URLhaus Database

You are currently viewing the URLhaus database entry for http://leyuniversitaria.pe/b/OS_15161/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1971895
URL: http://leyuniversitaria.pe/b/OS_15161/?i=1
URL Status:Offline
Host: leyuniversitaria.pe
Date added:2022-01-12 21:43:03 UTC
Last online:2022-01-14 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-12 21:44:08 UTC to abuse{at}diginl[dot]nl)
Takedown time:1 day, 11 hours, 38 minutes Poor (down since 2022-01-14 09:22:46 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-13537LXVJ_1690081.xlsmxlsm 25b8d35ed3266ce2eb8e7c3d62733d4a5947e1f7952e7c716ef173ae59e2f7feVirustotal results 24.19%Heodo
2022-01-13lhwfpj099.xlsmxlsm 236a6d0de83a050c7865dba3da1e5ec1e210668e47a23499a833dd10551e9087n/a Heodo
2022-01-13710520-84.xlsmxlsm 965ba65b5f61878b8ae10148e82de812b432f517f3d45802be713ea45aefd0c9n/a Heodo
2022-01-133527_32928.xlsmxlsm 7b6f6a4bbc69ade611b991ec40d097b4b37590aa12be7376228f7a7a3b13220dn/a Heodo
2022-01-13MR-35005.xlsmxlsm 523f8798637989d56a2dc113543544950f4c2a5d11b2bcb6d73e96b2c6182f86n/a Heodo
2022-01-13662240ALRWWJ-017.xlsmxlsm 3ccc385404055d349d08f8743232053863df38651ccac0bc96a0935598a00c1an/a Heodo
2022-01-1359965-86634055.xlsmxlsm b5befbca72d6e064f55ecaf38f0ca70b8347f959011fd47e991ce5d8aa309de1n/a Heodo
2022-01-1358992533-539.xlsmxlsm 890e54734498c0cf6c05a9678b66b29e3c38203ea61f83937a017ba7afed9809n/a 
2022-01-13SJ410.xlsmxlsm 8186f82da42f9f07b405d280632e62d7632c4b472cbb489761bf400bc9ac2b74n/a Heodo
2022-01-13A_4889265.xlsmxlsm b4fb2c694f76e85c361b9c285f67b7a5a15074919db0b9eb2d55521390eedbc3n/a 
2022-01-13330_4222207.xlsmxlsm 2fc174fae6bcf5ff45e069783a751950e4989cdebf6f04fe8ddfe2121ca28f15n/a Heodo
2022-01-1351460620UCLG425.xlsmxlsm 55831e6466e727c6dc0efc619eefaf7ff2a89d4ccb2f770e34aa49cd4a9894b9n/a Heodo
2022-01-13830692_9934.xlsmxlsm dc8adc8e13d3e5a64f2d69f2163da90a19cd80594bf4db6b8d17c381312d28b6n/a Heodo
2022-01-13IRLGL22.xlsmxlsm 3e8ac5b89fdb8697813438a75aec6df15ad029e5c499a023f5bc7a209ff1b13bn/aHeodo
2022-01-138277_864.xlsmxlsm 78dd5816d66701839612b5caf64d4337e45d516e52b5f177345f5019ce4aa907n/a Heodo
2022-01-13259582NNAHV-076655318.xlsmxlsm 115b1bbc0363cd535f4336aac31bed3fa17e2c2a4ebcb15618e55c9dfc91896bn/a Heodo
2022-01-13VLTQ-053848.xlsmxlsm 4f9ce5c9c9dd88a6a01a3df3299e0aa43da3bad195036c22b141f28769708334n/a 
2022-01-1386262_3.xlsmxlsm a8b105b33e639fbfaf784868e4c8b14639d7e0dfbde96bb5071fa8d7160595fen/a Heodo
2022-01-137303174090.xlsmxlsm c9d6e67d61769e32b703185a1035e43bbc9c7c053cc1d06594fad3979da3cc9en/a Heodo
