URLhaus Database

You are currently viewing the URLhaus database entry for https://hammerpzjx.xyz/qatta/P_222863/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1972891
URL: https://hammerpzjx.xyz/qatta/P_222863/?i=1
URL Status:Offline
Host: hammerpzjx.xyz
Date added:2022-01-13 06:03:03 UTC
Last online:2022-01-21 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-21 08:14:06 UTC to abuse{at}fornex[dot]com)
Takedown time:8 days, 2 hours, 25 minutes Bad (down since 2022-01-21 08:29:09 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-14T13532704.xlsmxlsm 48894064de8f0c8f53863ef98d25bc7855584bbbb261682c8eef1ff0e41397een/a 
2022-01-1459607435_5552094.xlsmxlsm 44e19014ff150d3e22446507b5bc37be8660bf0cd9130a211434997867391938n/a 
2022-01-14886700292-69208559.xlsmxlsm 0db8962b34a097cbefe62d17aae56cbb6e86fd1f8302a190427bf5de9e3a678cn/a Heodo
2022-01-1486442WLO_0947513.xlsmxlsm cf5ed745b4a6923a96dd4239ddf13cc355814ea3d0ef98f71204bc0f085937aaVirustotal results 27.87% Heodo
2022-01-14BW-8185.xlsmxlsm 9fc43645a59ffc54409d20d58c7198ee61f8ab3a982a0928bf62523b1c61a575Virustotal results 26.98%Heodo
2022-01-14beck_35406611.xlsmxlsm 38aa8bb59cfaed48d361e496e1682f677a3f58223fbe1a6a9e2e1fcd5d837c43n/a Heodo
2022-01-1453747EXDB_8.xlsmxlsm 878245ca533c239b7066ce1bb483d8cd42a8d5887954c3e4db00b5a52d46f354Virustotal results 31.03% 
2022-01-1425237_22.xlsmxlsm 3b63ba5e81eedd06656eca70b56b6d9490b598df1646dd83dacefe8cd52d6a77Virustotal results 23.81%Heodo
2022-01-14HEL30332.xlsmxlsm 5aa98174bd302b5cd08f4932b9a41a9586726bb40571b90bd82325039a7a8b51n/a 
2022-01-14513KAR_106672.xlsmxlsm 79c581f4884e402ecb60b3932c4a43f11c84a7102e48e115094d29418102f1f8n/a Heodo
2022-01-14SC18.xlsmxlsm 4a91e55e522f50b2a2f58c92097b3005caaee1890044b7563efb707735558d1an/a 
2022-01-14IC_5371.xlsmxlsm d8eb28ba7038dd673602a96e242b10c5af8ea2f296fe49eb1b36bf837fbeef06n/a Heodo
2022-01-14VJH_1.xlsmxlsm a0a8993ac49af8c9a67d95350e800f6adfbc38b6bfc5a7c213eca23b0b9e5857n/a 
2022-01-14720509_4249.xlsmxlsm 620279fcd1238b22b28ff6e4d98f577b33d7dcfe09e7729f6ffd76070cec42e8Virustotal results 25.40% Heodo
2022-01-14978538_3028854.xlsmxlsm 217dab1dcf450f814ccba0ec24734922bd9924881e63323677e377f709310938n/aHeodo
2022-01-140558415NLYVW3535513.xlsmxlsm 07c1049d9a3e9b859567b8d09bff4e7bd325807af84f776e4894da8b8241f2f8n/a Heodo
2022-01-14096_84358310.xlsmxlsm 9914b76a0ba3fb9da5a56e91338779ce902665c925d401d929aadf7974293d79n/a Heodo
2022-01-1454172609520422.xlsmxlsm 948bece3441056d04af338e263063315d45921d28cf536276011fab5b2127a00n/a Heodo
