URLhaus Database

You are currently viewing the URLhaus database entry for http://ona.pradex.pl/2196/oks28920875/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1972125
URL: http://ona.pradex.pl/2196/oks28920875/?i=1
URL Status:Offline
Host: ona.pradex.pl
Date added:2022-01-12 23:26:03 UTC
Last online:2022-01-14 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-12 23:27:07 UTC to abuse{at}atman[dot]pl)
Takedown time:1 day, 0 hours, 42 minutes Poor (down since 2022-01-14 00:09:44 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-13478171-075427507.xlsmxlsm b23d03b69fe38e5455c97081efdb773b4a1d55c44279acd32686a04ab1e70aaeVirustotal results 22.95% 
2022-01-139374554-85780911.xlsmxlsm 382027190f16994bc76a439e666be02710c43ee123e5bbf37e0394d1bd7e4a39n/a Heodo
2022-01-13863164_86.xlsmxlsm 0f7733066d2857280a04dbe1d6780d51d49894c7576632be019c7b7b54318028n/aHeodo
2022-01-13AQ_33.xlsmxlsm 1de860bde561d55095e552fa90b69c42d9b9a2c7869540cabaf87cf332e7a657n/a Heodo
2022-01-135062117934.xlsmxlsm 5beaacf0c6bee900893f52cff69c41a062fc684f58bf402487329402424c14b6n/a Heodo
2022-01-13FFH_006470.xlsmxlsm 236a6d0de83a050c7865dba3da1e5ec1e210668e47a23499a833dd10551e9087n/a Heodo
2022-01-13722_988785.xlsmxlsm 7e897b5f2c8c39557b9f0352db07c0db4238faf52f3b616fdb4cfcb2d0eeca71n/a Heodo
2022-01-13mz-662.xlsmxlsm 7b6f6a4bbc69ade611b991ec40d097b4b37590aa12be7376228f7a7a3b13220dn/a Heodo
2022-01-13HV6457.xlsmxlsm b76e18e3aa77d8a35159a5b34f93940a933d206ef27896c6abca13c2686d24abn/a Heodo
2022-01-1367794_607.xlsmxlsm 0fdebd51c10306d56bd1555cc2467ae166b662318767f4913f57c930dfb4be05n/a 
2022-01-13NEJ73707.xlsmxlsm b5befbca72d6e064f55ecaf38f0ca70b8347f959011fd47e991ce5d8aa309de1n/a Heodo
2022-01-13F_5612.xlsmxlsm a58fa75e6f2b26544b017856c6e1c56cb39d7769f3854c1cebdebdc0bcdbee9eVirustotal results 30.65% Heodo
2022-01-13csb_6968.xlsmxlsm a139884d68aacbe19a1b68501de5392ef5ba05cc3eb5a5b2ed0c347db44af4can/a 
2022-01-13Re-6033966.xlsmxlsm 5cf53f9f40389a8c56abd3a90681dadd27c0db904fbc2422ec9baa37e84c1584n/a Heodo
2022-01-13IY_96650125.xlsmxlsm d652c467b10eb9cec0d36d73accbe00a2d4704678683e8ab611e8de487e34cf2n/a 
2022-01-1370483337275.xlsmxlsm 6ce5fc9630e85823c37196bfe8439166095e763ef9367c575e11b78d7cb59c03n/a 
2022-01-134683588BNKP78.xlsmxlsm 8dc534a9f4075e05b8086b50747518675605275e2d89906ac236cc9828977818n/a 
2022-01-134893_507081.xlsmxlsm 3fc26c9fd1f5685b0dbd0bf5f56d85f5ae94056eb3a8ab041389b3f2948cf3f0n/a Heodo
2022-01-133213813295240.xlsmxlsm 9b824fea7827437bcd5da842e5c89a7a2b9e6f3b7419df4b2ebe8141a327cb98n/a Heodo
