URLhaus Database

You are currently viewing the URLhaus database entry for http://www.glendbank.com/wp-admin/Z97/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1973944
URL: http://www.glendbank.com/wp-admin/Z97/?i=1
URL Status:Offline
Host: www.glendbank.com
Date added:2022-01-13 13:40:04 UTC
Last online:2022-01-24 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 13:41:09 UTC to abuse{at}24shells[dot]net)
Takedown time:10 days, 21 hours, 40 minutes Bad (down since 2022-01-24 11:21:38 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-14TT_3826454.xlsmxlsm b8eeb9ce689d47606555621bc19a8656cf207de45ba62134e9c55c962a344dc6Virustotal results 33.33% 
2022-01-148091140_737.xlsmxlsm 1e42138c4309e5be0268be8f2e1b3a5831f56b26749146dbfa02a7ccf863b3fcVirustotal results 33.33% Heodo
2022-01-14CEMZ_34.xlsmxlsm e1f0eb778a09fec529aa7aff9d665828b18007c8e52d62565a552f606c04442fn/a Heodo
2022-01-149956776NXEBBIY_5590.xlsmxlsm 6adebb1f908d95b0e98266710b732c600ff552131a6844031fc5417ea84615b9n/a Heodo
2022-01-143215_30.xlsmxlsm 38fae338f6c68c5cf6e80768b44a9286d484b36262b24c1766f66e76de463aafVirustotal results 35.00% Heodo
2022-01-1410798271.xlsmxlsm 7ae8d061dd1dd74a37ac33eced5d361e376cc4b919bdfd82338595f8e17d1e46Virustotal results 33.87% Heodo
2022-01-148786615-60675.xlsmxlsm b57a55f2405494bd567fe9fd7d0b20a4dff80c22cc57b45a3646dc9e19ac69f7Virustotal results 35.00% Heodo
2022-01-14175700625-04493869.xlsmxlsm 77c84a4f67f70d068261158ddf09d5e98292a7d86397fb95dec8f0092a67d25fn/a Heodo
2022-01-14921219087_1.xlsmxlsm 9cd906e8e1ade72180999a159418a5afbfe2cebb2cbcabf9e53352b1101e8e99n/a 
2022-01-14WEJ-86451.xlsmxlsm 9ae614389cacb729663a11f54b57c02e7fd9009561d9be530e42e61b4f9eac0an/a Heodo
2022-01-1444498_901.xlsmxlsm 4ae00681a3df217ac3d3dc4f3e7b9a154540d3047f51504700e9f6d937e6a29dn/a Heodo
2022-01-1443359.xlsmxlsm 2bddcf7091fe815708701ec5e688ab154d2d422c7bb736a50dec1ad373b77d8cn/a Heodo
2022-01-14050699-50370862.xlsmxlsm 5f371bba772204823b8a090dd95b8561926c57c6555fcfbad90d2ab65718ff71n/a Heodo
2022-01-14539619-57772411.xlsmxlsm 4ff2f64198d5fd1797397a1ecba30671d30b6f434b435d292a5814e780bb0ab6Virustotal results 28.57% Heodo
2022-01-146560745_6.xlsmxlsm 558a12c36fe643eed7b84461909486d24aadb653c730a99fa333aee3d4c6caedn/a Heodo
2022-01-142716_03.xlsmxlsm c6d25e85c9b94f389f35a0dcf68e58dd96c1b1dd4269ef4b5b8aac454b2efcbaVirustotal results 30.16% 
2022-01-14HRSK-9926.xlsmxlsm 3ed54e7edbfda5e8c76a389606e9626d5cdab72b4ed9b940465970e322d47ebcn/a Heodo
2022-01-1487006_28611.xlsmxlsm e7dff9977a528e887ecaa6aa818a1ddf868d700f6e13078ac53d801c61d4771an/a Heodo
2022-01-149237_36.xlsmxlsm 1b541aec384ee441ed95203089c219b335fc960c20351c2b7abda2fd6ef0d502n/a 