2022-01-13V886780.xlsmxlsm fbaad03de2f185ae958c7192e2215fb6678792763d4872c4d3081d8980edc463n/a Heodo
2022-01-13R_5.xlsmxlsm 88422e6f6a8baaf355add1168faec3c2cf520438933d982dcff40a31f2468a09n/a 
2022-01-136706280_2.xlsmxlsm 88d07eac813b81a446e976b9d46feb95a86d3e4d0cdfb6e604d42bba8757db02n/aHeodo
2022-01-13876656_02828621.xlsmxlsm 792a7b8e75aa51f90c66ee711faf429dfe3220b038cc3725ee935083fcb60e0fVirustotal results 22.95% Heodo
2022-01-133246663DEUYY-75564.xlsmxlsm 3acb79e666d3707fa30bea2fc66a8432f80c7af6af0b835810549c9b20d03838n/a Heodo
2022-01-13XSI_43011.xlsmxlsm 6e346a952b92ea8d7ecde685f07f01806f0d66530eb588748cfdf35aa4467797Virustotal results 22.58% 
2022-01-13VDE-7.xlsmxlsm 929400abfc42d038419315b35d0fd68f85270fee48b20985276ff79651f09264n/a Heodo
2022-01-13QZC-8440.xlsmxlsm 6330ce41125fbef35c867af34ed93f63e40f62525e13c3e6dec6ea73c83e269an/a 
2022-01-13IHL_90401990.xlsmxlsm 00c4657fa8734227eb769bbed474082f1140185ab579073204135735b2c32f9cn/a 
2022-01-130951565.xlsmxlsm ea518dd18446672c07dfd03a7b14e0f939a89b414a670198e7cf429b6cba7d84n/a Heodo
2022-01-13EXQAE_2078.xlsmxlsm 920f3ff6aeb6ae3263757fc11949ff22476eaf9c6471b521bf891b9a18192465Virustotal results 29.03% Heodo
2022-01-1366757841-33.xlsmxlsm 478d59d47026e5c19226e76dfd2efe51f203ad4f97a093363c1448dd97a12764n/a Heodo
2022-01-13760480503-252047.xlsmxlsm f6319e708e7c942acfec28dcc5e23df293475f01d892e4992d9717277f79d6eeVirustotal results 30.65% Heodo
2022-01-1327_9.xlsmxlsm a139884d68aacbe19a1b68501de5392ef5ba05cc3eb5a5b2ed0c347db44af4caVirustotal results 30.16% 
2022-01-13STT_6408.xlsmxlsm 5cf53f9f40389a8c56abd3a90681dadd27c0db904fbc2422ec9baa37e84c1584Virustotal results 30.65% Heodo
2022-01-13JKVH_7803.xlsmxlsm 8731dcd378702d6a9d4a679e338cbd69e94a5030d0dc0520456e30760f81cc6en/a Heodo
2022-01-130961707032525.xlsmxlsm ac680177934f28cf84fc94b0e1f006de320955fd9f17bed4d39699cda13c8bd6n/a 
2022-01-13MLY-1433686.xlsmxlsm 04827a9681f241aa1b60498b2b4202dacadf89f326ae4f3b006c475453d8d28dn/a 
2022-01-1377281162LBUSXXE-04349901.xlsmxlsm aa95f57035882d90669b43af7c454c22d91f4e3c0525a83fcc6a0138d12d2a8bn/a Heodo
2022-01-131970486-66.xlsmxlsm 78dd5816d66701839612b5caf64d4337e45d516e52b5f177345f5019ce4aa907n/a Heodo
2022-01-13220910_606.xlsmxlsm 115b1bbc0363cd535f4336aac31bed3fa17e2c2a4ebcb15618e55c9dfc91896bn/a Heodo
2022-01-13109419137568.xlsmxlsm e8da2349f8ec549d999a3e63b1f859f0452b0301aaf4fced70ecbba675b81247n/a 
2022-01-13YHIXL_4025.xlsmxlsm febd9978510715acb1f4bb87d04412fb1e3e6e2720329590b6b146de515d2d85Virustotal results 31.75% 
