URLhaus Database

You are currently viewing the URLhaus database entry for http://deti.czsv.dp.ua/wp/b-8868533/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1974040
URL: http://deti.czsv.dp.ua/wp/b-8868533/?i=1
URL Status:Offline
Host: deti.czsv.dp.ua
Date added:2022-01-13 14:22:04 UTC
Last online:2022-01-22 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 14:23:07 UTC to abuse{at}hostprolab[dot]com[dot]ua)
Takedown time:8 days, 19 hours, 12 minutes Bad (down since 2022-01-22 09:36:01 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-20076923_8313104.xlsmxlsm abcb66b53b95af620cadc12ea7507b5b20b4eb4eccb9f9661e3c1fb34518b3fdVirustotal results 30.65% Heodo
2022-01-14R-8679029.xlsmxlsm 8930ee76733f7d47386802541a1c011bacf01d3a97b98801b53dc4906502f824Virustotal results 32.26% Heodo
2022-01-14222_99952197.xlsmxlsm 2c3eab42ebaf7d7d0d6a7c3a7e6c46f0a85b674670566f5c4925347ba5677666n/a Heodo
2022-01-14HHKZW-0103.xlsmxlsm d2248407231158d69f414895bb9f2abc24b31d39c156c0f46e25a49fc0f6942bVirustotal results 28.57% Heodo
2022-01-14YLSXx_10121896.xlsmxlsm 033b712fd7d4d23cef910bf6ad4440c6e7c3d79f483b9d79ee72db130881a05bVirustotal results 30.16% 
2022-01-14n60.xlsmxlsm 93797babbd39191ec7414750b549df061089d4b224c2465baa56820ed3583b66n/a Heodo
2022-01-14CF528.xlsmxlsm 3466d520bb73d37c5ba72056b46d00bd6346db16cfdef557cf14e6554b7cf98fVirustotal results 27.42% Heodo
2022-01-14R-4589847.xlsmxlsm d8fd315efba4dd6e72aaf30eb91ac6bbdc046717708c740158751ebf6a9e18d4n/a Heodo
2022-01-14QJ-69084.xlsmxlsm 38b84fcdf7e7ed1a95a221a66ebb59bf63847b414da3370144e103a23b9a577aVirustotal results 26.67% Heodo
2022-01-14216585349-60251.xlsmxlsm bd84338df7f1e8eae032de81e2839eb85a6f05c8e7f3afb88bade961419a9d49n/a 
2022-01-14SG_6429.xlsmxlsm ff585f534b9fcb8f660da3a92bdf92629e9d66cc31aceff6d3cf69be3aa2da60Virustotal results 26.98% 
2022-01-14yP_6.xlsmxlsm 19da7acace7648f617cc949600d423f00148861c9f82b7eaf35c2487033bd905n/a 
2022-01-14JD_59336635.xlsmxlsm c38669a80f2dce6bbc2dbfc67e98ecead22379ea9733a7e496c8cc6896d61d11n/a Heodo
2022-01-14KO6476.xlsmxlsm ec237a7588cb70688e3f57edf9ec59126b234f51b996b68000604002a379dc5dVirustotal results 27.87%Heodo
2022-01-14QBF_59123326.xlsmxlsm 59ae2ce51e3e9e2d3e412dcf23488aa002acb72d34656606872d00bb4ab0eca3Virustotal results 26.98% 
2022-01-14nAWhDY012563.xlsmxlsm a49399789b01cd98a86c1e039af45a87a2c9ec07d14956bb189152912239bc4cn/a 
2022-01-14HUQ_35488764.xlsmxlsm 3b63ba5e81eedd06656eca70b56b6d9490b598df1646dd83dacefe8cd52d6a77n/aHeodo
2022-01-14zKFUZ57.xlsmxlsm cb0d9916b6be6d3b9d52d057b5b8aa3b223284abe331467dea72eca27165a618Virustotal results 26.98% Heodo
2022-01-1478037158016795.xlsmxlsm 0e2db8bad325d450826ee98740532c44b36d70a95f31178c85a50f4e8ee9c8b0n/a Heodo
2022-01-146161_4857.xlsmxlsm d7e424ccc4f316f9abbabc2a3b0bc47b61daf071111fed745056ffc823c541c1n/a Heodo
2022-01-1481627695_33.xlsmxlsm b8b1fb98701bf450f491a99a027c35455ecc635801276ec74d0f637aa91aa3f9Virustotal results 25.40% Heodo
2022-01-14216_83.xlsmxlsm a0a8993ac49af8c9a67d95350e800f6adfbc38b6bfc5a7c213eca23b0b9e5857Virustotal results 25.45% 
2022-01-1488788769-9104632.xlsmxlsm a1a5295caf727bb6210b32ba53371db4451b4355c8bf0b420b09dc8e1182fad5n/a Heodo
