URLhaus Database

You are currently viewing the URLhaus database entry for http://meca.global/wp-admin/57_822448/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1972179
URL: http://meca.global/wp-admin/57_822448/?i=1
URL Status:Offline
Host: meca.global
Date added:2022-01-12 23:54:04 UTC
Last online:2022-01-13 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?):mail Yes (Ticket DCU003883920 created on 2022-01-12 23:55:10 UTC)
Takedown time:11 hours, 29 minutes Good (down since 2022-01-13 11:24:59 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-13130263-35.xlsmxlsm 9be7257858cb4a52549d8339ff573f9a1a8e1aaf43bfa52506caf9ae6993252an/a Heodo
2022-01-13HZ-834.xlsmxlsm d47dc5f481df3ec15f19e8625c29b0beaf33c401b23191b818c9ecf885e3c8dcn/a Heodo
2022-01-1335287139_882.xlsmxlsm 2b8b0ca757e3eccb527d9ce11a9a8815f5a9ce3c6d2ed5a8711d4c109e88bd71Virustotal results 22.22% Heodo
2022-01-1307228407718.xlsmxlsm f745757e79c9411ab969a3e2ab5ccff444e4542b87681828c091f595826410b5n/a Heodo
2022-01-137198-6871.xlsmxlsm 6c5843f31e83acb3be71be737cb15c279df63ad2191db42d1687985925eee1c9n/a Heodo
2022-01-13ANMI_14.xlsmxlsm c841d1d5ae704ec93026da23d3f2b9e5f00d5a229a91117df6188db2e444e87dn/a 
2022-01-1374891XTWAPQTRM368900.xlsmxlsm 80f7072eb1b894cec06813c3267356f693ff21d0d1f116d1cf53d5b8035277deVirustotal results 16.13% Heodo
2022-01-13XDTH_11103.xlsmxlsm 7fc994decafbc81cd090c28c1de605c93e2ae18f645faac2d1f6680b85ef7c13Virustotal results 14.29% Heodo
2022-01-13Q307.xlsmxlsm 4630a30d5176cd74592ae6769d0cfec8ab4f331def3ff4f189dfb244eaa7ad56n/a Heodo
2022-01-13FZP-9.xlsmxlsm 113636402be711e8a8e0e2fc59491b969fc825e8352ebbc316418ea6f30a4befVirustotal results 12.70% Heodo
2022-01-13lz-256.xlsmxlsm 49ec26f8a352003e43a32615495ae4554e0bb8485ef889e7ba57cf869f026c4cn/a Heodo
2022-01-13TAA_562.xlsmxlsm 967d8e1ecaddadf97ad824647e734535d41e1996b725dd594a03a043d3795b1fn/a Heodo
2022-01-13JJMQC_397157.xlsmxlsm 8e2712e45fb0cbdc5a565ba4f5582ef6b0d871a0159abaed0fb6c4d519382547n/a Heodo
2022-01-13P1812210.xlsmxlsm d96dba578ec6bbb043e6ef20f9f43779bd471f5329b9ba5416a0a4785564ebd6Virustotal results 20.63% Heodo
2022-01-131405128_815348.xlsmxlsm c14e76a48aa71dbc135baf60cb71367b03353dfd7e1e256ec9158c9ab9566677n/a Heodo
2022-01-1389016742588872055.xlsmxlsm 37bb74fcd5b1ff6bbd323163e21277b3ed80d124cc4d727f4ec64d1048a2c85eVirustotal results 22.95% Heodo
2022-01-13StcM_8163461.xlsmxlsm ae8e1d5678b54ef2ddb35fcf1233370916f4e2355f1aeb9066b9f7e12d07bcacVirustotal results 22.95% Heodo
2022-01-13YNU_9.xlsmxlsm cffc89330574a0b7d5096c64bff0483e4dbc38d09be06dd3fd4cafca0a4e99edn/a Heodo
2022-01-13JD-3873.xlsmxlsm 869b3e37539d37f91353d70a91951ea1da88ee298ed6992b06315984bfb23247n/a Heodo
2022-01-131825XOXYPPCFA_14100.xlsmxlsm d9d0e65da97a353a9cc189af41082ae0bf1dff0acb39bb620a34ddb0c642ac79n/aHeodo
2022-01-13136239-872778.xlsmxlsm 0f3edf4e46a263ca74e1089aaebc8b85db3e80677f8f4606e5f9a09fecec3903n/a Heodo
2022-01-132382BAKI_56570191.xlsmxlsm e5443ba12fbad5317a3453443db7196c10c1819f92872377cb8b61212aa56804n/a Heodo
2022-01-13WQL_3437.xlsmxlsm b98bb81e71273e575642ed7f7099c846ad35017b883a860554a891c23ab9595an/a Heodo
2022-01-1373NJLOIMYDR_86227644.xlsmxlsm bda64d87a6c5a5cd6926f31ff7be5bbe30123e2285e026e4d00028eb2e3221d5n/a Heodo
2022-01-13364275-0.xlsmxlsm bfc5772205c81262f1c0e3bd7742f6aa7d2f41e03cbdd43729f2376a9b96ea16Virustotal results 8.06% Heodo
2022-01-1324_15757.xlsmxlsm ed02cf2428790fc05964cbe66c268a67503551249437381125a51401de15e753Virustotal results 14.52%Heodo
2022-01-1374883_30964.xlsmxlsm 07efdf65fbb6c43bdc3ac46453701f3d1bb0f284bad5865fb4f4cf54c127708en/a Heodo
2022-01-13380597242_8304.xlsmxlsm 18c55721fbff7b023ffab344abd151b7627bcdac0645f7074a1ad6b311828779n/aHeodo
2022-01-13970175752_11867416.xlsmxlsm e19c4cdeb5c2e9417e8976342dcf2494d337be7e4f6be1f465e9eacf998a6d5dVirustotal results 14.52%Heodo
2022-01-13060453-063392.xlsmxlsm 1463c17a7f06236bf5e8cf4ce7964cc17b2eabaedf00822387824b45f83021b5n/aHeodo
2022-01-1243899_7958.xlsmxlsm 269d22eb99a7a96090063102024464974c9db20adf24e848352788220c7d4a3cVirustotal results 15.25% Heodo