URLhaus Database

You are currently viewing the URLhaus database entry for https://www.meltacreations.co.za/89507922_2867/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1973313
URL: https://www.meltacreations.co.za/89507922_2867/?i=1
URL Status:Offline
Host: www.meltacreations.co.za
Date added:2022-01-13 08:48:06 UTC
Last online:2022-04-03 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 08:49:07 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:2 months, 19 days, 23 hours, 33 minutes Bad (down since 2022-04-03 08:23:06 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-19911529_933983669.xlsmxlsm 096e77c3e5f0a1e2a89d4b63831874b32007f04a15154f58b98863f1648fb881Virustotal results 53.97%Heodo
2022-01-14r048741.xlsmxlsm b2b9242ff9294f3a3a597468afebc70e405c7e6d1c5b94e4e4821e8f6bf62aabn/a Heodo
2022-01-14uy7.xlsmxlsm 44e19014ff150d3e22446507b5bc37be8660bf0cd9130a211434997867391938Virustotal results 27.87% 
2022-01-1468841-76419314.xlsmxlsm 9bbdbbf2e16c8304a30bc12313362864d0b4611b6b5564e5fa4efeb559c9a4c6n/aHeodo
2022-01-14tEdCj_0.xlsmxlsm de7e4158f8c853cec334533366fbfa1568ec9384f0e5d07d1bc57298aab905b4n/a 
2022-01-14161953KWZ6627252.xlsmxlsm 5e5e12a3a114f3edcabd2e37239ea81f03db5f04ae7c6a5b5436f8898489f84fn/a Heodo
2022-01-149466_852.xlsmxlsm 4098eed9c3a2b676312fcf3dcdbcf4f18affb50ab9b31d02868aeee1b6e7d932n/aHeodo
2022-01-14N_362910.xlsmxlsm 38aa8bb59cfaed48d361e496e1682f677a3f58223fbe1a6a9e2e1fcd5d837c43n/a Heodo
2022-01-14I-4.xlsmxlsm 15b5006b335aba5547f75fb7a9399251115e8ae410691b568fd1064c2facafe8Virustotal results 25.40% Heodo
2022-01-147407295838.xlsmxlsm 296171d1b92b175041ee3829e60a6880b93861ef09614e912d112777fc2fe13aVirustotal results 26.98% Heodo
2022-01-14249732150_24255413.xlsmxlsm 5aa98174bd302b5cd08f4932b9a41a9586726bb40571b90bd82325039a7a8b51n/a 
2022-01-1482596028_34696.xlsmxlsm e2490ca7300bcaab90df45a49b7610f5f492f85ab78edae5188270bf8218128en/a Heodo
2022-01-146186537_28569847.xlsmxlsm 07182ae5f4de5bc294feeecdd94ad0a6e8fe552c92f4b80bacd7e87b90d848bcn/a Heodo
2022-01-14PX3.xlsmxlsm d8eb28ba7038dd673602a96e242b10c5af8ea2f296fe49eb1b36bf837fbeef06n/a Heodo
2022-01-14658569444703.xlsmxlsm 5388d17d28ba671fbe8a27779a4ff0a97c15a00c1a91e946824b81b38c6d8e90Virustotal results 25.40% Heodo
2022-01-148961-50008515.xlsmxlsm d55979fab69e6383de91fecd3232f4f013cc7eb8de5a4a0090c6e0a371765b4cn/a 
2022-01-14BC_05025.xlsmxlsm 88309150746b21b8bf021aead74ef1695d5008b340897b2a84f0a254ddfcc7f8Virustotal results 26.98% Heodo
2022-01-14qJGpRX_412.xlsmxlsm 3dd7791745ef386d30fdac27e392533cbf154de6881440bf6bae3b947c775402n/a Heodo
2022-01-14W-10169692.xlsmxlsm 9914b76a0ba3fb9da5a56e91338779ce902665c925d401d929aadf7974293d79n/a Heodo
2022-01-137329233_158.xlsmxlsm 700465c4be1e671b009e46928a0479f311b16f05004d4e24755bb22c405781f1n/a Heodo
2022-01-13IS_441.xlsmxlsm 731ec98a6308e19709812083b3dfba8b079aa48f36b486f2f06d7170de5d1541n/a Heodo
2022-01-132449561YKQMMPU-066281.xlsmxlsm 88422e6f6a8baaf355add1168faec3c2cf520438933d982dcff40a31f2468a09n/a 
2022-01-13784JYRKCXBF8088.xlsmxlsm 7e9d46cddda81be61354089d761d2fd16244b505d6aed655e1fc0a44203cb37bn/a Heodo
2022-01-13JXUHY_99.xlsmxlsm 792a7b8e75aa51f90c66ee711faf429dfe3220b038cc3725ee935083fcb60e0fVirustotal results 22.95% Heodo
2022-01-13ZFbO_317055.xlsmxlsm cfcf60f2a598ac8e1abc547928fb7b32fa3b58afb00c098f3b6b34b77d0ffbb9n/a Heodo
2022-01-13JJeV_46.xlsmxlsm 581fc75adefc48a9698d1bc72dce3048ee18acc2a34ef3af5c72a1f83c1761b0Virustotal results 22.58% Heodo
2022-01-13bjpt-5795.xlsmxlsm ee2c0116fbec7f4a729f4570a26f035ca6cba2264314eb201bb486ee24a1aa0an/a 
