URLhaus Database

You are currently viewing the URLhaus database entry for http://nbp-c.com/ya/WjOem_33546527/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1973113
URL: http://nbp-c.com/ya/WjOem_33546527/?i=1
URL Status:Offline
Host: nbp-c.com
Date added:2022-01-13 07:22:05 UTC
Last online:2022-01-16 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 07:24:17 UTC to abuse{at}gmo[dot]jp)
Takedown time:2 days, 19 hours, 8 minutes Poor (down since 2022-01-16 02:32:29 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-14930534-19.xlsmxlsm e431741ede2c4e1a83b0a6c32b22491dc3a339ff2bd6fbc65a790a1b40d9c504Virustotal results 30.16% Heodo
2022-01-14okfgic_494939.xlsmxlsm dc929317cca3b519661820052cd357c4891f7725de37b15637010b5903292a0bn/a Heodo
2022-01-149617955QQK_7.xlsmxlsm b3d62ba93cc8f17f277bd60b9b50cfbab2ded7ade8f655e8c73049cd24eb47e0n/a Heodo
2022-01-1495406719_59247171.xlsmxlsm fc9e7299de540f55f0d72e1e4ad263d28ee2901c8d3ffaf1c604da0b1bacfe95n/a Heodo
2022-01-14J-6.xlsmxlsm ffd488864d8e96ae20dbefcdd830f2fb7af09eac36007998f4ae36743603da70n/a Heodo
2022-01-14akqeft360112.xlsmxlsm 992922c0dd74c7f68096c93f4df4d4fb642f1503e40b7b20eef156edebe70839n/aHeodo
2022-01-1421275QXXZUBXZIH_84765658.xlsmxlsm 0db8962b34a097cbefe62d17aae56cbb6e86fd1f8302a190427bf5de9e3a678cn/a Heodo
2022-01-14J773244.xlsmxlsm c38669a80f2dce6bbc2dbfc67e98ecead22379ea9733a7e496c8cc6896d61d11n/a Heodo
2022-01-14864883776_46159646.xlsmxlsm 28d1e4658a5855c9dd40f51712aa35a428f2a49c8ae9c5c29232226e521b4a86n/a Heodo
2022-01-14MHAFR_00284.xlsmxlsm 9fc43645a59ffc54409d20d58c7198ee61f8ab3a982a0928bf62523b1c61a575Virustotal results 26.98%Heodo
2022-01-14jmosl53.xlsmxlsm 01b6b87e5f1109dbdd48ab54dbfd901d7da79237a127ca29b56852e8bbc31287n/a 
2022-01-14XC_9856.xlsmxlsm 68a933359b3763ca27f3ad54dc136f2836e4060f851f1ef534ab5a9c57894508n/a Heodo
2022-01-14VLJGF_115.xlsmxlsm cb0d9916b6be6d3b9d52d057b5b8aa3b223284abe331467dea72eca27165a618n/a Heodo
2022-01-14EM_3973860.xlsmxlsm 79c581f4884e402ecb60b3932c4a43f11c84a7102e48e115094d29418102f1f8n/a Heodo
2022-01-14INN-1246.xlsmxlsm 3f01a59cd2c4cf701b22464a7fd495b33a2ffd5f2c631ed6bbf0e2766cf73d88n/a 
2022-01-14FKKZ_897.xlsmxlsm b8b1fb98701bf450f491a99a027c35455ecc635801276ec74d0f637aa91aa3f9n/a Heodo
2022-01-1461615938161276315.xlsmxlsm a0a8993ac49af8c9a67d95350e800f6adfbc38b6bfc5a7c213eca23b0b9e5857n/a 
2022-01-14Yn8835417.xlsmxlsm 620279fcd1238b22b28ff6e4d98f577b33d7dcfe09e7729f6ffd76070cec42e8Virustotal results 25.40% Heodo
2022-01-14891_59397.xlsmxlsm 746ed727461dc53a7de144c1f199f8c4c6defc5ae50a0215e559224923efa78en/a 