2022-01-14250456120_98.xlsmxlsm 9c8a39e1e2d7547aebadc4f37b84543d9e48faca443b9acd76cdf46d65459acdn/a 
2022-01-142421-0993010.xlsmxlsm 5e752b11e5c8a995688ec34e8bacbf253a0450479c1c2582dbd770d004babe51Virustotal results 27.87% 
2022-01-14696864818_19.xlsmxlsm 4eab3977f88e6444a99925c2a5769e6b720e8a6ba4ee8cc8235e23a33a1e6658Virustotal results 24.19% 
2022-01-14IVVGL60044.xlsmxlsm 700465c4be1e671b009e46928a0479f311b16f05004d4e24755bb22c405781f1n/a Heodo
2022-01-13H-704.xlsmxlsm 731ec98a6308e19709812083b3dfba8b079aa48f36b486f2f06d7170de5d1541Virustotal results 22.58% Heodo
2022-01-13wtffdm_48957538.xlsmxlsm e15f4ab1af0935e26f54b19c1221a5dd41698713dfa44c327a206ffd708f3ceen/a Heodo
2022-01-1372820691287.xlsmxlsm 88d07eac813b81a446e976b9d46feb95a86d3e4d0cdfb6e604d42bba8757db02n/aHeodo
2022-01-13191298-56482.xlsmxlsm 7585b5ae0e18149ef1ef83b54ff727158a1f11364edde0d8e4ecaa3462369f3bVirustotal results 21.31% 
2022-01-13exg-392.xlsmxlsm bade694a72c3d8e5887ae4e1f1554aa85add86c8748b60af2e53e4241570d8f7n/a 
2022-01-13ON_154.xlsmxlsm 6e346a952b92ea8d7ecde685f07f01806f0d66530eb588748cfdf35aa4467797Virustotal results 22.58% 
2022-01-13AIHFA-958120.xlsmxlsm 929400abfc42d038419315b35d0fd68f85270fee48b20985276ff79651f09264n/a Heodo
2022-01-13I-413542633.xlsmxlsm f1ec4f871b40968083790f9f1e19eaf6c17301f20743055e00b6382b3d5b2f55n/a Heodo
2022-01-13CC2811471.xlsmxlsm 3ee5184a13e445cfb1886d07497ad642ebcf9b1d33fa9628d60e50e8cfa882e3n/a Heodo
2022-01-13pwoH_788695.xlsmxlsm bdaea2c03177079e3874c6f5d9df40bd1d98dc7adf2f25e7226e35852c2a633bVirustotal results 31.75% 
2022-01-13D399.xlsmxlsm 86a1ee206571860bb3bad454634ec72849381988ddef82b11da1360046a070a6n/a 
2022-01-1330995672SEELKVRYF_4641584.xlsmxlsm 8b8691c729c4aae4cda2049c3fcbf3153562829da68bfd3121e61dc3f9bf2cfbn/a Heodo
2022-01-13sWge-0045.xlsmxlsm a58fa75e6f2b26544b017856c6e1c56cb39d7769f3854c1cebdebdc0bcdbee9eVirustotal results 30.65% Heodo
2022-01-13GM-54539.xlsmxlsm a139884d68aacbe19a1b68501de5392ef5ba05cc3eb5a5b2ed0c347db44af4can/a 
2022-01-136383-182.xlsmxlsm 5cf53f9f40389a8c56abd3a90681dadd27c0db904fbc2422ec9baa37e84c1584n/a Heodo
2022-01-1351699_4467088.xlsmxlsm aefebee74f868174371b6f9925e3484198f01753d2e1ed58c2b99a6c2e24de08n/a 
2022-01-13NN_3056.xlsmxlsm 4c82d1c41c6287dbc29a8404a82c908dc052b2b7120ea9e58c0cec067ad4fca2n/a Heodo
2022-01-13748926941722.xlsmxlsm dc8adc8e13d3e5a64f2d69f2163da90a19cd80594bf4db6b8d17c381312d28b6n/a Heodo
2022-01-13MH_6122.xlsmxlsm aa95f57035882d90669b43af7c454c22d91f4e3c0525a83fcc6a0138d12d2a8bn/a Heodo
2022-01-1336QGHUZBQV70.xlsmxlsm 603fc4bf5e141be1b30fb64551545d7f757d7f508891d17256ffc5564f3ccfc8n/a Heodo
2022-01-13cu65953.xlsmxlsm 115b1bbc0363cd535f4336aac31bed3fa17e2c2a4ebcb15618e55c9dfc91896bn/a Heodo
2022-01-13QAX_021229.xlsmxlsm e8da2349f8ec549d999a3e63b1f859f0452b0301aaf4fced70ecbba675b81247n/a 
2022-01-13r-10.xlsmxlsm febd9978510715acb1f4bb87d04412fb1e3e6e2720329590b6b146de515d2d85Virustotal results 30.16% 
2022-01-13eiis215407.xlsmxlsm 73aba3d6a7b537481c898581b8ccc0131152c0d0fc93500b4c562db824073360n/a Heodo
2022-01-135645-43.xlsmxlsm 41750a936f4e59a899e45972dd3ccf154305807c52bd7e5f5b19344e909f86ban/a Heodo
2022-01-137853789607.xlsmxlsm 4c2cf1d0796d8ac276ad283bbb14986b510a2a3b33e76005c8968b653d43d844n/a Heodo