URLhaus Database

You are currently viewing the URLhaus database entry for http://dentalstudiogml.com/css/95BQYOLNKTF_466/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1970725
URL: http://dentalstudiogml.com/css/95BQYOLNKTF_466/?i=1
URL Status:Offline
Host: dentalstudiogml.com
Date added:2022-01-12 12:58:05 UTC
Last online:2022-01-12 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-12 12:59:06 UTC to abuse{at}digitalocean[dot]com)
Takedown time:7 hours, 6 minutes Good (down since 2022-01-12 20:05:59 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1271107-21.xlsmxlsm e7b03810c084cc91f8463fb84d4b8979db88914b82a7808716e013f7b6b03eb6n/a Heodo
2022-01-12I3169975.xlsmxlsm d2081a087e12bbda13228bf6473570e76d0776157f719f7814f825018db9ea7cn/a Heodo
2022-01-12219016-3628.xlsmxlsm e39304e5761525a2038957233d6586c769837ac3c5a02b742e2fba6fb84b061bn/aHeodo
2022-01-12YH_413041.xlsmxlsm d0976d7cff6c14e5e16cde79aaa1d61b3ac4d1bbdb2fa04543064548bb9a4016n/aHeodo
2022-01-12868987XQQB-1271063.xlsmxlsm bc346c8af9a4c313ecdce8c2ce4027bb2f3fff1889df84c0f2dd80f38f8be94bVirustotal results 17.46% Heodo
2022-01-12NI7287540.xlsmxlsm cc9a3186ed59f67e245a6076b2f2bd30650692259e6665b4c3a46aa9d044f814n/aHeodo
2022-01-12640794_985.xlsmxlsm ff0dd0d6c82eabd6f0c69da4f366755d7e300e845e1eb68342107fa69d83b53en/aHeodo
2022-01-12233_01379339.xlsmxlsm c5b975c17c0bb735289b89373ddf4a74f1c092098730f47ee94905c37d05df03Virustotal results 17.46%Heodo
2022-01-12VEY-9916410.xlsmxlsm 5b8c11198dceda8da8407fe0e68a5a0053b213f03e157317f0e9961f818fb5e7n/a Heodo
2022-01-128667452-56421.xlsmxlsm 9e910d12471987837a058b121eaf6b83b73675a82eafc3f6ac1710da61dcf16fn/a Heodo
2022-01-12QK_4750069.xlsmxlsm c9c2bdbfd9418db13bdf5b96a5d8003f7b924235629db4766ad743a09f30163bn/aHeodo
2022-01-12158685780890936.xlsmxlsm 95640dfb33845e73eef1acc439753313987ebcffd14ddbe511f0f02abe85daf5Virustotal results 11.11%