URLhaus Database

You are currently viewing the URLhaus database entry for http://efaxbox4document.crepsad.tg/qdu4o/558727461969/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1973069
URL: http://efaxbox4document.crepsad.tg/qdu4o/558727461969/?i=1
URL Status:Offline
Host: efaxbox4document.crepsad.tg
Date added:2022-01-13 07:15:04 UTC
Last online:2022-02-01 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 07:16:19 UTC to noc{at}premianet[dot]com)
Takedown time:19 days, 4 hours, 1 minutes Bad (down since 2022-02-01 11:17:53 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-14um_860.xlsmxlsm dc929317cca3b519661820052cd357c4891f7725de37b15637010b5903292a0bn/a Heodo
2022-01-14g-3517.xlsmxlsm fdb92c93fc55216d88ecb346e4b600385fb8cc3ee2aa598cef3cad99b3f59fb3n/a Heodo
2022-01-1424562061_639.xlsmxlsm 8f7a9cc8cbc19032e25ab6524b05b1e6807b05e96abe4e3467200394ef44f5a8n/a Heodo
2022-01-14427991_9950903.xlsmxlsm 046d5f85d492903e52b9161d9454a1b6a18f3980482650fff9a9b2ba7086c1c0n/a Heodo
2022-01-148903562-4916.xlsmxlsm 44e19014ff150d3e22446507b5bc37be8660bf0cd9130a211434997867391938n/a 
2022-01-14QQ_7.xlsmxlsm de7e4158f8c853cec334533366fbfa1568ec9384f0e5d07d1bc57298aab905b4n/a 
2022-01-14UGVF_4502925.xlsmxlsm 5ebbbd43a04a87e9d85a876ce8c8a0fe2e737082fd820835c7d4378d380ed20dn/a Heodo
2022-01-1434-056225.xlsmxlsm cf5ed745b4a6923a96dd4239ddf13cc355814ea3d0ef98f71204bc0f085937aan/a Heodo
2022-01-149032760WKW_52863.xlsmxlsm 427030980a8af62adaf28fc00d1ee2507de9cf4f09b4cbcd5b00b064e60d4d3dn/a 
2022-01-14ZNYB_5486.xlsmxlsm 878245ca533c239b7066ce1bb483d8cd42a8d5887954c3e4db00b5a52d46f354Virustotal results 31.03% 
2022-01-14YLN-9302.xlsmxlsm 296171d1b92b175041ee3829e60a6880b93861ef09614e912d112777fc2fe13an/a Heodo
2022-01-14tHMeQ-36543219.xlsmxlsm 6fd0e2563b3a57caea1e0d3feb66a44be67ba02e5a317dab989189508a1117fen/a Heodo
2022-01-143219879TNOEDJLNR_3675783.xlsmxlsm 0e2db8bad325d450826ee98740532c44b36d70a95f31178c85a50f4e8ee9c8b0n/a Heodo
2022-01-1498431_4412.xlsmxlsm d7e424ccc4f316f9abbabc2a3b0bc47b61daf071111fed745056ffc823c541c1n/a Heodo
2022-01-1496175_8032248.xlsmxlsm b8b1fb98701bf450f491a99a027c35455ecc635801276ec74d0f637aa91aa3f9Virustotal results 25.40% Heodo
2022-01-145794204_6002107.xlsmxlsm a0a8993ac49af8c9a67d95350e800f6adfbc38b6bfc5a7c213eca23b0b9e5857n/a 
2022-01-14uQ_298929.xlsmxlsm d55979fab69e6383de91fecd3232f4f013cc7eb8de5a4a0090c6e0a371765b4cn/a 
2022-01-14lxn_4.xlsmxlsm 9c8a39e1e2d7547aebadc4f37b84543d9e48faca443b9acd76cdf46d65459acdn/a 
2022-01-14CKPNA_79932360.xlsmxlsm 5e752b11e5c8a995688ec34e8bacbf253a0450479c1c2582dbd770d004babe51Virustotal results 27.87% 