2022-01-1405003652-14088.xlsmxlsm 3dd7791745ef386d30fdac27e392533cbf154de6881440bf6bae3b947c775402n/a Heodo
2022-01-14gxny-2.xlsmxlsm 4eab3977f88e6444a99925c2a5769e6b720e8a6ba4ee8cc8235e23a33a1e6658Virustotal results 24.19% 
2022-01-14CDQR_60708.xlsmxlsm 700465c4be1e671b009e46928a0479f311b16f05004d4e24755bb22c405781f1n/a Heodo
2022-01-13534717908_18.xlsmxlsm 731ec98a6308e19709812083b3dfba8b079aa48f36b486f2f06d7170de5d1541Virustotal results 22.58% Heodo
2022-01-13040783772241.xlsmxlsm e15f4ab1af0935e26f54b19c1221a5dd41698713dfa44c327a206ffd708f3ceen/a Heodo
2022-01-1366805101086.xlsmxlsm 88d07eac813b81a446e976b9d46feb95a86d3e4d0cdfb6e604d42bba8757db02Virustotal results 22.58%Heodo
2022-01-13ZQS15666.xlsmxlsm 792a7b8e75aa51f90c66ee711faf429dfe3220b038cc3725ee935083fcb60e0fVirustotal results 22.95% Heodo
2022-01-13SZ_0919.xlsmxlsm bade694a72c3d8e5887ae4e1f1554aa85add86c8748b60af2e53e4241570d8f7Virustotal results 22.58% 
2022-01-13IKJUX_67727.xlsmxlsm 93eff588c9152694a19cbbf9dcaf7e7185dd1a6b7e1165b73555bab7bd468d6an/a Heodo
2022-01-13A_37757374.xlsmxlsm 929400abfc42d038419315b35d0fd68f85270fee48b20985276ff79651f09264n/a Heodo
2022-01-13TBG_4966416.xlsmxlsm ecf91431dd232099783efaccf118d076e4116f577bd121646ecfdb2e66cef7efn/a Heodo
2022-01-13Z_72600525.xlsmxlsm 48c3c2d26bd19b1dc2eb3c36a851b00ef5cd2db217ae6bd0d89cc11c8a1a8513Virustotal results 27.59% 
2022-01-13FLXB_5828.xlsmxlsm bdaea2c03177079e3874c6f5d9df40bd1d98dc7adf2f25e7226e35852c2a633bVirustotal results 31.75% 
2022-01-13Y-93779.xlsmxlsm 0282a5f27aea18bebe2c3a6406c3145994755a9f37ec1e941ea0dcc1f6978550Virustotal results 33.33% Heodo
2022-01-13YX0584.xlsmxlsm 8b8691c729c4aae4cda2049c3fcbf3153562829da68bfd3121e61dc3f9bf2cfbn/a Heodo
2022-01-13BGqGjW_75741.xlsmxlsm f6319e708e7c942acfec28dcc5e23df293475f01d892e4992d9717277f79d6een/a Heodo
2022-01-1345929331-19.xlsmxlsm a139884d68aacbe19a1b68501de5392ef5ba05cc3eb5a5b2ed0c347db44af4can/a 
2022-01-1322332_958.xlsmxlsm 5cf53f9f40389a8c56abd3a90681dadd27c0db904fbc2422ec9baa37e84c1584Virustotal results 30.65% Heodo
2022-01-1376810CLNZGSUM_5932.xlsmxlsm 8731dcd378702d6a9d4a679e338cbd69e94a5030d0dc0520456e30760f81cc6en/a Heodo
2022-01-13H3.xlsmxlsm ac680177934f28cf84fc94b0e1f006de320955fd9f17bed4d39699cda13c8bd6n/a 
2022-01-13811273_169.xlsmxlsm dc8adc8e13d3e5a64f2d69f2163da90a19cd80594bf4db6b8d17c381312d28b6n/a Heodo
2022-01-1363041978884143.xlsmxlsm c04abc3378a389c7769ed89de8e5d82f4cb311647e4f363641a807fc6a399f39n/a Heodo
2022-01-13gr_4643.xlsmxlsm 78dd5816d66701839612b5caf64d4337e45d516e52b5f177345f5019ce4aa907n/a Heodo