2022-01-137468612_14.xlsmxlsm 1070ee81825904e9b69247d5ecd09aa91e0be9722ff1b627740e98e0bd48ee7fn/a Heodo
2022-01-13468486160_10489.xlsmxlsm 2d009791d777c752c4fddb6e32e5d123d7ecf80145baef849436bf4879259b8en/a Heodo
2022-01-13928470526.xlsmxlsm 109868bbf981851bac44548c11bee90f08fd3c83e06c9b9539f568e047f45e0an/a Heodo
2022-01-13dtlj_94022.xlsmxlsm b8f140e8a83cdb10b7816fd789deccef6d4373e8441fa40618b48484359041b5n/a Heodo
2022-01-13BRC_477943.xlsmxlsm aeb70e41209244bbbb3f870a325ee369ce718361b2caf361f8472ce7b1b7001dn/a Heodo
2022-01-139248912XTWKB9.xlsmxlsm 8b97c32b643fd911fc305bdb62b94e1b34bf97ba87335b1f81cabe2bbf250d24Virustotal results 26.98% Heodo
2022-01-13FZ_3597.xlsmxlsm b3a8073712469f70329fad465825f867bd6dcf83420de3004730f91ecc938138n/a Heodo
2022-01-13hru_87.xlsmxlsm 125468fda9c224d8a3ccdf92f08037a343c0341a8e64dc2c1182e1d3d4e496a7Virustotal results 26.98% Heodo
2022-01-133532249581.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cVirustotal results 26.98% 
2022-01-13FTSAY_16826284.xlsmxlsm 13f975538e7e72ac755218c6a35604d36e0278e74fed8e2270476b89268a7f2cVirustotal results 23.33% Heodo
2022-01-13QD_69005261.xlsmxlsm 726be01c1600c33b9a3d322885ca12383ec5b64546bb389670176f77f7faf162Virustotal results 19.05% Heodo
2022-01-13U457186.xlsmxlsm d47dc5f481df3ec15f19e8625c29b0beaf33c401b23191b818c9ecf885e3c8dcn/a Heodo
2022-01-13812994795047.xlsmxlsm 2b8b0ca757e3eccb527d9ce11a9a8815f5a9ce3c6d2ed5a8711d4c109e88bd71n/a Heodo
2022-01-133801065.xlsmxlsm ca6662f6a52a16a294b7d873a1f4b60f6ed054cb1cbaf3207081f30380c573e2n/a Heodo
2022-01-13ZQI-2.xlsmxlsm 6c5843f31e83acb3be71be737cb15c279df63ad2191db42d1687985925eee1c9Virustotal results 22.22% Heodo
2022-01-1304518647-085750416.xlsmxlsm c841d1d5ae704ec93026da23d3f2b9e5f00d5a229a91117df6188db2e444e87dn/a 
2022-01-13BPWA98039.xlsmxlsm 9e1460b0a4debafe9636cf43ad6de3069afc41e53b2c0c09b6337bd165a7bcefn/a Heodo
2022-01-1350262.xlsmxlsm 1080082d0eec3c4e3583b6e259b0863c746d211af8a8b6b645b21059e60f1119n/a Heodo
2022-01-13HG_20.xlsmxlsm c062d769449f6c74f82252e4215d23c83a360d97a7ed1b75001ba3250df330e7n/a Heodo
2022-01-13656552193-024.xlsmxlsm 113636402be711e8a8e0e2fc59491b969fc825e8352ebbc316418ea6f30a4befVirustotal results 12.70% Heodo
2022-01-138334459_576991.xlsmxlsm 152d0b25ca2f0f4066edf77906c112fe4e6d49c17f6fc35a039686276ad7686dn/a Heodo
2022-01-13a-90627.xlsmxlsm 967d8e1ecaddadf97ad824647e734535d41e1996b725dd594a03a043d3795b1fn/a Heodo
2022-01-13207504_4.xlsmxlsm 20d7c4f7e882c414b403403773c244fa421744c48bb9e52a2f9236825be9a76fVirustotal results 11.11% Heodo
2022-01-13VPN_343.xlsmxlsm 9eb7d16794f6e4e2e701458af298b2b16c91a04dd45361cc306f32bc5fd25491n/a Heodo
