4a9d55d161277cf30ab36f2bdb6881937d80538c8468630a59b392n/a Heodo
2022-01-1251981975_90.xlsmxlsm 135ace077486200deffc6797336cc464b62f91268eef6e6cee687a8c6d792053Virustotal results 8.06% Heodo
2022-01-12FBAU_84.xlsmxlsm 292826fa66737d718d0d23f5842dc88e05c8ba5ade7e51212dded85137631b31n/a Heodo
2022-01-12KU-658.xlsmxlsm 33c82b63397536a8a585f5d1987fe791d2f3c7f7a59c28e18d261d95cf574da5n/a Heodo
2022-01-129199YHO_06.xlsmxlsm 94e647e716236a47da9833f6f96af2d79266610de675e984b8d1fa92c6b66d12n/a Heodo
2022-01-12I_9039496.xlsmxlsm 8f99cab09eb9674d602d903701978b39bbe6bf9eb123a358837b44e4076a5e86Virustotal results 17.46% Heodo
2022-01-123699369XHRBQEXXN_29112.xlsmxlsm 1bda0395914226e0e8595d97bf7970dbd6f029b30d8abf2d887cec6ed7084cf8n/a Heodo
2022-01-12z_09237.xlsmxlsm 9b6c2d3a2e0010b47a9e3f6a391bb288234c1edad441716ec99b1188a5ae2915Virustotal results 17.46% Heodo
2022-01-1244275111_1667473.xlsmxlsm f92091f4bf9b99100b516a015bbcee3bb1107b3f1084307aefb368863e3ef9cdVirustotal results 17.74% 
2022-01-12COZ2826700.xlsmxlsm a1d6ccc8d4baeb930c4466081955434ffc07b1ad4105058d4b3cafefe0d50098n/a 
2022-01-128271_781.xlsmxlsm d2081a087e12bbda13228bf6473570e76d0776157f719f7814f825018db9ea7cn/a Heodo
2022-01-12251838990_839287538.xlsmxlsm d396dc8d4f96a0295c0f5db969ab4116c03ab365e2c28400807c613656e87cd3n/a Heodo
2022-01-12044589017-83552433.xlsmxlsm d71345f2aba73f7209585626467e21128fb342e43c8a64c475e1c9d8a052527fVirustotal results 17.46% 
2022-01-1210732043_454.xlsmxlsm ac1a9c4299618d4a3024d88f644e7ff3813627c6b91a5be1b6ea64c037ec7c99n/aHeodo
2022-01-12BiT_148.xlsmxlsm d0976d7cff6c14e5e16cde79aaa1d61b3ac4d1bbdb2fa04543064548bb9a4016n/aHeodo
2022-01-123047_35737.xlsmxlsm bc346c8af9a4c313ecdce8c2ce4027bb2f3fff1889df84c0f2dd80f38f8be94bn/a Heodo
2022-01-1283114510-8269478.xlsmxlsm e64991c009715f3cd077bfef9f339f8b58c16ac9d35300e911fce66b692b4f3cn/aHeodo
2022-01-12KXETC9774.xlsmxlsm aa0e7e06ef6a8326e0d55630872406ec5a56ab4677760157c5b8cf9c7bc49623n/aHeodo
2022-01-12V-0.xlsmxlsm cc9a3186ed59f67e245a6076b2f2bd30650692259e6665b4c3a46aa9d044f814n/aHeodo
2022-01-1269CGWCBPZW_817.xlsmxlsm 79daeb5bf882947dee2541dcc653db008700b0f5b528335398d1ee9d934e3e7aVirustotal results 17.46% Heodo
2022-01-1251465_1260037.xlsmxlsm ff0dd0d6c82eabd6f0c69da4f366755d7e300e845e1eb68342107fa69d83b53en/aHeodo
2022-01-125126127_89.xlsmxlsm 1ac9eded30edbaf2faea6046d10ae01b4198654689f23a87627ad11d3c73e274Virustotal results 17.46%Heodo
2022-01-12LIG-44451303.xlsmxlsm 0bafd60ddca971a6e30bc4b88c757eb075c063b03d728b237331e60e83e33f63n/aHeodo
2022-01-12dYdHmy-2575753.xlsmxlsm 37716efca84be104afed69676c133a7710e46c5242ba0f4b97e008b8c46da7d0n/aHeodo
2022-01-12xnkqfvk_173101.xlsmxlsm 5b8c11198dceda8da8407fe0e68a5a0053b213f03e157317f0e9961f818fb5e7n/a Heodo
2022-01-126634977221676.xlsmxlsm 5ecda7dff2d530c8ae471e0f5f0e8716d6930dfce93f4e7c7ac8f6249250d6fan/aHeodo
2022-01-1254553377254.xlsmxlsm 9e910d12471987837a058b121eaf6b83b73675a82eafc3f6ac1710da61dcf16fn/a Heodo
2022-01-121009216254135.xlsmxlsm c9c2bdbfd9418db13bdf5b96a5d8003f7b924235629db4766ad743a09f30163bn/aHeodo
2022-01-12UDFC-45300400.xlsmxlsm 92713b457c90861b16201ffa88fe2c16b77c58265d9a4c249d683fe899fe4af1n/aHeodo
2022-01-1214HUXCXCQUEF_03.xlsmxlsm 99704dcf815cd49262652add049aa8b90b0549e6c769adce9de208f71bf5d7cdn/a Heodo
2022-01-121209556-757198.xlsmxlsm 2eabc11ba3c54f106383d98026c60f909cf6393af67fac13a59796b91390bebdn/aHeodo