URLhaus Database

You are currently viewing the URLhaus database entry for http://ridernigltd.com.ng/-/106_15859935/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1971659
URL: http://ridernigltd.com.ng/-/106_15859935/?i=1
URL Status:Offline
Host: ridernigltd.com.ng
Date added:2022-01-12 20:17:03 UTC
Last online:2022-02-05 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-12 20:18:06 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:23 days, 8 hours, 4 minutes Bad (down since 2022-02-05 04:22:43 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-13uqvhffz_355.xlsmxlsm 97a28f39e64f29aa43aaaea8797e145ccc300757164905ee08775c079f7f68acVirustotal results 30.16% Heodo
2022-01-13153963225427885.xlsmxlsm cdf48801236d3cb83016605b603ad23fb52e6ac7de954595cea95034967f09adn/a Heodo
2022-01-13obmrc8336.xlsmxlsm b19bc21f8451f79c07538d17976a4e7881e2046722f28008cf12c70034478b8en/a Heodo
2022-01-13VTSWC_7.xlsmxlsm df5ad9633a767fe4cd01656bd094a53ce1ee7e2ba409eeb7852cc36bc8adcb58n/a Heodo
2022-01-13111673280440.xlsmxlsm 772971a6b4223ed654648f6e79e34133c55e788e60337e0ac7c29b53592adf17n/a Heodo
2022-01-13824769672_106135810.xlsmxlsm ec54edb8fa77d810e6deba4e6105fe4fa06c193915fbe03ddad082f3e24da369n/a Heodo
2022-01-13865232_4.xlsmxlsm d35125cbfb93cba7e424f3ad372bbfbbe9945f51fa513495beb5d7bc76351430n/a Heodo
2022-01-13Q2647482.xlsmxlsm 83db3f13875ddfcb946ac5498d81ac835a8d61adcdf74a47fcef60e8f7db20e6Virustotal results 26.98% Heodo
2022-01-13JHSIP_6.xlsmxlsm a64b918b227ae002b52f8ca07c1e57fbf11e0f6a0c5a06abbf79e2b209bce48bVirustotal results 22.22% Heodo
2022-01-13pJNBZ3930911.xlsmxlsm 13f975538e7e72ac755218c6a35604d36e0278e74fed8e2270476b89268a7f2cVirustotal results 23.33% Heodo
2022-01-1327720_564187051.xlsmxlsm 726be01c1600c33b9a3d322885ca12383ec5b64546bb389670176f77f7faf162n/a Heodo
2022-01-130714149_5989089.xlsmxlsm d47dc5f481df3ec15f19e8625c29b0beaf33c401b23191b818c9ecf885e3c8dcn/a Heodo
2022-01-13K770409853.xlsmxlsm f745757e79c9411ab969a3e2ab5ccff444e4542b87681828c091f595826410b5Virustotal results 22.95% Heodo
2022-01-13410915479.xlsmxlsm ca6662f6a52a16a294b7d873a1f4b60f6ed054cb1cbaf3207081f30380c573e2n/a Heodo
2022-01-1310360186DIDS07460096.xlsmxlsm ae4c37f20738b2bc766ca1b1437dd27be15c5a86e663f8ce3fc8be6762483305Virustotal results 22.22% Heodo
2022-01-1394344028-196.xlsmxlsm 2cfe6cc60d786a8b94d9d3114d344fb74c21e5ce5391dea3d1550df17fee05b4n/a Heodo
2022-01-13JQFJC514935.xlsmxlsm 9e1460b0a4debafe9636cf43ad6de3069afc41e53b2c0c09b6337bd165a7bcefn/a Heodo
2022-01-133847004_70.xlsmxlsm 1080082d0eec3c4e3583b6e259b0863c746d211af8a8b6b645b21059e60f1119n/a Heodo
2022-01-13U-4253.xlsmxlsm 4dc514dc9290b966a14aadaab3d4c168419ed606a81d0a1262318d8b305cfc8dn/a Heodo
2022-01-1384303_2917.xlsmxlsm 113636402be711e8a8e0e2fc59491b969fc825e8352ebbc316418ea6f30a4befVirustotal results 12.70% Heodo
2022-01-1319371-632793755.xlsmxlsm 49ec26f8a352003e43a32615495ae4554e0bb8485ef889e7ba57cf869f026c4cn/a Heodo
2022-01-13PBUEY_67577676.xlsmxlsm 1fc7f3374c25268b7040c919649cff96394322307f0b9156431e2200d78bba77n/a Heodo
2022-01-13gjgo_361.xlsmxlsm 4d6bc8f7df3ef7c6c77fd6ed3aa6049ebf8de53e8cc28bd075c2a64df63687acVirustotal results 8.47%Heodo
2022-01-13607801189-5.xlsmxlsm 07efdf65fbb6c43bdc3ac46453701f3d1bb0f284bad5865fb4f4cf54c127708en/a Heodo
2022-01-12W_55176774.xlsmxlsm 24355720d9e3b12c0bd49ad9b2ade504263a3bc06d95103a3c086a316dc2ecbcn/a Heodo
2022-01-12ERPUN664.xlsmxlsm 45a53e72db4a9d55d161277cf30ab36f2bdb6881937d80538c8468630a59b392n/a Heodo
2022-01-125680-631176.xlsmxlsm 135ace077486200deffc6797336cc464b62f91268eef6e6cee687a8c6d792053Virustotal results 8.06% Heodo
2022-01-12609470283_3176651.xlsmxlsm ccaea531ac7002797b7c988cd5b1feb6e53f5caf37ab0b4d4563040820706f74Virustotal results 8.06% Heodo
2022-01-12T-11580.xlsmxlsm 3c8b54def22442aaa334cbae48263d897ca2d62d76dc4df4e6efb03849d8c2a7n/aHeodo
2022-01-12TR-25.xlsmxlsm 43456f22a22af4bc49f0c52a891b5993721cd8595dc6f051a1a5ceff1f107621n/a Heodo
2022-01-1284758417721.xlsmxlsm 8f99cab09eb9674d602d903701978b39bbe6bf9eb123a358837b44e4076a5e86n/a Heodo
2022-01-12uZTsY_886048.xlsmxlsm 1bda0395914226e0e8595d97bf7970dbd6f029b30d8abf2d887cec6ed7084cf8n/a Heodo
2022-01-1207171765-1603.xlsmxlsm 3d2a02443b6fdf4f7e454799a6f21e861da7d410f630f30cdbdb07fb0fa06b38n/a Heodo