URLhaus Database

You are currently viewing the URLhaus database entry for https://earnmarts.com/pwuuaj/rkzDRm_66533189/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1971264
URL: https://earnmarts.com/pwuuaj/rkzDRm_66533189/?i=1
URL Status:Offline
Host: earnmarts.com
Date added:2022-01-12 17:03:05 UTC
Last online:2022-01-13 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-12 17:04:09 UTC to abuse{at}cloudflare[dot]com)
Takedown time:2 days, 0 hours, 45 minutes Poor (down since 2022-01-14 17:49:42 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-13WKM_44.xlsmxlsm c04abc3378a389c7769ed89de8e5d82f4cb311647e4f363641a807fc6a399f39Virustotal results 29.51% Heodo
2022-01-13xql_1533407.xlsmxlsm 8873c2754ae136e84fe78c8975bab2a9adb52f5a60c9ea79f101ab4dff808343n/a Heodo
2022-01-13THJUY47.xlsmxlsm 304e17c2ef41373d5b2ded923de19336a227658abf49881fe446df0cfcfac00bVirustotal results 30.65% 
2022-01-1372706546_8148129.xlsmxlsm f2c2b34b3d0b8b5e85cfecf0bb20d225e589c18841538e9283f91302bb27bde3n/a Heodo
2022-01-134124AFXMEAT_60401.xlsmxlsm 132b4dea20861342b68e5c2485ade61c87962f5b17c8c73c2235a75110fd2104n/a Heodo
2022-01-13306858252401.xlsmxlsm febd9978510715acb1f4bb87d04412fb1e3e6e2720329590b6b146de515d2d85Virustotal results 31.75% 
2022-01-13646220343_6.xlsmxlsm a9abb67d0afc58fc0b4d513805fbecde775e743e7d7922f1ec54e65e148dde5en/a Heodo
2022-01-13H_07629280.xlsmxlsm 97a28f39e64f29aa43aaaea8797e145ccc300757164905ee08775c079f7f68acn/a Heodo
2022-01-1375740_1779.xlsmxlsm 26b70659f75983434e092f76f7a14aed02f68ecd203b7a90cd1ed6ca1ef8bbd4n/a Heodo
2022-01-13owndez875943.xlsmxlsm 650bbdbc87791034d76982f257174ba4504b95273cc4b6f2abaa4e361cb190e7Virustotal results 30.16% Heodo
2022-01-13J_08515.xlsmxlsm 108af965a5786b36edd5ec9d0e920c8d98b75f69cb4c120fb10a2e6033f74c60Virustotal results 33.90% Heodo
2022-01-134232169_77.xlsmxlsm ec54edb8fa77d810e6deba4e6105fe4fa06c193915fbe03ddad082f3e24da369n/a Heodo
2022-01-13496-667547.xlsmxlsm d35125cbfb93cba7e424f3ad372bbfbbe9945f51fa513495beb5d7bc76351430n/a Heodo
2022-01-13ifz471399.xlsmxlsm 48d8ba8e0832a4ee318f4fb4653345ed1d8e48e2bd90b55648e18d541e534d92n/a Heodo
2022-01-132248450_213334.xlsmxlsm a64b918b227ae002b52f8ca07c1e57fbf11e0f6a0c5a06abbf79e2b209bce48bVirustotal results 22.22% Heodo
2022-01-13646636876_55634219.xlsmxlsm 13f975538e7e72ac755218c6a35604d36e0278e74fed8e2270476b89268a7f2cn/a Heodo
2022-01-13021873198.xlsmxlsm 9e443aedd2833d67bb9b858bd14abc6a235186f865e05497ac39ab8cd0185156n/a Heodo
2022-01-13CH_98.xlsmxlsm d32a60905cbcf3b82765d7291ede8777aa420c096699a8f848d3417e53158346Virustotal results 19.05% Heodo