2022-01-1460172074-556.xlsmxlsm d08e195ad3750d53f5dab90cbc01f05dc26d11db16c7eb3dc74a1656b7417cf7Virustotal results 27.42% Heodo
2022-01-14228543-13.xlsmxlsm 8f7a9cc8cbc19032e25ab6524b05b1e6807b05e96abe4e3467200394ef44f5a8n/a Heodo
2022-01-1455LZKBMKPZ4227599.xlsmxlsm 046d5f85d492903e52b9161d9454a1b6a18f3980482650fff9a9b2ba7086c1c0n/a Heodo
2022-01-140769_93048276.xlsmxlsm 9bbdbbf2e16c8304a30bc12313362864d0b4611b6b5564e5fa4efeb559c9a4c6n/aHeodo
2022-01-14136449942.xlsmxlsm 0db8962b34a097cbefe62d17aae56cbb6e86fd1f8302a190427bf5de9e3a678cVirustotal results 27.42% Heodo
2022-01-14OJvIM_874129628.xlsmxlsm 5e5e12a3a114f3edcabd2e37239ea81f03db5f04ae7c6a5b5436f8898489f84fn/a Heodo
2022-01-14sajT508619.xlsmxlsm 4098eed9c3a2b676312fcf3dcdbcf4f18affb50ab9b31d02868aeee1b6e7d932n/aHeodo
2022-01-14imsy-69793.xlsmxlsm 38aa8bb59cfaed48d361e496e1682f677a3f58223fbe1a6a9e2e1fcd5d837c43n/a Heodo
2022-01-14KCO_09466271.xlsmxlsm 15b5006b335aba5547f75fb7a9399251115e8ae410691b568fd1064c2facafe8Virustotal results 25.40% Heodo
2022-01-1495400-6656705.xlsmxlsm 296171d1b92b175041ee3829e60a6880b93861ef09614e912d112777fc2fe13an/a Heodo
2022-01-14n_6.xlsmxlsm cb0d9916b6be6d3b9d52d057b5b8aa3b223284abe331467dea72eca27165a618n/a Heodo
2022-01-14O-87162.xlsmxlsm 0e2db8bad325d450826ee98740532c44b36d70a95f31178c85a50f4e8ee9c8b0n/a Heodo
2022-01-14cipogox_995031.xlsmxlsm 70331e285111162a78eb26ed4f17fa1fd42d663b4355e55f6e4aa117d19dd2f3n/a Heodo
2022-01-14V-12675.xlsmxlsm 77f9047608db228251671697e703de19448819776d18446a1c5cbae840087e02n/a 
2022-01-14692438496_8001.xlsmxlsm c2ab14bf957655123abdaeec4efe8202b1e6038c324c3492e2b610175334ff58Virustotal results 25.40% Heodo
2022-01-14uRrobs_832400290.xlsmxlsm a1a5295caf727bb6210b32ba53371db4451b4355c8bf0b420b09dc8e1182fad5n/a Heodo
2022-01-14N-16102.xlsmxlsm 28d2e274a082c7de870cd52bde0f9bb929bcb9331d7ce9e85f5c9bb6948a59dbn/a 
2022-01-14YY-46462.xlsmxlsm 3dd7791745ef386d30fdac27e392533cbf154de6881440bf6bae3b947c775402n/a Heodo
2022-01-1495298_55.xlsmxlsm 9914b76a0ba3fb9da5a56e91338779ce902665c925d401d929aadf7974293d79Virustotal results 25.42% Heodo
2022-01-14037_26967.xlsmxlsm 948bece3441056d04af338e263063315d45921d28cf536276011fab5b2127a00n/a Heodo
2022-01-134724_9148.xlsmxlsm fbaad03de2f185ae958c7192e2215fb6678792763d4872c4d3081d8980edc463n/a Heodo
2022-01-13YUT_19009.xlsmxlsm 88422e6f6a8baaf355add1168faec3c2cf520438933d982dcff40a31f2468a09n/a 
2022-01-1313713920-1086.xlsmxlsm 17f3a4a5b8ba1daf0deed46f749b2df4846ff01f6abab21597fa0791667f9387n/a 
2022-01-13957_3.xlsmxlsm 792a7b8e75aa51f90c66ee711faf429dfe3220b038cc3725ee935083fcb60e0fVirustotal results 22.95% Heodo
