URLhaus Database

You are currently viewing the URLhaus database entry for https://hz1.xhjmmm.com/fz/LNSHA31102/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1972686
URL: https://hz1.xhjmmm.com/fz/LNSHA31102/?i=1
URL Status:Offline
Host: hz1.xhjmmm.com
Date added:2022-01-13 04:19:07 UTC
Last online:2022-02-10 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-13 04:20:57 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com,abuse{at}12321[dot]cn,abuse{at}alibaba-inc[dot]com)
Takedown time:28 days, 3 hours, 37 minutes Bad (down since 2022-02-10 07:58:47 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-14abpsipe_30845.xlsmxlsm 38aa8bb59cfaed48d361e496e1682f677a3f58223fbe1a6a9e2e1fcd5d837c43n/a Heodo
2022-01-149713643_42288075.xlsmxlsm 878245ca533c239b7066ce1bb483d8cd42a8d5887954c3e4db00b5a52d46f354n/a 
2022-01-1409167-8231486.xlsmxlsm 3b63ba5e81eedd06656eca70b56b6d9490b598df1646dd83dacefe8cd52d6a77Virustotal results 23.81%Heodo
2022-01-1430902-541563.xlsmxlsm 6fd0e2563b3a57caea1e0d3feb66a44be67ba02e5a317dab989189508a1117fen/a Heodo
2022-01-14ANG_7248925.xlsmxlsm e2490ca7300bcaab90df45a49b7610f5f492f85ab78edae5188270bf8218128en/a Heodo
2022-01-14rymEq-74.xlsmxlsm 4a91e55e522f50b2a2f58c92097b3005caaee1890044b7563efb707735558d1an/a 
2022-01-1461538576WENX-64.xlsmxlsm d8eb28ba7038dd673602a96e242b10c5af8ea2f296fe49eb1b36bf837fbeef06n/a Heodo
2022-01-141618989866081.xlsmxlsm a0a8993ac49af8c9a67d95350e800f6adfbc38b6bfc5a7c213eca23b0b9e5857n/a 
2022-01-14KXY-89589311.xlsmxlsm 620279fcd1238b22b28ff6e4d98f577b33d7dcfe09e7729f6ffd76070cec42e8Virustotal results 25.40% Heodo
2022-01-1454772-69398.xlsmxlsm 217dab1dcf450f814ccba0ec24734922bd9924881e63323677e377f709310938n/aHeodo
2022-01-14r_53.xlsmxlsm 6865b7a1dc0601641ca16e96af174f9dfceb18c137e19db1801def5dccb3b79cn/a 
2022-01-14ZFTG-7042.xlsmxlsm 675e9b8ca552efccc34ac7a2f9fff8ef872d7a5cf5790aca00d33baebff47a87n/a 
2022-01-1426270864.xlsmxlsm 5cff33ed1b7a4ed8ef30baa3a47546681144826e18bdc2082c9676a4f32c4bbcn/a 
2022-01-134441097427628.xlsmxlsm da82f1d4fefd343481585cf68b60330590b552ab3e3ad3acaf639732166f17a6Virustotal results 24.19% Heodo
2022-01-13fsEc225.xlsmxlsm b23d03b69fe38e5455c97081efdb773b4a1d55c44279acd32686a04ab1e70aaeVirustotal results 22.95% 
2022-01-1325888-64.xlsmxlsm 382027190f16994bc76a439e666be02710c43ee123e5bbf37e0394d1bd7e4a39n/a Heodo
2022-01-13BW237835.xlsmxlsm 792a7b8e75aa51f90c66ee711faf429dfe3220b038cc3725ee935083fcb60e0fVirustotal results 22.95% Heodo
2022-01-1323950691_12153.xlsmxlsm cfcf60f2a598ac8e1abc547928fb7b32fa3b58afb00c098f3b6b34b77d0ffbb9Virustotal results 21.67% Heodo
