URLhaus Database

You are currently viewing the URLhaus database entry for http://castlenkings.com/wp-includes/225869-8347492/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1971324
URL: http://castlenkings.com/wp-includes/225869-8347492/?i=1
URL Status:Offline
Host: castlenkings.com
Date added:2022-01-12 17:24:04 UTC
Last online:2022-02-16 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-02-02 13:16:09 UTC to abuse{at}cloudflare[dot]com)
Takedown time:1 month, 4 days, 16 hours, 47 minutes Bad (down since 2022-02-16 10:12:37 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-13500841428-34902.xlsmxlsm dc8adc8e13d3e5a64f2d69f2163da90a19cd80594bf4db6b8d17c381312d28b6n/a Heodo
2022-01-13441806085_5921354.xlsmxlsm 3fc26c9fd1f5685b0dbd0bf5f56d85f5ae94056eb3a8ab041389b3f2948cf3f0n/a Heodo
2022-01-1339620556_67184312.xlsmxlsm 304e17c2ef41373d5b2ded923de19336a227658abf49881fe446df0cfcfac00bVirustotal results 30.65% 
2022-01-13504206065804.xlsmxlsm f2c2b34b3d0b8b5e85cfecf0bb20d225e589c18841538e9283f91302bb27bde3n/a Heodo
2022-01-13B_43.xlsmxlsm 4f9ce5c9c9dd88a6a01a3df3299e0aa43da3bad195036c22b141f28769708334Virustotal results 27.87% 
2022-01-13169196-95305.xlsmxlsm febd9978510715acb1f4bb87d04412fb1e3e6e2720329590b6b146de515d2d85Virustotal results 31.75% 
2022-01-13960135_15488042.xlsmxlsm 73aba3d6a7b537481c898581b8ccc0131152c0d0fc93500b4c562db824073360Virustotal results 33.33% Heodo
2022-01-13593915-004.xlsmxlsm 41750a936f4e59a899e45972dd3ccf154305807c52bd7e5f5b19344e909f86ban/a Heodo
2022-01-13583498_343.xlsmxlsm 5d7049ddd0c94d31087e9b7809dd67ab2c097e01ffacb571225e7ab561f57f39Virustotal results 31.75% Heodo
2022-01-13HN-714687.xlsmxlsm 109868bbf981851bac44548c11bee90f08fd3c83e06c9b9539f568e047f45e0an/a Heodo
2022-01-13eXJhDy-08296.xlsmxlsm 93d3e72ebe801f6ce7a577d88f1cb395aee4124d390adf1b4d2711786623e0d6n/a Heodo
2022-01-13696716_276.xlsmxlsm ecfec056329e9b2c1bbc3d7b8fb2233f0c0e519db0f43bc96cb2ee795cd6dba0n/a Heodo
2022-01-1384221733-125813.xlsmxlsm ec54edb8fa77d810e6deba4e6105fe4fa06c193915fbe03ddad082f3e24da369n/a Heodo
2022-01-13QSO_95662.xlsmxlsm 5ad7f42f07f5db39587cb7d2ead9bbc7e88e6a223eee99e1745617ad3e17f290n/a Heodo
2022-01-13095056911-58049400.xlsmxlsm 48d8ba8e0832a4ee318f4fb4653345ed1d8e48e2bd90b55648e18d541e534d92n/a Heodo
2022-01-13w_105.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cVirustotal results 26.98% 
2022-01-134970202338.xlsmxlsm 915354db100b6c7c744bede05828fd397ef2ab000bced2ac46e799b5d5a8e9d5n/a Heodo
2022-01-13hA_87915.xlsmxlsm 726be01c1600c33b9a3d322885ca12383ec5b64546bb389670176f77f7faf162Virustotal results 19.05% Heodo
2022-01-13zPu475.xlsmxlsm d47dc5f481df3ec15f19e8625c29b0beaf33c401b23191b818c9ecf885e3c8dcn/a Heodo