2022-01-14MV_6208.xlsmxlsm 9914b76a0ba3fb9da5a56e91338779ce902665c925d401d929aadf7974293d79n/a Heodo
2022-01-1453640699_5095320.xlsmxlsm 1c240992b743818ab5c0ee5f4de32be4555853fde4d92d8f8264dd975f5ae3b3n/a 
2022-01-136488_248.xlsmxlsm 3761b25fa3d41a38d6d55c5e87d4a89bd1c35bdf0d06d744642ddbd14c852964n/a Heodo
2022-01-13qjbquvk_95.xlsmxlsm 6988f7d044aba01c32dfd1a18e12f8a22021287669837002631609031be20c01Virustotal results 24.19% Heodo
2022-01-13914013111.xlsmxlsm 1217dcbf810cee6fe242d7835078f9e5177ce7d1bb925405d550ea413b08fbb0n/aHeodo
2022-01-13GTOUXy-374454.xlsmxlsm 4e5cea7406c6c936d505399f9abb77ec9d468062e66010f0b3cb4cdba9017aeen/a Heodo
2022-01-13GBR-32100.xlsmxlsm aa13ae55198d07ca88b97900dfc331543971593d694d45a94f290a25b5bf0edfn/a Heodo
2022-01-13T-494129552.xlsmxlsm 9f47ddb444c9cffedc84c7eaf7c80d10b990146564954a6134a910733bc0a38dVirustotal results 24.19% Heodo
2022-01-13663688798-212.xlsmxlsm 0a3e258bcd978e0bef0ad77f9a203e03f6b939e243ac9d04a3ca9224819a64ccn/a Heodo
2022-01-13BXF_2575843.xlsmxlsm f1ec4f871b40968083790f9f1e19eaf6c17301f20743055e00b6382b3d5b2f55n/a Heodo
2022-01-13Aik6737595.xlsmxlsm 3ee5184a13e445cfb1886d07497ad642ebcf9b1d33fa9628d60e50e8cfa882e3n/a Heodo
2022-01-136875_93092.xlsmxlsm bdaea2c03177079e3874c6f5d9df40bd1d98dc7adf2f25e7226e35852c2a633bVirustotal results 31.75% 
2022-01-13I580.xlsmxlsm 5f078012b57ca56c92cb000baabb72b809c64fac6e70911c9175074c54839087Virustotal results 33.33% Heodo
2022-01-137693906236.xlsmxlsm 8b8691c729c4aae4cda2049c3fcbf3153562829da68bfd3121e61dc3f9bf2cfbn/a Heodo
2022-01-13NlN-00.xlsmxlsm b935e9ee2e3088640c3924e7434607aa3af911123be613e2f1456c19afb23c9bn/a Heodo
2022-01-13H-0476.xlsmxlsm 4a3a254a975f87ed78ab0ab53de0a7f8ab2235a1bc8abea99ade0593d3c2c450n/a Heodo
2022-01-1346929452201.xlsmxlsm 5cf53f9f40389a8c56abd3a90681dadd27c0db904fbc2422ec9baa37e84c1584n/a Heodo
2022-01-132055-81.xlsmxlsm 8731dcd378702d6a9d4a679e338cbd69e94a5030d0dc0520456e30760f81cc6en/a Heodo
2022-01-1377405_04330861.xlsmxlsm ac680177934f28cf84fc94b0e1f006de320955fd9f17bed4d39699cda13c8bd6n/a 
2022-01-132276_87.xlsmxlsm dc8adc8e13d3e5a64f2d69f2163da90a19cd80594bf4db6b8d17c381312d28b6n/a Heodo
2022-01-13GB12411677.xlsmxlsm c04abc3378a389c7769ed89de8e5d82f4cb311647e4f363641a807fc6a399f39n/a Heodo
2022-01-13LRC_08927968.xlsmxlsm 603fc4bf5e141be1b30fb64551545d7f757d7f508891d17256ffc5564f3ccfc8Virustotal results 30.16% Heodo
2022-01-13AI_06156084.xlsmxlsm e07efb44e73f01e1cd957c1874bce0e453c91eaa561f46efb373edb97100320aVirustotal results 29.51% Heodo