2022-01-134146061394402.xlsmxlsm 2b8b0ca757e3eccb527d9ce11a9a8815f5a9ce3c6d2ed5a8711d4c109e88bd71Virustotal results 22.22% Heodo
2022-01-137689-8050.xlsmxlsm ca6662f6a52a16a294b7d873a1f4b60f6ed054cb1cbaf3207081f30380c573e2n/a Heodo
2022-01-13059304-15791.xlsmxlsm 6c5843f31e83acb3be71be737cb15c279df63ad2191db42d1687985925eee1c9Virustotal results 22.22% Heodo
2022-01-13TF_271.xlsmxlsm 2cfe6cc60d786a8b94d9d3114d344fb74c21e5ce5391dea3d1550df17fee05b4n/a Heodo
2022-01-13BKWTT_51598246.xlsmxlsm 9e1460b0a4debafe9636cf43ad6de3069afc41e53b2c0c09b6337bd165a7bcefVirustotal results 15.87% Heodo
2022-01-1349947994.xlsmxlsm 1080082d0eec3c4e3583b6e259b0863c746d211af8a8b6b645b21059e60f1119n/a Heodo
2022-01-130047284155121.xlsmxlsm 4dc514dc9290b966a14aadaab3d4c168419ed606a81d0a1262318d8b305cfc8dn/a Heodo
2022-01-132770268-65.xlsmxlsm 6169a4500b717ca5de60b77b01c2c1ddf5dbe18bafd0af142248d5066eef19ecn/a Heodo
2022-01-13QMBC_514.xlsmxlsm 259272a5032f537239c61ba1c8b5bdd26e8e6c4f1ec9b54ee52eaeeac5f5690cn/a Heodo
2022-01-13lXc-18.xlsmxlsm 20d7c4f7e882c414b403403773c244fa421744c48bb9e52a2f9236825be9a76fVirustotal results 11.11% Heodo
2022-01-131830_04.xlsmxlsm 9eb7d16794f6e4e2e701458af298b2b16c91a04dd45361cc306f32bc5fd25491n/a Heodo
2022-01-1313632415-648.xlsmxlsm c14e76a48aa71dbc135baf60cb71367b03353dfd7e1e256ec9158c9ab9566677n/a Heodo
2022-01-13UBU-706.xlsmxlsm 4c39dc4744a0993917117b044891085adf8c6f0be913b189984e1b1ceea358f1n/a Heodo
2022-01-13O_3.xlsmxlsm 37bb74fcd5b1ff6bbd323163e21277b3ed80d124cc4d727f4ec64d1048a2c85en/a Heodo
2022-01-13P_948.xlsmxlsm 32d200a99b9495fe0dfcab75190eb5fcb348e6fa879763d132c924fe25bfc799n/a Heodo
2022-01-1303817_81431.xlsmxlsm cffc89330574a0b7d5096c64bff0483e4dbc38d09be06dd3fd4cafca0a4e99edVirustotal results 23.33% Heodo
2022-01-13Q_929.xlsmxlsm 869b3e37539d37f91353d70a91951ea1da88ee298ed6992b06315984bfb23247n/a Heodo
2022-01-13WIcmRv_30.xlsmxlsm d9d0e65da97a353a9cc189af41082ae0bf1dff0acb39bb620a34ddb0c642ac79n/aHeodo
2022-01-135340778-41441756.xlsmxlsm 0f3edf4e46a263ca74e1089aaebc8b85db3e80677f8f4606e5f9a09fecec3903Virustotal results 20.00% Heodo
2022-01-1388872_93571727.xlsmxlsm ad80a159607095ce60f84198a537f9ed0bc3b5205b2a84a49c8173d53d942e60Virustotal results 12.50% Heodo
2022-01-1399431107_8374.xlsmxlsm bda64d87a6c5a5cd6926f31ff7be5bbe30123e2285e026e4d00028eb2e3221d5n/a Heodo
2022-01-13B-166406.xlsmxlsm bfc5772205c81262f1c0e3bd7742f6aa7d2f41e03cbdd43729f2376a9b96ea16n/a Heodo
2022-01-134763532ADRYRYAROW_3.xlsmxlsm ed02cf2428790fc05964cbe66c268a67503551249437381125a51401de15e753n/aHeodo