2022-01-13JU_00262.xlsmxlsm 2b8b0ca757e3eccb527d9ce11a9a8815f5a9ce3c6d2ed5a8711d4c109e88bd71n/a Heodo
2022-01-1355291654-8.xlsmxlsm ca6662f6a52a16a294b7d873a1f4b60f6ed054cb1cbaf3207081f30380c573e2Virustotal results 20.63% Heodo
2022-01-13kq_75.xlsmxlsm ae4c37f20738b2bc766ca1b1437dd27be15c5a86e663f8ce3fc8be6762483305n/a Heodo
2022-01-13JEnTG_2.xlsmxlsm 2cfe6cc60d786a8b94d9d3114d344fb74c21e5ce5391dea3d1550df17fee05b4n/a Heodo
2022-01-13GCCB_650.xlsmxlsm 9e1460b0a4debafe9636cf43ad6de3069afc41e53b2c0c09b6337bd165a7bcefn/a Heodo
2022-01-134440643.xlsmxlsm 7fc994decafbc81cd090c28c1de605c93e2ae18f645faac2d1f6680b85ef7c13Virustotal results 14.29% Heodo
2022-01-13u_4975.xlsmxlsm 27142990970a1968021bca00b4005ef206e3a553179b2e717e82ebfe8a8af1b9Virustotal results 22.95% Heodo
2022-01-1361363151_59.xlsmxlsm 6169a4500b717ca5de60b77b01c2c1ddf5dbe18bafd0af142248d5066eef19ecn/a Heodo
2022-01-131768825_14155.xlsmxlsm 49ec26f8a352003e43a32615495ae4554e0bb8485ef889e7ba57cf869f026c4cn/a Heodo
2022-01-132272248_6095.xlsmxlsm 259272a5032f537239c61ba1c8b5bdd26e8e6c4f1ec9b54ee52eaeeac5f5690cn/a Heodo
2022-01-13504484_7322363.xlsmxlsm 8e2712e45fb0cbdc5a565ba4f5582ef6b0d871a0159abaed0fb6c4d519382547n/a Heodo
2022-01-13H39296.xlsmxlsm 9eb7d16794f6e4e2e701458af298b2b16c91a04dd45361cc306f32bc5fd25491n/a Heodo
2022-01-136058001_1936.xlsmxlsm c14e76a48aa71dbc135baf60cb71367b03353dfd7e1e256ec9158c9ab9566677n/a Heodo
2022-01-13666632_1.xlsmxlsm 32d200a99b9495fe0dfcab75190eb5fcb348e6fa879763d132c924fe25bfc799Virustotal results 17.46% Heodo
2022-01-13N-82448399.xlsmxlsm 89136b644b6aa4c447540dd585039676d3308c0a434bc3f72322a45bc35df7acVirustotal results 11.29%Heodo
2022-01-134107112960983.xlsmxlsm e1de888c89a83b9cc12fc5432961766a1de1ad53ebd4aa7f3cda06d9c8cce841n/a Heodo
2022-01-13678_81.xlsmxlsm 869b3e37539d37f91353d70a91951ea1da88ee298ed6992b06315984bfb23247n/a Heodo
2022-01-132992_450385.xlsmxlsm d9d0e65da97a353a9cc189af41082ae0bf1dff0acb39bb620a34ddb0c642ac79n/aHeodo
2022-01-131263143897973088.xlsmxlsm e5443ba12fbad5317a3453443db7196c10c1819f92872377cb8b61212aa56804n/a Heodo
2022-01-13797458-92951.xlsmxlsm ee49f3ff07ef559fa5be77fbc12091b27970f3ea8dc8b8aa46bab089adb8213eVirustotal results 12.90% Heodo
2022-01-1377631_761971.xlsmxlsm ad80a159607095ce60f84198a537f9ed0bc3b5205b2a84a49c8173d53d942e60n/a Heodo
2022-01-1387_96753949.xlsmxlsm bda64d87a6c5a5cd6926f31ff7be5bbe30123e2285e026e4d00028eb2e3221d5n/a Heodo
2022-01-13xF-02.xlsmxlsm bfc5772205c81262f1c0e3bd7742f6aa7d2f41e03cbdd43729f2376a9b96ea16Virustotal results 8.06% Heodo
2022-01-134476699ZBBSUJ2015457.xlsmxlsm e479adbf5f0acc27094c482523f9ae3ad97b43f50f4df328d126ab9e98f0bbf0n/a Heodo