2022-01-13SA2794484.xlsmxlsm e8da2349f8ec549d999a3e63b1f859f0452b0301aaf4fced70ecbba675b81247n/a 
2022-01-132109455_843889.xlsmxlsm febd9978510715acb1f4bb87d04412fb1e3e6e2720329590b6b146de515d2d85Virustotal results 31.75% 
2022-01-1383821389464.xlsmxlsm c9d6e67d61769e32b703185a1035e43bbc9c7c053cc1d06594fad3979da3cc9en/a Heodo
2022-01-13SYM_20.xlsmxlsm 41750a936f4e59a899e45972dd3ccf154305807c52bd7e5f5b19344e909f86ban/a Heodo
2022-01-13479XFBI_44989654.xlsmxlsm 5d7049ddd0c94d31087e9b7809dd67ab2c097e01ffacb571225e7ab561f57f39n/a Heodo
2022-01-13115933239.xlsmxlsm 08c7c9f40c6db283966c794771c90b7d9f65dedfb785b861e02187f62f0dc0c8n/a Heodo
2022-01-1357235312335465.xlsmxlsm 4624a6c75a73e206d26cf23225ddf8c14c9bd3fac85edc04aebf63a281aa8bd4n/a Heodo
2022-01-13vhrp_96256.xlsmxlsm aeb70e41209244bbbb3f870a325ee369ce718361b2caf361f8472ce7b1b7001dn/a Heodo
2022-01-13XY51.xlsmxlsm e867e8691b17fd95fce36eb933b1c36744f45513e44d931d07bf95229e47bef1n/a Heodo
2022-01-131901305_7.xlsmxlsm 6acfbc04a4d8ee5bed51c551d533b4b99936760fdf3f6db32d1216130c89700cVirustotal results 26.23% Heodo
2022-01-130634_36.xlsmxlsm 1837567c1c4771488aaff8602f2c98711463d9afd7dbe2a3ab3413e37e30f610Virustotal results 28.57% Heodo
2022-01-13NGiK94207256.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cn/a 
2022-01-13slnt_051.xlsmxlsm 07fddbd97e1846aa7ef2fae79ea0d177a89210725b1a66a8b52bb066cc36bb1en/a Heodo
2022-01-13531462-83428.xlsmxlsm 726be01c1600c33b9a3d322885ca12383ec5b64546bb389670176f77f7faf162Virustotal results 19.05% Heodo
2022-01-13DLQBB-3520.xlsmxlsm 6a8fc7cb880a404032161e81d67152873581b6614b238faebd731fb7fbd8cb92n/a Heodo
2022-01-139819089897.xlsmxlsm 2b8b0ca757e3eccb527d9ce11a9a8815f5a9ce3c6d2ed5a8711d4c109e88bd71n/a Heodo
2022-01-13569919_07294857.xlsmxlsm 1d8482afdb97aba866fc26b21eaa9f92f46ea841566bb0588150aecd4347cd45n/a Heodo
2022-01-1305803SUNK-5844.xlsmxlsm 6c5843f31e83acb3be71be737cb15c279df63ad2191db42d1687985925eee1c9n/a Heodo
2022-01-1384121UEVQYBZF_9396.xlsmxlsm 2cfe6cc60d786a8b94d9d3114d344fb74c21e5ce5391dea3d1550df17fee05b4n/a Heodo
2022-01-134145_09.xlsmxlsm 80f7072eb1b894cec06813c3267356f693ff21d0d1f116d1cf53d5b8035277deVirustotal results 16.13% Heodo
2022-01-133438PYR-72446115.xlsmxlsm 1080082d0eec3c4e3583b6e259b0863c746d211af8a8b6b645b21059e60f1119n/a Heodo
2022-01-13305_39737088.xlsmxlsm 27142990970a1968021bca00b4005ef206e3a553179b2e717e82ebfe8a8af1b9Virustotal results 22.95% Heodo
2022-01-1375551_220.xlsmxlsm eb3e8690d152148f0bc7d306065ba030410ba35eb5e672f09041b20cf000ee4fVirustotal results 22.95% Heodo