2022-01-13M_08102466.xlsmxlsm d96dba578ec6bbb043e6ef20f9f43779bd471f5329b9ba5416a0a4785564ebd6n/a Heodo
2022-01-1310471676299.xlsmxlsm 37bb74fcd5b1ff6bbd323163e21277b3ed80d124cc4d727f4ec64d1048a2c85en/a Heodo
2022-01-13BOa7189468.xlsmxlsm ae8e1d5678b54ef2ddb35fcf1233370916f4e2355f1aeb9066b9f7e12d07bcacn/a Heodo
2022-01-135612812_44739730.xlsmxlsm a31aca91b05fbf55ff7e2ebb699e532dbd3025bdc3b9f2646fef0f330f6e574aVirustotal results 11.11% Heodo
2022-01-13Ep_116062381.xlsmxlsm 876844b7e19d8b57429b07b92fd1092f3847f3e2521cb00e52b9a418fab8b6a1n/a Heodo
2022-01-13ZEB-1850770.xlsmxlsm d9d0e65da97a353a9cc189af41082ae0bf1dff0acb39bb620a34ddb0c642ac79n/aHeodo
2022-01-135896869898.xlsmxlsm 0f3edf4e46a263ca74e1089aaebc8b85db3e80677f8f4606e5f9a09fecec3903Virustotal results 20.00% Heodo
2022-01-13382229789-409201.xlsmxlsm ee49f3ff07ef559fa5be77fbc12091b27970f3ea8dc8b8aa46bab089adb8213eVirustotal results 12.90% Heodo
2022-01-1331909584_79778.xlsmxlsm b98bb81e71273e575642ed7f7099c846ad35017b883a860554a891c23ab9595an/a Heodo
2022-01-13KN_64241.xlsmxlsm bda64d87a6c5a5cd6926f31ff7be5bbe30123e2285e026e4d00028eb2e3221d5n/a Heodo
2022-01-13VMD423624.xlsmxlsm bfc5772205c81262f1c0e3bd7742f6aa7d2f41e03cbdd43729f2376a9b96ea16n/a Heodo
2022-01-13KnK_57863284.xlsmxlsm ed02cf2428790fc05964cbe66c268a67503551249437381125a51401de15e753n/aHeodo
2022-01-1360521-708012.xlsmxlsm 07efdf65fbb6c43bdc3ac46453701f3d1bb0f284bad5865fb4f4cf54c127708en/a Heodo
2022-01-13wjuolie_977.xlsmxlsm 47171e7e88ede748460af600d64eaf005c1f606df64bca51bcabb9e3a4e872d9Virustotal results 14.75% Heodo
2022-01-13YG_82144.xlsmxlsm ae3ac0659210f9f66b73bb14858d53a215ed91ef3c5b812c671fd4e824ee150aVirustotal results 8.06%Heodo
2022-01-136696828ZQKGL_114.xlsmxlsm 1463c17a7f06236bf5e8cf4ce7964cc17b2eabaedf00822387824b45f83021b5n/aHeodo
2022-01-12ZIJLF8423612.xlsmxlsm 20039ff121b47e5026b29877b299b76e47f3c7f766b9010a04e148a19823dbb6Virustotal results 20.00%Heodo
2022-01-12870DJGXCTUFC-3.xlsmxlsm 60610dee4927e907b5a6a4ac49f8c921fa8af7005b2e8deb2b26ffcc1cac6322Virustotal results 16.67%Heodo
2022-01-122940213-536.xlsmxlsm 24355720d9e3b12c0bd49ad9b2ade504263a3bc06d95103a3c086a316dc2ecbcn/a Heodo
2022-01-12yijj-62252.xlsmxlsm 9f0a7342511328df49b73e718bb20dd3db1437cb3d115548f9d6a0cfda3af0d3Virustotal results 19.67% Heodo
2022-01-128793_55.xlsmxlsm 44f513de7c81d64e9cabb5947eec931b496e087645596cf2f7b781188d5c139eVirustotal results 8.06% Heodo
2022-01-12u-003.xlsmxlsm 4dc2f22181beb5116c902aa2749a512b84988a39d68d896bbfd32ec7014bdbb3n/a Heodo
2022-01-127266_656.xlsmxlsm af2883e71c1c33d15944d4bdd9bfe7f027a2f50299f203642ecdc906cedf3b2en/aHeodo