2022-01-13hrttr-3062790.xlsmxlsm f2c2b34b3d0b8b5e85cfecf0bb20d225e589c18841538e9283f91302bb27bde3n/a Heodo
2022-01-13hv_15229.xlsmxlsm e8da2349f8ec549d999a3e63b1f859f0452b0301aaf4fced70ecbba675b81247n/a 
2022-01-1377065661.xlsmxlsm a8b105b33e639fbfaf784868e4c8b14639d7e0dfbde96bb5071fa8d7160595fen/a Heodo
2022-01-1396168_75863678.xlsmxlsm f1d5904d51c4f979acbd63d484b167b8cfe3b6476c70a47a80f22399c27253b6n/a Heodo
2022-01-13672KERHB_2.xlsmxlsm 97a28f39e64f29aa43aaaea8797e145ccc300757164905ee08775c079f7f68acn/a Heodo
2022-01-130350_3454179.xlsmxlsm 26b70659f75983434e092f76f7a14aed02f68ecd203b7a90cd1ed6ca1ef8bbd4n/a Heodo
2022-01-13N_476819795.xlsmxlsm 650bbdbc87791034d76982f257174ba4504b95273cc4b6f2abaa4e361cb190e7n/a Heodo
2022-01-13BY8838.xlsmxlsm aeb70e41209244bbbb3f870a325ee369ce718361b2caf361f8472ce7b1b7001dn/a Heodo
2022-01-13MNA-075760.xlsmxlsm 8b97c32b643fd911fc305bdb62b94e1b34bf97ba87335b1f81cabe2bbf250d24n/a Heodo
2022-01-13219073028-2.xlsmxlsm b3a8073712469f70329fad465825f867bd6dcf83420de3004730f91ecc938138n/a Heodo
2022-01-131332SBDMQNJT-4.xlsmxlsm 1837567c1c4771488aaff8602f2c98711463d9afd7dbe2a3ab3413e37e30f610Virustotal results 28.57% Heodo
2022-01-13C_87089011.xlsmxlsm a64b918b227ae002b52f8ca07c1e57fbf11e0f6a0c5a06abbf79e2b209bce48bVirustotal results 22.22% Heodo
2022-01-13167331736.xlsmxlsm 915354db100b6c7c744bede05828fd397ef2ab000bced2ac46e799b5d5a8e9d5n/a Heodo
2022-01-13oms7.xlsmxlsm f1a79deb19dda7df8c5aa11ca798e574b2911291a6751b850841157761985512n/a Heodo
2022-01-13RF-860924.xlsmxlsm bbfb17586e236c40aa79fe1b9301fb2b7c24bad1eb90f255a77b96d228bd030en/a Heodo
2022-01-1322320523_32.xlsmxlsm 6ea34acd0eb48ed64996a29e6740c3548b25f4e65feda3a4ca5514d0407abd40n/a Heodo
2022-01-13BP_83687.xlsmxlsm 1d8482afdb97aba866fc26b21eaa9f92f46ea841566bb0588150aecd4347cd45n/a Heodo
2022-01-13JT66786882.xlsmxlsm 6c5843f31e83acb3be71be737cb15c279df63ad2191db42d1687985925eee1c9Virustotal results 22.22% Heodo
2022-01-13T_35489491.xlsmxlsm 2cfe6cc60d786a8b94d9d3114d344fb74c21e5ce5391dea3d1550df17fee05b4n/a Heodo
2022-01-13Y-0038512.xlsmxlsm 9e1460b0a4debafe9636cf43ad6de3069afc41e53b2c0c09b6337bd165a7bcefn/a Heodo
2022-01-131753310-36653.xlsmxlsm 1080082d0eec3c4e3583b6e259b0863c746d211af8a8b6b645b21059e60f1119n/a Heodo
2022-01-1354941642225.xlsmxlsm 4dc514dc9290b966a14aadaab3d4c168419ed606a81d0a1262318d8b305cfc8dn/a Heodo
2022-01-13UVP_2.xlsmxlsm 113636402be711e8a8e0e2fc59491b969fc825e8352ebbc316418ea6f30a4befVirustotal results 12.70% Heodo