2022-01-1334IGBVDMUILJ_78751.xlsmxlsm c9d6e67d61769e32b703185a1035e43bbc9c7c053cc1d06594fad3979da3cc9en/a Heodo
2022-01-13R-8904.xlsmxlsm 1070ee81825904e9b69247d5ecd09aa91e0be9722ff1b627740e98e0bd48ee7fn/a Heodo
2022-01-133004181_4.xlsmxlsm 5d7049ddd0c94d31087e9b7809dd67ab2c097e01ffacb571225e7ab561f57f39n/a Heodo
2022-01-13334ZSEKFWDS0458.xlsmxlsm ef6d3769be0a033960b0fdc9fe418e301fcddde93d9555c853849c3d8b9b173fVirustotal results 26.98%Heodo
2022-01-1330464426119.xlsmxlsm b8f140e8a83cdb10b7816fd789deccef6d4373e8441fa40618b48484359041b5n/a Heodo
2022-01-131232-7969607.xlsmxlsm aeb70e41209244bbbb3f870a325ee369ce718361b2caf361f8472ce7b1b7001dn/a Heodo
2022-01-13Z_0447.xlsmxlsm 8b97c32b643fd911fc305bdb62b94e1b34bf97ba87335b1f81cabe2bbf250d24n/a Heodo
2022-01-139389_81.xlsmxlsm b3a8073712469f70329fad465825f867bd6dcf83420de3004730f91ecc938138n/a Heodo
2022-01-1394640_7234.xlsmxlsm 125468fda9c224d8a3ccdf92f08037a343c0341a8e64dc2c1182e1d3d4e496a7n/a Heodo
2022-01-139687659_1556601.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cVirustotal results 26.98% 
2022-01-13299560_1.xlsmxlsm 13f975538e7e72ac755218c6a35604d36e0278e74fed8e2270476b89268a7f2cn/a Heodo
2022-01-13lmfzp-49.xlsmxlsm f1a79deb19dda7df8c5aa11ca798e574b2911291a6751b850841157761985512n/a Heodo
2022-01-13VK_1147.xlsmxlsm 904de10c1fef8cc181ee7c2549b38bbc053a26871adb68974efce375e744be33n/a Heodo
2022-01-133386545484450.xlsmxlsm 2b8b0ca757e3eccb527d9ce11a9a8815f5a9ce3c6d2ed5a8711d4c109e88bd71Virustotal results 22.22% Heodo
2022-01-13AKW39.xlsmxlsm ca6662f6a52a16a294b7d873a1f4b60f6ed054cb1cbaf3207081f30380c573e2n/a Heodo
2022-01-13wrpwsin_212459401.xlsmxlsm ae4c37f20738b2bc766ca1b1437dd27be15c5a86e663f8ce3fc8be6762483305Virustotal results 22.22% Heodo
2022-01-1312608399117570.xlsmxlsm c841d1d5ae704ec93026da23d3f2b9e5f00d5a229a91117df6188db2e444e87dn/a 
2022-01-13owz_256732.xlsmxlsm 9e1460b0a4debafe9636cf43ad6de3069afc41e53b2c0c09b6337bd165a7bcefn/a Heodo
2022-01-13hle32195.xlsmxlsm 1080082d0eec3c4e3583b6e259b0863c746d211af8a8b6b645b21059e60f1119n/a Heodo
2022-01-13234602413_30.xlsmxlsm 4dc514dc9290b966a14aadaab3d4c168419ed606a81d0a1262318d8b305cfc8dn/a Heodo
2022-01-136167445TVPDJ_308928447.xlsmxlsm 6169a4500b717ca5de60b77b01c2c1ddf5dbe18bafd0af142248d5066eef19ecn/a Heodo
2022-01-13iN-93.xlsmxlsm 49ec26f8a352003e43a32615495ae4554e0bb8485ef889e7ba57cf869f026c4cn/a Heodo
2022-01-13mcC_13756.xlsmxlsm 259272a5032f537239c61ba1c8b5bdd26e8e6c4f1ec9b54ee52eaeeac5f5690cn/a Heodo
2022-01-1358708-142472973.xlsmxlsm 20d7c4f7e882c414b403403773c244fa421744c48bb9e52a2f9236825be9a76fn/a Heodo