2022-01-13088250298782026.xlsmxlsm ac8219f7bf6ba3f72506c84bee52caf739e9bfce0d43c4ccf69a0ad7480fcfc1Virustotal results 17.74%Heodo
2022-01-13531535_950673309.xlsmxlsm 18c55721fbff7b023ffab344abd151b7627bcdac0645f7074a1ad6b311828779n/aHeodo
2022-01-13UC_8269.xlsmxlsm ae3ac0659210f9f66b73bb14858d53a215ed91ef3c5b812c671fd4e824ee150an/aHeodo
2022-01-1334018_54.xlsmxlsm 38e984900acb5a6830c8ea2b34c0b1b85c45b32848da185c5bd3e2546ade2311Virustotal results 8.06% Heodo
2022-01-129324984197.xlsmxlsm 20039ff121b47e5026b29877b299b76e47f3c7f766b9010a04e148a19823dbb6n/aHeodo
2022-01-1274488_809756924.xlsmxlsm 60610dee4927e907b5a6a4ac49f8c921fa8af7005b2e8deb2b26ffcc1cac6322n/aHeodo
2022-01-1255480CDTNUG_471761.xlsmxlsm 2b7d52fdf5cf60cf008016216c752a2fc6d74308772073a7157f9cd29cfd0d1eVirustotal results 14.52% 
2022-01-12AA-08763400.xlsmxlsm 9f0a7342511328df49b73e718bb20dd3db1437cb3d115548f9d6a0cfda3af0d3n/a Heodo
2022-01-128929526_2117018.xlsmxlsm 135ace077486200deffc6797336cc464b62f91268eef6e6cee687a8c6d792053n/a Heodo
2022-01-120792-744407.xlsmxlsm 292826fa66737d718d0d23f5842dc88e05c8ba5ade7e51212dded85137631b31n/a Heodo
2022-01-12wxow_15689914.xlsmxlsm 33c82b63397536a8a585f5d1987fe791d2f3c7f7a59c28e18d261d95cf574da5n/a Heodo
2022-01-1223820-75659.xlsmxlsm 43456f22a22af4bc49f0c52a891b5993721cd8595dc6f051a1a5ceff1f107621n/a Heodo
2022-01-1279731601.xlsmxlsm 64d99b928974aebaf398137d54b64011c61752365aea111625000865835581e8n/a Heodo
2022-01-129548FGVSAVGG_08029218.xlsmxlsm 1bda0395914226e0e8595d97bf7970dbd6f029b30d8abf2d887cec6ed7084cf8Virustotal results 18.03% Heodo
2022-01-12jzsyxei_4650.xlsmxlsm e7b03810c084cc91f8463fb84d4b8979db88914b82a7808716e013f7b6b03eb6Virustotal results 17.46% Heodo
2022-01-12mxqiup_588.xlsmxlsm e51255b61860adae1096b1521ad1fcaaa48b92d4c992c8fb3c449339af2d01dfn/a Heodo
2022-01-12AB_16961787.xlsmxlsm f4d388e756c6671857985c8b0a17656c92e1f22da75e28cce94a65f17daf8266n/a Heodo
2022-01-12zzj56.xlsmxlsm d71345f2aba73f7209585626467e21128fb342e43c8a64c475e1c9d8a052527fVirustotal results 17.46% 
2022-01-12317020VUMOPWKI_419683.xlsmxlsm ac1a9c4299618d4a3024d88f644e7ff3813627c6b91a5be1b6ea64c037ec7c99Virustotal results 17.46%Heodo
2022-01-126947_56041.xlsmxlsm 6511bf0cd0a150e9e4530b6b27ec3c9227b0e6ff38eafd6f6045f71ded06bc03Virustotal results 17.46%Heodo
2022-01-12750522253_53906298.xlsmxlsm bc346c8af9a4c313ecdce8c2ce4027bb2f3fff1889df84c0f2dd80f38f8be94bn/a Heodo
2022-01-1234094923AMOMVGK-0736069.xlsmxlsm 27d6855c830f8df3fde9a9f56e1cf9c88ad097a4cb45b4983f63e70a7c0517d0Virustotal results 13.79%Heodo