2022-01-13RPCV_8845551.xlsmxlsm bade694a72c3d8e5887ae4e1f1554aa85add86c8748b60af2e53e4241570d8f7n/a 
2022-01-13CU-5612244.xlsmxlsm 6e346a952b92ea8d7ecde685f07f01806f0d66530eb588748cfdf35aa4467797n/a 
2022-01-137722863057933589.xlsmxlsm c0ca16ad86b853948c2ef02e2763a14a165dcdb87a8ab946f6ddc90d2ed99c32n/a Heodo
2022-01-1341673787_517.xlsmxlsm f1ec4f871b40968083790f9f1e19eaf6c17301f20743055e00b6382b3d5b2f55n/a Heodo
2022-01-13NS_67020920.xlsmxlsm 3ee5184a13e445cfb1886d07497ad642ebcf9b1d33fa9628d60e50e8cfa882e3n/a Heodo
2022-01-1312200-1333352.xlsmxlsm e894314815096ab9fbaa2b7f084fbe70f1de47caf8d5f282e012a8095831da67n/a 
2022-01-1395889688.xlsmxlsm 0282a5f27aea18bebe2c3a6406c3145994755a9f37ec1e941ea0dcc1f6978550Virustotal results 33.33% Heodo
2022-01-13ceffF_871.xlsmxlsm accddc7c06e08cf3517f7277a5c299c85176cd7821220fcbc6681c3dfba5be01Virustotal results 30.16% Heodo
2022-01-1375655-3648.xlsmxlsm b935e9ee2e3088640c3924e7434607aa3af911123be613e2f1456c19afb23c9bVirustotal results 33.33% Heodo
2022-01-13J77902.xlsmxlsm 4a3a254a975f87ed78ab0ab53de0a7f8ab2235a1bc8abea99ade0593d3c2c450n/a Heodo
2022-01-13H439.xlsmxlsm 67db098ffc37f7ee91efe9d171ee286e1f72b744f50dce8d4e83309ba5f21593Virustotal results 30.16% Heodo
2022-01-1327261648-36533.xlsmxlsm 8731dcd378702d6a9d4a679e338cbd69e94a5030d0dc0520456e30760f81cc6en/a Heodo
2022-01-13J-5346.xlsmxlsm 4c82d1c41c6287dbc29a8404a82c908dc052b2b7120ea9e58c0cec067ad4fca2n/a Heodo
2022-01-13430997STHQJYOOH63576.xlsmxlsm dc8adc8e13d3e5a64f2d69f2163da90a19cd80594bf4db6b8d17c381312d28b6n/a Heodo
2022-01-1350AKTIBR-3.xlsmxlsm c04abc3378a389c7769ed89de8e5d82f4cb311647e4f363641a807fc6a399f39n/a Heodo
2022-01-13oN98725668.xlsmxlsm 603fc4bf5e141be1b30fb64551545d7f757d7f508891d17256ffc5564f3ccfc8Virustotal results 30.16% Heodo
2022-01-1344057245-10714.xlsmxlsm 115b1bbc0363cd535f4336aac31bed3fa17e2c2a4ebcb15618e55c9dfc91896bn/a Heodo
2022-01-13Pec_701.xlsmxlsm e8da2349f8ec549d999a3e63b1f859f0452b0301aaf4fced70ecbba675b81247n/a 
2022-01-13d-213046036.xlsmxlsm febd9978510715acb1f4bb87d04412fb1e3e6e2720329590b6b146de515d2d85n/a 
2022-01-13LJl-5404442.xlsmxlsm c87454534ee25d7d677e5bab46857f861240685ce17532b788892d370096be83Virustotal results 30.16% Heodo
2022-01-13c-448004570.xlsmxlsm 41750a936f4e59a899e45972dd3ccf154305807c52bd7e5f5b19344e909f86baVirustotal results 33.33% Heodo
2022-01-1347471ZPZAGIWVXH-1925.xlsmxlsm 2d009791d777c752c4fddb6e32e5d123d7ecf80145baef849436bf4879259b8en/a Heodo
2022-01-13817_9921.xlsmxlsm 109868bbf981851bac44548c11bee90f08fd3c83e06c9b9539f568e047f45e0an/a Heodo
2022-01-13hquo213.xlsmxlsm 93d3e72ebe801f6ce7a577d88f1cb395aee4124d390adf1b4d2711786623e0d6n/a Heodo