2022-01-13459763_85845308.xlsmxlsm a82961d7ec81fbc9a29aa3a06007eb18b887dfbe3e97ca6580c7682aa6021a86n/a Heodo
2022-01-13ND-61.xlsmxlsm 00c4657fa8734227eb769bbed474082f1140185ab579073204135735b2c32f9cn/a 
2022-01-13HjweR_67190081.xlsmxlsm ea518dd18446672c07dfd03a7b14e0f939a89b414a670198e7cf429b6cba7d84n/a Heodo
2022-01-1393133252-3644128.xlsmxlsm 920f3ff6aeb6ae3263757fc11949ff22476eaf9c6471b521bf891b9a18192465Virustotal results 29.03% Heodo
2022-01-13md-40.xlsmxlsm 478d59d47026e5c19226e76dfd2efe51f203ad4f97a093363c1448dd97a12764n/a Heodo
2022-01-138109_728751.xlsmxlsm f6319e708e7c942acfec28dcc5e23df293475f01d892e4992d9717277f79d6eeVirustotal results 30.65% Heodo
2022-01-1301353526YTV_0732322.xlsmxlsm a139884d68aacbe19a1b68501de5392ef5ba05cc3eb5a5b2ed0c347db44af4can/a 
2022-01-1338133864_772403.xlsmxlsm 67db098ffc37f7ee91efe9d171ee286e1f72b744f50dce8d4e83309ba5f21593n/a Heodo
2022-01-13qw7422.xlsmxlsm e8582d91a7c35b946a184125231a598380cf9c149e2e754acad290a1e129ad03n/a 
2022-01-138832_4742.xlsmxlsm da2a461e20d4c87bd5324dad79a728e4223d6b8b70ec892fce58fdec3ca86af6n/a Heodo
2022-01-134625136_5762428.xlsmxlsm a6e70f081fe61a2702eeb896b143a3cf9ac4dcba35823b36c8b82e8fbb02b70fn/a Heodo
2022-01-13tw29614165.xlsmxlsm 304e17c2ef41373d5b2ded923de19336a227658abf49881fe446df0cfcfac00bVirustotal results 30.65% 
2022-01-1381538-1.xlsmxlsm eda2e0f86dc8a29ae0f9c8b2e7a0905b0f57b9195b807e87f72e8595c31d9b64n/a 
2022-01-13fvgf_5935208.xlsmxlsm 4e94382ca3405c71862f81cbb2284da096b2c5102e65a90199b718c8af6c579cn/a Heodo
2022-01-134000687-3417.xlsmxlsm df39d2d440512b4325f01f2b822aa792fed51eee23357e387cf055f7e5f25325n/a Heodo
2022-01-13QH_907229.xlsmxlsm 8d8c71ccb4edeb5921ad5707da3ba344381ae7a4ec1bfeeced87110809975cc4n/a Heodo
2022-01-13b754677.xlsmxlsm 1070ee81825904e9b69247d5ecd09aa91e0be9722ff1b627740e98e0bd48ee7fn/a Heodo
2022-01-13AS69398427.xlsmxlsm 4c2cf1d0796d8ac276ad283bbb14986b510a2a3b33e76005c8968b653d43d844n/a Heodo
2022-01-13441846710-589465.xlsmxlsm 08c7c9f40c6db283966c794771c90b7d9f65dedfb785b861e02187f62f0dc0c8n/a Heodo
2022-01-13646385_07929.xlsmxlsm 4624a6c75a73e206d26cf23225ddf8c14c9bd3fac85edc04aebf63a281aa8bd4n/a Heodo
2022-01-13D_117371.xlsmxlsm aeb70e41209244bbbb3f870a325ee369ce718361b2caf361f8472ce7b1b7001dVirustotal results 30.16% Heodo
2022-01-1387197171166.xlsmxlsm e867e8691b17fd95fce36eb933b1c36744f45513e44d931d07bf95229e47bef1n/a Heodo
2022-01-13ttXs64578.xlsmxlsm b3a8073712469f70329fad465825f867bd6dcf83420de3004730f91ecc938138n/a Heodo
2022-01-13JD_8977792.xlsmxlsm 1837567c1c4771488aaff8602f2c98711463d9afd7dbe2a3ab3413e37e30f610Virustotal results 28.57% Heodo
2022-01-13SWIE_6345655.xlsmxlsm a64b918b227ae002b52f8ca07c1e57fbf11e0f6a0c5a06abbf79e2b209bce48bVirustotal results 22.22% Heodo
2022-01-13EYMGO_118.xlsmxlsm 13f975538e7e72ac755218c6a35604d36e0278e74fed8e2270476b89268a7f2cVirustotal results 23.33% Heodo
2022-01-13999484630_16276.xlsmxlsm 9e443aedd2833d67bb9b858bd14abc6a235186f865e05497ac39ab8cd0185156n/a Heodo
2022-01-13Nr_33.xlsmxlsm d47dc5f481df3ec15f19e8625c29b0beaf33c401b23191b818c9ecf885e3c8dcn/a Heodo
2022-01-13ET_27452982.xlsmxlsm a66e83486f88332a7ba17fd3016818963ea4b45c47f1f19b4b01a099add5e3a3n/a Heodo
2022-01-13nJGr-97525201.xlsmxlsm 7868deb5db79806b2f44fe8be58524a914c2817d975f7acd996694dc218b70ebn/a Heodo
2022-01-130094_04.xlsmxlsm 5b91bfbb9879a44179a56fedfc1f88305788bfc32a6f1f04d257d807476f9286n/a Heodo
2022-01-137422809497223.xlsmxlsm 8dfa5abbde7a4d277e87b8acc67cd5ea32f258265f900029c3aa200c4bcf58dbn/a Heodo
2022-01-1388328521SAE_169019.xlsmxlsm b2a316ebc436aafefe6c2ed31d71beb544c6d2afa71d66294e29c044d4616dfcn/a Heodo