2022-01-135177621-5661529.xlsmxlsm 115b1bbc0363cd535f4336aac31bed3fa17e2c2a4ebcb15618e55c9dfc91896bn/a Heodo
2022-01-13B_218085238.xlsmxlsm 4f9ce5c9c9dd88a6a01a3df3299e0aa43da3bad195036c22b141f28769708334n/a 
2022-01-13ZuuBaE_43077.xlsmxlsm febd9978510715acb1f4bb87d04412fb1e3e6e2720329590b6b146de515d2d85Virustotal results 31.75% 
2022-01-13565_0.xlsmxlsm c9d6e67d61769e32b703185a1035e43bbc9c7c053cc1d06594fad3979da3cc9eVirustotal results 27.42% Heodo
2022-01-13QTY_2072096.xlsmxlsm 41750a936f4e59a899e45972dd3ccf154305807c52bd7e5f5b19344e909f86ban/a Heodo
2022-01-13veopz63216725.xlsmxlsm 5d7049ddd0c94d31087e9b7809dd67ab2c097e01ffacb571225e7ab561f57f39Virustotal results 31.75% Heodo
2022-01-13MSNO_33398.xlsmxlsm 109868bbf981851bac44548c11bee90f08fd3c83e06c9b9539f568e047f45e0an/a Heodo
2022-01-1382100394_9394879.xlsmxlsm b8f140e8a83cdb10b7816fd789deccef6d4373e8441fa40618b48484359041b5n/a Heodo
2022-01-13UQZZX-573529761.xlsmxlsm 399fd8ce9218a6b24bbf3c9e307934df9b2954d45119371365be1360c88ec6f5n/a Heodo
2022-01-13385117_10124.xlsmxlsm e867e8691b17fd95fce36eb933b1c36744f45513e44d931d07bf95229e47bef1n/a Heodo
2022-01-13RFOF_64.xlsmxlsm 6acfbc04a4d8ee5bed51c551d533b4b99936760fdf3f6db32d1216130c89700cn/a Heodo
2022-01-1307107439_9746.xlsmxlsm b3a8073712469f70329fad465825f867bd6dcf83420de3004730f91ecc938138n/a Heodo
2022-01-13txtwvm_0.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cn/a 
2022-01-13dkrjd-497321504.xlsmxlsm 915354db100b6c7c744bede05828fd397ef2ab000bced2ac46e799b5d5a8e9d5n/a Heodo
2022-01-13blt_79212.xlsmxlsm 9e443aedd2833d67bb9b858bd14abc6a235186f865e05497ac39ab8cd0185156n/a Heodo
2022-01-134154069_097.xlsmxlsm d47dc5f481df3ec15f19e8625c29b0beaf33c401b23191b818c9ecf885e3c8dcn/a Heodo
2022-01-1395758CLQVR_9.xlsmxlsm f745757e79c9411ab969a3e2ab5ccff444e4542b87681828c091f595826410b5Virustotal results 22.95% Heodo
2022-01-1317576_30079.xlsmxlsm 1d8482afdb97aba866fc26b21eaa9f92f46ea841566bb0588150aecd4347cd45n/a Heodo
2022-01-13xvSb7284407.xlsmxlsm 6c5843f31e83acb3be71be737cb15c279df63ad2191db42d1687985925eee1c9n/a Heodo
2022-01-13ONW-97446139.xlsmxlsm 2cfe6cc60d786a8b94d9d3114d344fb74c21e5ce5391dea3d1550df17fee05b4n/a Heodo
2022-01-13TXA_83513.xlsmxlsm 9e1460b0a4debafe9636cf43ad6de3069afc41e53b2c0c09b6337bd165a7bcefn/a Heodo
2022-01-13KSBW-90.xlsmxlsm 1080082d0eec3c4e3583b6e259b0863c746d211af8a8b6b645b21059e60f1119n/a Heodo
2022-01-135934-081.xlsmxlsm 27142990970a1968021bca00b4005ef206e3a553179b2e717e82ebfe8a8af1b9Virustotal results 22.95% Heodo
2022-01-13QPG_5982688.xlsmxlsm 8e8824a855908e301cb873fe67e37eb4af99b32f75fb1ea8997af913540ece02Virustotal results 19.35% Heodo