URLhaus Database

You are currently viewing the URLhaus database entry for http://agdm.ml/wp-admin/L-67525/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1973605
URL: http://agdm.ml/wp-admin/L-67525/?i=1
URL Status:Offline
Host: agdm.ml
Date added:2022-01-13 11:03:06 UTC
Last online:2022-01-14 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 11:04:08 UTC to abuse{at}cloudflare[dot]com)
Takedown time:7 months, 20 days, 2 hours, 42 minutes Bad (down since 2022-08-31 13:46:48 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-13DUEPP-1045.xlsmxlsm 4624a6c75a73e206d26cf23225ddf8c14c9bd3fac85edc04aebf63a281aa8bd4Virustotal results 31.75% Heodo
2022-01-13845445129.xlsmxlsm b8f140e8a83cdb10b7816fd789deccef6d4373e8441fa40618b48484359041b5n/a Heodo
2022-01-13BER-684078725.xlsmxlsm aeb70e41209244bbbb3f870a325ee369ce718361b2caf361f8472ce7b1b7001dn/a Heodo
2022-01-13NFTP617.xlsmxlsm 8440f26c78450c4b1f022a497363963b84b99da232ca91b5da7f4aad2234bbc1n/a Heodo
2022-01-1348194061.xlsmxlsm b3a8073712469f70329fad465825f867bd6dcf83420de3004730f91ecc938138n/a Heodo
2022-01-13669IDOR7.xlsmxlsm 125468fda9c224d8a3ccdf92f08037a343c0341a8e64dc2c1182e1d3d4e496a7Virustotal results 26.98% Heodo
2022-01-13WBB_1528008.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cn/a 
2022-01-137689743_68633.xlsmxlsm 13f975538e7e72ac755218c6a35604d36e0278e74fed8e2270476b89268a7f2cn/a Heodo
2022-01-13742DBBLCGR_79668236.xlsmxlsm b810f9c7cec1046da806806f0658c17e77bf81dc0a9413eb9d006b8ef912384fn/a Heodo