2022-01-138721593_31.xlsmxlsm cbfdd288ed81b34166f40cbb96b59bf5836fe4dc0f06b4f121a97ad11fed7786n/a Heodo
2022-01-13PE-3130813.xlsmxlsm 88876b87c1e34620663cc95177326339d7853e695ff37d35a180f61d76d019beVirustotal results 24.59% 
2022-01-13EL_46661.xlsmxlsm e020f5b35d29bb3f229bd162a0fae0de5d977d49db96f1f3e06fe40a24c19679n/a Heodo
2022-01-139415296685078.xlsmxlsm 00c4657fa8734227eb769bbed474082f1140185ab579073204135735b2c32f9cVirustotal results 32.26% 
2022-01-13AoYpm_0.xlsmxlsm ea518dd18446672c07dfd03a7b14e0f939a89b414a670198e7cf429b6cba7d84n/a Heodo
2022-01-1305529_535.xlsmxlsm 920f3ff6aeb6ae3263757fc11949ff22476eaf9c6471b521bf891b9a18192465Virustotal results 29.03% Heodo
2022-01-1302873024501841.xlsmxlsm 478d59d47026e5c19226e76dfd2efe51f203ad4f97a093363c1448dd97a12764n/a Heodo
2022-01-13D9208225.xlsmxlsm a58fa75e6f2b26544b017856c6e1c56cb39d7769f3854c1cebdebdc0bcdbee9eVirustotal results 30.65% Heodo
2022-01-13az_19491399.xlsmxlsm a139884d68aacbe19a1b68501de5392ef5ba05cc3eb5a5b2ed0c347db44af4can/a 
2022-01-1344711.xlsmxlsm 5cf53f9f40389a8c56abd3a90681dadd27c0db904fbc2422ec9baa37e84c1584Virustotal results 30.65% Heodo
2022-01-13zex_93415.xlsmxlsm aefebee74f868174371b6f9925e3484198f01753d2e1ed58c2b99a6c2e24de08n/a 
2022-01-13IVLPZ_373925.xlsmxlsm ac680177934f28cf84fc94b0e1f006de320955fd9f17bed4d39699cda13c8bd6n/a 
2022-01-135151JTRFHI-595.xlsmxlsm da2a461e20d4c87bd5324dad79a728e4223d6b8b70ec892fce58fdec3ca86af6Virustotal results 30.16% Heodo
2022-01-13141701021.xlsmxlsm 3fc26c9fd1f5685b0dbd0bf5f56d85f5ae94056eb3a8ab041389b3f2948cf3f0n/a Heodo
2022-01-13HNGAR_4.xlsmxlsm 304e17c2ef41373d5b2ded923de19336a227658abf49881fe446df0cfcfac00bVirustotal results 30.65% 
2022-01-1336875_21279.xlsmxlsm f2c2b34b3d0b8b5e85cfecf0bb20d225e589c18841538e9283f91302bb27bde3n/a Heodo
2022-01-13027985-248859.xlsmxlsm 132b4dea20861342b68e5c2485ade61c87962f5b17c8c73c2235a75110fd2104n/a Heodo
2022-01-131218_001315.xlsmxlsm febd9978510715acb1f4bb87d04412fb1e3e6e2720329590b6b146de515d2d85Virustotal results 31.75% 
2022-01-1335856065-12.xlsmxlsm c87454534ee25d7d677e5bab46857f861240685ce17532b788892d370096be83Virustotal results 30.16% Heodo
2022-01-13494241121664.xlsmxlsm 41750a936f4e59a899e45972dd3ccf154305807c52bd7e5f5b19344e909f86ban/a Heodo
2022-01-13NH-145.xlsmxlsm 2d009791d777c752c4fddb6e32e5d123d7ecf80145baef849436bf4879259b8en/a Heodo
2022-01-13BY_29945892.xlsmxlsm 08c7c9f40c6db283966c794771c90b7d9f65dedfb785b861e02187f62f0dc0c8Virustotal results 32.26% Heodo
