URLhaus Database

You are currently viewing the URLhaus database entry for http://mymicrogreen.mightcode.com/pub/O-60037/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1972011
URL: http://mymicrogreen.mightcode.com/pub/O-60037/?i=1
URL Status:Offline
Host: mymicrogreen.mightcode.com
Date added:2022-01-12 22:35:14 UTC
Last online:2022-02-21 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-12 22:36:18 UTC to admin{at}bhomika[dot]co[dot]in)
Takedown time:1 month, 9 days, 10 hours, 3 minutes Bad (down since 2022-02-21 08:39:44 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-15610936_42238694.xlsmxlsm 1b1483a47c9f9c4d9f34e4d8648bc368f0c59596f6ecc2d4a39dabef0aa8cf86n/a Heodo
2022-01-13610936_42238694.xlsmxlsm 967d8e1ecaddadf97ad824647e734535d41e1996b725dd594a03a043d3795b1fn/a Heodo
2022-01-13sayumy_460846.xlsmxlsm 8e2712e45fb0cbdc5a565ba4f5582ef6b0d871a0159abaed0fb6c4d519382547n/a Heodo
2022-01-13698623363-52098399.xlsmxlsm 90d0f5a1133f995ef6280f0b82b5de6d04f94f727ee5842a0a36f6e4a0b4460cn/a Heodo
2022-01-13YRY-9899350.xlsmxlsm ff782330fa53c402a91c06a1199ccdc467f8470af11fb786ee746df1ab19f594Virustotal results 11.11% Heodo
2022-01-1312283234_40.xlsmxlsm 32d200a99b9495fe0dfcab75190eb5fcb348e6fa879763d132c924fe25bfc799Virustotal results 17.46% Heodo
2022-01-13jsq-813.xlsmxlsm e1de888c89a83b9cc12fc5432961766a1de1ad53ebd4aa7f3cda06d9c8cce841Virustotal results 22.95% Heodo
2022-01-13OVLEW899.xlsmxlsm 876844b7e19d8b57429b07b92fd1092f3847f3e2521cb00e52b9a418fab8b6a1n/a Heodo
2022-01-136027247-17.xlsmxlsm d9d0e65da97a353a9cc189af41082ae0bf1dff0acb39bb620a34ddb0c642ac79n/aHeodo
2022-01-13HWR24637.xlsmxlsm 0f3edf4e46a263ca74e1089aaebc8b85db3e80677f8f4606e5f9a09fecec3903n/a Heodo
2022-01-13UCP_5819472.xlsmxlsm e5443ba12fbad5317a3453443db7196c10c1819f92872377cb8b61212aa56804n/a Heodo
2022-01-133844046401.xlsmxlsm b98bb81e71273e575642ed7f7099c846ad35017b883a860554a891c23ab9595aVirustotal results 8.06% Heodo
2022-01-13887193658_3628.xlsmxlsm 1d9de75895fb5076dfa112538287f13f40512cff9fdea541f4481c5e0d64137bn/a Heodo
2022-01-13hKWU_25537.xlsmxlsm bfc5772205c81262f1c0e3bd7742f6aa7d2f41e03cbdd43729f2376a9b96ea16Virustotal results 8.06% Heodo
2022-01-1358234692-210.xlsmxlsm e479adbf5f0acc27094c482523f9ae3ad97b43f50f4df328d126ab9e98f0bbf0n/a Heodo
2022-01-13OJFLW_84.xlsmxlsm 00714061c46c2698b29d0f88c92096cc433a3b26acac70825717dde40e0ff407n/a Heodo
2022-01-13KBl254.xlsmxlsm 18c55721fbff7b023ffab344abd151b7627bcdac0645f7074a1ad6b311828779n/aHeodo
2022-01-13931851459771.xlsmxlsm 3e5b64b52565c051b6190475c55beaa31d91d75f0f4f4a853fa774d098aa30f3n/a Heodo
2022-01-1329463232_9.xlsmxlsm 1463c17a7f06236bf5e8cf4ce7964cc17b2eabaedf00822387824b45f83021b5n/aHeodo
2022-01-126527168GDYFBAWUBQ-88.xlsmxlsm 20039ff121b47e5026b29877b299b76e47f3c7f766b9010a04e148a19823dbb6Virustotal results 20.00%Heodo
2022-01-12siry-38681.xlsmxlsm 60610dee4927e907b5a6a4ac49f8c921fa8af7005b2e8deb2b26ffcc1cac6322n/aHeodo
2022-01-12VYM_48369.xlsmxlsm 2b7d52fdf5cf60cf008016216c752a2fc6d74308772073a7157f9cd29cfd0d1en/a 
2022-01-12910386984-093.xlsmxlsm 45a53e72db4a9d55d161277cf30ab36f2bdb6881937d80538c8468630a59b392n/a Heodo