2022-01-1322_9.xlsmxlsm 07efdf65fbb6c43bdc3ac46453701f3d1bb0f284bad5865fb4f4cf54c127708eVirustotal results 20.69% Heodo
2022-01-13TIjPV_1.xlsmxlsm 47171e7e88ede748460af600d64eaf005c1f606df64bca51bcabb9e3a4e872d9Virustotal results 20.00% Heodo
2022-01-13ITXEH63.xlsmxlsm e19c4cdeb5c2e9417e8976342dcf2494d337be7e4f6be1f465e9eacf998a6d5dVirustotal results 14.52%Heodo
2022-01-13E_7443752.xlsmxlsm 1463c17a7f06236bf5e8cf4ce7964cc17b2eabaedf00822387824b45f83021b5n/aHeodo
2022-01-12666437119671.xlsmxlsm 269d22eb99a7a96090063102024464974c9db20adf24e848352788220c7d4a3cn/a Heodo
2022-01-12hbwr-10.xlsmxlsm 20039ff121b47e5026b29877b299b76e47f3c7f766b9010a04e148a19823dbb6n/aHeodo
2022-01-12LI_1277.xlsmxlsm c2ddab3e04d60aef6cc2b227982e2701eeb4fb51f6a76c1f3047dffe536fccaaVirustotal results 8.47% Heodo
2022-01-12692_7.xlsmxlsm 24355720d9e3b12c0bd49ad9b2ade504263a3bc06d95103a3c086a316dc2ecbcn/a Heodo
2022-01-12HYQW_0910.xlsmxlsm 44f513de7c81d64e9cabb5947eec931b496e087645596cf2f7b781188d5c139eVirustotal results 8.33% Heodo
2022-01-124126_61882960.xlsmxlsm 586f3fcc8654a5be1b03a87a7ed56d234e5edc6a98977d78163fb83a8ef299cdn/a Heodo
2022-01-1297985813876279.xlsmxlsm 4dc2f22181beb5116c902aa2749a512b84988a39d68d896bbfd32ec7014bdbb3Virustotal results 17.74% Heodo
2022-01-1217718505HZIEEHEV-312759274.xlsmxlsm 6c7302d5b66f028999acc36158eba3a4e0c556e206535c5d8e73a0f3dd4bf6abn/a Heodo
2022-01-1253651090_705.xlsmxlsm 9dee7ff2bd3004489efc095782412235b35f95c28c23696b3a4512b8780ffbean/a Heodo
2022-01-122063-477.xlsmxlsm 8f99cab09eb9674d602d903701978b39bbe6bf9eb123a358837b44e4076a5e86Virustotal results 17.46% Heodo
2022-01-12279_64637613.xlsmxlsm 2788eb80c7259a61607cac6a4c3e4b606cec2fc2a5a24c44bda07ae17251c103n/a Heodo
2022-01-1222057_696707.xlsmxlsm 8bb091f18d04a9755e558790e1de67915d26c147739e9257d312824176872febn/a Heodo
2022-01-12R-7655892.xlsmxlsm 11f87ed3f9770c3db93129aeebe6247f9abc0acf6e78e28013aa1a590b1b2611Virustotal results 17.46% Heodo
2022-01-1210-94966416.xlsmxlsm 90688cc903fcce78914f9868e62c3ef96e9c3f96fb6628767039fea0132aacfbVirustotal results 17.46% Heodo
2022-01-124921230014075331.xlsmxlsm 383d6a730a28d0d9206c191bae830c3084f5980bd4a45be32b5f9cd0cfd8e9ecn/a Heodo
2022-01-12803927_483.xlsmxlsm 57dd75934f8e97adf3ea865291bb9766cae096c65aa55bcf8df2ff2325779fa1Virustotal results 17.46% Heodo
2022-01-129079725-532.xlsmxlsm 0c16a75494c71ad39149e21f629585890f62b87f82f421aa9796f55a45911f82n/a Heodo
2022-01-12RCMB-5.xlsmxlsm 306c0ade7aec03b53887263f4de92b9b0c8ab0a469f9b195b0cc172121258e86Virustotal results 17.46% Heodo
2022-01-1245497_944.xlsmxlsm 513bc7378d724e7a7c4cfb48291919fdfa001bb5e07b6cf06fc33c19055e057an/a Heodo
2022-01-12851782YQOEWALT_92437.xlsmxlsm 8e8348093645d1a6a11195a85467887d6f06ad0e5b1f5971fe2edd002912e775n/a Heodo