2022-01-13AP_64488.xlsmxlsm 7a7bdc30a5db94b76438d101fca6df38aa8004a8a2a7a6ad5bb79857ef699347n/a Heodo
2022-01-13A_631.xlsmxlsm 8afb20c75c55c9430321b9e1bc404d9178c80a2f7f39f2cbb632e24cd2d4ae87n/a Heodo
2022-01-132812_39.xlsmxlsm 320af6e21e9660cb8d8b4bca284b6c40150f71bcd724f42962381b6cad52272en/a Heodo
2022-01-1307740RBCUALH_7.xlsmxlsm 1837567c1c4771488aaff8602f2c98711463d9afd7dbe2a3ab3413e37e30f610Virustotal results 28.57% Heodo
2022-01-1382242-364.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cn/a 
2022-01-13194042493198648.xlsmxlsm 07fddbd97e1846aa7ef2fae79ea0d177a89210725b1a66a8b52bb066cc36bb1en/a Heodo
2022-01-1393990729_18896.xlsmxlsm 9e443aedd2833d67bb9b858bd14abc6a235186f865e05497ac39ab8cd0185156n/a Heodo
2022-01-13MXGMQ_729858.xlsmxlsm 6a8fc7cb880a404032161e81d67152873581b6614b238faebd731fb7fbd8cb92n/a Heodo
2022-01-13G_95882095.xlsmxlsm 2b8b0ca757e3eccb527d9ce11a9a8815f5a9ce3c6d2ed5a8711d4c109e88bd71n/a Heodo
2022-01-13u_898.xlsmxlsm 1d8482afdb97aba866fc26b21eaa9f92f46ea841566bb0588150aecd4347cd45n/a Heodo
2022-01-13SSTO_990845589.xlsmxlsm ae4c37f20738b2bc766ca1b1437dd27be15c5a86e663f8ce3fc8be6762483305n/a Heodo
2022-01-1307908.xlsmxlsm 2cfe6cc60d786a8b94d9d3114d344fb74c21e5ce5391dea3d1550df17fee05b4n/a Heodo
2022-01-13cC42336973.xlsmxlsm 9e1460b0a4debafe9636cf43ad6de3069afc41e53b2c0c09b6337bd165a7bcefn/a Heodo
2022-01-13604499.xlsmxlsm 22ed1803ea7fa2aa21adb614d88627eaf141fb5663bac536d56f3db835dd0811n/a Heodo
2022-01-13S_70823.xlsmxlsm 27142990970a1968021bca00b4005ef206e3a553179b2e717e82ebfe8a8af1b9n/a Heodo
2022-01-13QX-9959.xlsmxlsm eb3e8690d152148f0bc7d306065ba030410ba35eb5e672f09041b20cf000ee4fn/a Heodo
2022-01-13TDR_7680.xlsmxlsm 49ec26f8a352003e43a32615495ae4554e0bb8485ef889e7ba57cf869f026c4cn/a Heodo
2022-01-13sRxY-4.xlsmxlsm 967d8e1ecaddadf97ad824647e734535d41e1996b725dd594a03a043d3795b1fn/a Heodo
2022-01-13MyG_4972371.xlsmxlsm 8e2712e45fb0cbdc5a565ba4f5582ef6b0d871a0159abaed0fb6c4d519382547n/a Heodo
2022-01-13882-70672634.xlsmxlsm 9eb7d16794f6e4e2e701458af298b2b16c91a04dd45361cc306f32bc5fd25491n/a Heodo
2022-01-1397308749CIRQFHTUID_71.xlsmxlsm c14e76a48aa71dbc135baf60cb71367b03353dfd7e1e256ec9158c9ab9566677n/a Heodo
2022-01-1306975_55032.xlsmxlsm 37bb74fcd5b1ff6bbd323163e21277b3ed80d124cc4d727f4ec64d1048a2c85en/a Heodo
2022-01-13007368882_86933799.xlsmxlsm ae8e1d5678b54ef2ddb35fcf1233370916f4e2355f1aeb9066b9f7e12d07bcacVirustotal results 22.95% Heodo
2022-01-1343824270-59.xlsmxlsm cffc89330574a0b7d5096c64bff0483e4dbc38d09be06dd3fd4cafca0a4e99edVirustotal results 23.33% Heodo