2022-01-13C-28961478.xlsmxlsm 152d0b25ca2f0f4066edf77906c112fe4e6d49c17f6fc35a039686276ad7686dn/a Heodo
2022-01-134866_111.xlsmxlsm 259272a5032f537239c61ba1c8b5bdd26e8e6c4f1ec9b54ee52eaeeac5f5690cn/a Heodo
2022-01-13qp241.xlsmxlsm 8e2712e45fb0cbdc5a565ba4f5582ef6b0d871a0159abaed0fb6c4d519382547Virustotal results 19.35% Heodo
2022-01-13880560-65270.xlsmxlsm d96dba578ec6bbb043e6ef20f9f43779bd471f5329b9ba5416a0a4785564ebd6Virustotal results 20.63% Heodo
2022-01-13nhfNE_64.xlsmxlsm ff782330fa53c402a91c06a1199ccdc467f8470af11fb786ee746df1ab19f594Virustotal results 11.11% Heodo
2022-01-13062526002_9.xlsmxlsm 32d200a99b9495fe0dfcab75190eb5fcb348e6fa879763d132c924fe25bfc799Virustotal results 17.46% Heodo
2022-01-1334923-390.xlsmxlsm ae8e1d5678b54ef2ddb35fcf1233370916f4e2355f1aeb9066b9f7e12d07bcacn/a Heodo
2022-01-13SSWH418092.xlsmxlsm a31aca91b05fbf55ff7e2ebb699e532dbd3025bdc3b9f2646fef0f330f6e574aVirustotal results 11.11% Heodo
2022-01-1338019CPZQLAIYG-98903.xlsmxlsm 869b3e37539d37f91353d70a91951ea1da88ee298ed6992b06315984bfb23247n/a Heodo
2022-01-13D-4784910.xlsmxlsm 69af6706b85f8b7530add4d0277acf97e3f30aa8240e27adf3c97ba52581e86cVirustotal results 10.00% Heodo
2022-01-13pcwkzhu-971115.xlsmxlsm 0f3edf4e46a263ca74e1089aaebc8b85db3e80677f8f4606e5f9a09fecec3903Virustotal results 20.00% Heodo
2022-01-13H-2.xlsmxlsm 4e334f1e7d8c85ec0ef565959898a1ddbe225377df8590e806143832bc768320n/a Heodo
2022-01-136793951-3589515.xlsmxlsm b98bb81e71273e575642ed7f7099c846ad35017b883a860554a891c23ab9595aVirustotal results 8.06% Heodo
2022-01-13QI984668113.xlsmxlsm bda64d87a6c5a5cd6926f31ff7be5bbe30123e2285e026e4d00028eb2e3221d5n/a Heodo
2022-01-133865_7636.xlsmxlsm bfc5772205c81262f1c0e3bd7742f6aa7d2f41e03cbdd43729f2376a9b96ea16Virustotal results 8.06% Heodo
2022-01-13jQZT_982289.xlsmxlsm ed02cf2428790fc05964cbe66c268a67503551249437381125a51401de15e753n/aHeodo
2022-01-13DOV-023872189.xlsmxlsm 00714061c46c2698b29d0f88c92096cc433a3b26acac70825717dde40e0ff407Virustotal results 8.47% Heodo
2022-01-13UUG_6478.xlsmxlsm 18c55721fbff7b023ffab344abd151b7627bcdac0645f7074a1ad6b311828779n/aHeodo
2022-01-13ofmsy_4054654.xlsmxlsm e19c4cdeb5c2e9417e8976342dcf2494d337be7e4f6be1f465e9eacf998a6d5dn/aHeodo
2022-01-13D_33498979.xlsmxlsm 38e984900acb5a6830c8ea2b34c0b1b85c45b32848da185c5bd3e2546ade2311Virustotal results 8.06% Heodo
2022-01-126341474-85661665.xlsmxlsm 20039ff121b47e5026b29877b299b76e47f3c7f766b9010a04e148a19823dbb6n/aHeodo
2022-01-12vrqwv-5817609.xlsmxlsm e62d334e565115ed95712c266991de6e26054d57b5c019a4ef2c0382377c93f9Virustotal results 17.74% Heodo