URLhaus Database

You are currently viewing the URLhaus database entry for https://businesszone-uae.com/wp-content/101002871_24/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1971442
URL: https://businesszone-uae.com/wp-content/101002871_24/?i=1
URL Status:Offline
Host: businesszone-uae.com
Date added:2022-01-12 18:29:04 UTC
Last online:2022-01-13 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-12 18:30:11 UTC to abuse{at}cloudflare[dot]com)
Takedown time:10 days, 14 hours, 23 minutes Bad (down since 2022-01-23 08:54:08 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-13BQYEK_9.xlsmxlsm d831965d15c4628b61ba8dfe3187272728bc26a333662060de133ec98086c510n/a 
2022-01-13U509.xlsmxlsm dbba21253eed4317b9b541462ce3c2804ee91847f8b5f851b11d4b58568aa1fdn/a Heodo
2022-01-13C_9.xlsmxlsm aefebee74f868174371b6f9925e3484198f01753d2e1ed58c2b99a6c2e24de08n/a 
2022-01-136242653_4.xlsmxlsm ac680177934f28cf84fc94b0e1f006de320955fd9f17bed4d39699cda13c8bd6n/a 
2022-01-13Vef46808.xlsmxlsm 8dc534a9f4075e05b8086b50747518675605275e2d89906ac236cc9828977818Virustotal results 30.00% 
2022-01-13KH_94581069.xlsmxlsm 3fc26c9fd1f5685b0dbd0bf5f56d85f5ae94056eb3a8ab041389b3f2948cf3f0n/a Heodo
2022-01-13HZI-067768.xlsmxlsm 304e17c2ef41373d5b2ded923de19336a227658abf49881fe446df0cfcfac00bVirustotal results 30.65% 
2022-01-133019274717807.xlsmxlsm f2c2b34b3d0b8b5e85cfecf0bb20d225e589c18841538e9283f91302bb27bde3n/a Heodo
2022-01-1377565263-1.xlsmxlsm 4f9ce5c9c9dd88a6a01a3df3299e0aa43da3bad195036c22b141f28769708334n/a 
2022-01-13912055013234.xlsmxlsm 265c8b63388f52b84bdd6028db6923447f7b027234bf5ff1f6da0bdca209b859n/a Heodo
2022-01-1370939927396288102.xlsmxlsm f1d5904d51c4f979acbd63d484b167b8cfe3b6476c70a47a80f22399c27253b6n/a Heodo
2022-01-1379503_5428473.xlsmxlsm e6881b3140103136fda1da81065755e68de65df40faf02a6bb15ca329fde15aen/a Heodo
2022-01-13xadv_91.xlsmxlsm 6452605acbfd7439e825e954124dd53046c5f148daad80558e64ccf1887a2ccfn/a 
2022-01-13789402301129452.xlsmxlsm 26b70659f75983434e092f76f7a14aed02f68ecd203b7a90cd1ed6ca1ef8bbd4n/a Heodo
2022-01-1394-86144708.xlsmxlsm df5ad9633a767fe4cd01656bd094a53ce1ee7e2ba409eeb7852cc36bc8adcb58n/a Heodo
2022-01-13MRKWS_7623.xlsmxlsm 108af965a5786b36edd5ec9d0e920c8d98b75f69cb4c120fb10a2e6033f74c60n/a Heodo
2022-01-13DI76.xlsmxlsm ec54edb8fa77d810e6deba4e6105fe4fa06c193915fbe03ddad082f3e24da369n/a Heodo
2022-01-13H607.xlsmxlsm d35125cbfb93cba7e424f3ad372bbfbbe9945f51fa513495beb5d7bc76351430n/a Heodo
2022-01-13195674174-61611966.xlsmxlsm 48d8ba8e0832a4ee318f4fb4653345ed1d8e48e2bd90b55648e18d541e534d92n/a Heodo
2022-01-1366101392500.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cVirustotal results 26.98% 
2022-01-13e_90.xlsmxlsm 13f975538e7e72ac755218c6a35604d36e0278e74fed8e2270476b89268a7f2cVirustotal results 23.33% Heodo
2022-01-1371718640MEXMWZIO_1544.xlsmxlsm 726be01c1600c33b9a3d322885ca12383ec5b64546bb389670176f77f7faf162Virustotal results 19.05% Heodo
2022-01-13162289_9876647.xlsmxlsm 6a8fc7cb880a404032161e81d67152873581b6614b238faebd731fb7fbd8cb92n/a Heodo
2022-01-13jpxz92034558.xlsmxlsm e87856edf8567e6e432ef09f0cc575e581c36b5df71a16c71658a5fb980a3d86Virustotal results 23.81% Heodo
2022-01-13122219879.xlsmxlsm ca6662f6a52a16a294b7d873a1f4b60f6ed054cb1cbaf3207081f30380c573e2n/a Heodo
2022-01-13T-10714926.xlsmxlsm c841d1d5ae704ec93026da23d3f2b9e5f00d5a229a91117df6188db2e444e87dn/a 
2022-01-139853058753094.xlsmxlsm 80f7072eb1b894cec06813c3267356f693ff21d0d1f116d1cf53d5b8035277deVirustotal results 16.13% Heodo
2022-01-135837449_87772490.xlsmxlsm 1080082d0eec3c4e3583b6e259b0863c746d211af8a8b6b645b21059e60f1119n/a Heodo
2022-01-1396354112129753681.xlsmxlsm 27142990970a1968021bca00b4005ef206e3a553179b2e717e82ebfe8a8af1b9Virustotal results 22.95% Heodo
2022-01-13IIFP_117.xlsmxlsm 8e8824a855908e301cb873fe67e37eb4af99b32f75fb1ea8997af913540ece02Virustotal results 17.46% Heodo
2022-01-13V9272.xlsmxlsm 7116287ff5fc3e837e06fb2ea4d6a131127ceecf8ef165f088114fdc8aa9e17bn/a Heodo
2022-01-12pd_0.xlsmxlsm 383d6a730a28d0d9206c191bae830c3084f5980bd4a45be32b5f9cd0cfd8e9ecn/a Heodo
2022-01-1259256122486.xlsmxlsm 7a42c12bcce014e382336c9ed46aa93e6f6c6573b7fec7e5d3ef6dedf721383aVirustotal results 17.46%Heodo
2022-01-124007_0.xlsmxlsm 0c16a75494c71ad39149e21f629585890f62b87f82f421aa9796f55a45911f82n/a Heodo
2022-01-12XM-95.xlsmxlsm 751860b0793aa0128ca038bf61fd55eef8d6c91e9c6fd876ec3492ba27f03e8eVirustotal results 17.46% Heodo