URLhaus Database

You are currently viewing the URLhaus database entry for https://goodfellas.me/content/74475874-5200816/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1972280
URL: https://goodfellas.me/content/74475874-5200816/?i=1
URL Status:Offline
Host: goodfellas.me
Date added:2022-01-13 00:52:17 UTC
Last online:2022-01-13 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-13 01:15:34 UTC to abuse{at}as51430[dot]net)
Takedown time:13 hours, 17 minutes Good (down since 2022-01-13 14:32:44 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1373567784833504.xlsmxlsm 109868bbf981851bac44548c11bee90f08fd3c83e06c9b9539f568e047f45e0an/a Heodo
2022-01-1335233173037723.xlsmxlsm 399fd8ce9218a6b24bbf3c9e307934df9b2954d45119371365be1360c88ec6f5Virustotal results 25.40% Heodo
2022-01-1341692567_916.xlsmxlsm 1837567c1c4771488aaff8602f2c98711463d9afd7dbe2a3ab3413e37e30f610n/a Heodo
2022-01-13480436_0036.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cn/a 
2022-01-138360597473833.xlsmxlsm 726be01c1600c33b9a3d322885ca12383ec5b64546bb389670176f77f7faf162Virustotal results 19.05% Heodo
2022-01-134518519_283853.xlsmxlsm 27142990970a1968021bca00b4005ef206e3a553179b2e717e82ebfe8a8af1b9n/a Heodo
2022-01-13k_2980.xlsmxlsm 49ec26f8a352003e43a32615495ae4554e0bb8485ef889e7ba57cf869f026c4cn/a Heodo
2022-01-13655-2996254.xlsmxlsm 259272a5032f537239c61ba1c8b5bdd26e8e6c4f1ec9b54ee52eaeeac5f5690cn/a Heodo
2022-01-13F7859.xlsmxlsm 9eb7d16794f6e4e2e701458af298b2b16c91a04dd45361cc306f32bc5fd25491n/a Heodo
2022-01-1354897704.xlsmxlsm 32d200a99b9495fe0dfcab75190eb5fcb348e6fa879763d132c924fe25bfc799n/a Heodo
2022-01-13185952613_2050.xlsmxlsm cffc89330574a0b7d5096c64bff0483e4dbc38d09be06dd3fd4cafca0a4e99edn/a Heodo
2022-01-13OXN15128247.xlsmxlsm 876844b7e19d8b57429b07b92fd1092f3847f3e2521cb00e52b9a418fab8b6a1n/a Heodo
2022-01-13dovti-59.xlsmxlsm d9d0e65da97a353a9cc189af41082ae0bf1dff0acb39bb620a34ddb0c642ac79n/aHeodo
2022-01-137378_91712858.xlsmxlsm 69af6706b85f8b7530add4d0277acf97e3f30aa8240e27adf3c97ba52581e86cn/a Heodo
2022-01-13560540568-95539808.xlsmxlsm 7d631c017cb37c772f9ec3a267d89dc26eb44eaf38e4fc579d90bf739878c8f2n/a Heodo
2022-01-13SKF9.xlsmxlsm 638c333549cd204d298c9443eb29055edf4bc9e420895fa088aef37f7b2668feVirustotal results 16.39% Heodo
2022-01-13667_54745.xlsmxlsm 1fc7f3374c25268b7040c919649cff96394322307f0b9156431e2200d78bba77n/a Heodo
2022-01-13uatht806593.xlsmxlsm cb57d02722993dd10fe56d30e2b0675417684cdc6308212c9e30035f95e257ddVirustotal results 8.33% Heodo