URLhaus Database

You are currently viewing the URLhaus database entry for http://avionxpress.com/lp/248437057060/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1974549
URL: http://avionxpress.com/lp/248437057060/?i=1
URL Status:Offline
Host: avionxpress.com
Date added:2022-01-13 18:12:04 UTC
Last online:2022-02-04 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 18:13:07 UTC to abuse{at}bluehost[dot]com)
Takedown time:22 days, 2 hours, 22 minutes Bad (down since 2022-02-04 20:35:17 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-14670_9572674.xlsmxlsm ed0448141caba757e10c045d97e8593777ba7c60b8871b5871622b2b80ad1519Virustotal results 35.48% Heodo
2022-01-1421063193_77578.xlsmxlsm 0d689f583f780d0dbd3e9197bac7b961ad20c2a5d4e0df322ec0308f43eac999n/a Heodo
2022-01-14391_49233666.xlsmxlsm f79292fd55509a135e97ccf4fed6dd3d4a3f363a0c0023c63bf44699a74a5767n/a Heodo
2022-01-14516065_612770690.xlsmxlsm 76e281e4666c4a90938595d81796364bfc4521ba33fddeecae09aa8fdb0c3b93n/a 
2022-01-147545516-88.xlsmxlsm 7911c427c3e4d479ea7f0e467ea8d6ed360db86c861347ec89247094969b1e52n/a Heodo
2022-01-14PE93209.xlsmxlsm ab5d8bf5fc5242d31fac07794a032f75a097559e76c27991d42d0afa48519db5n/a Heodo
2022-01-147918_0762.xlsmxlsm 2b25518c74a4620e944ebbb70b30787175d702d7c2b9dab5072d25bda750f042n/a Heodo
2022-01-14373-54.xlsmxlsm 63d6ae5feb2ece25c4de9930b6779f1222d705097f3c6d16c06147699adef880n/a Heodo
2022-01-14mumlvrq7.xlsmxlsm dac736a5562b2a96cece573228b50c17f369d3912fef2b92dc5ea40d5c427034n/a Heodo
2022-01-14770259_827.xlsmxlsm 74fe2ba2dea625d4f828ab4aa5527c83b29ae09a9a4f1c74980b998cf84f06c1Virustotal results 36.67% Heodo
2022-01-14MKY-195.xlsmxlsm 91937b58d9ec22774d2b500998864b2929fca1cfe5ded24b2db292ed81b6471dn/a Heodo
2022-01-14W_60099.xlsmxlsm 9770e911e79143121d645e9e5c84b8472e49263dd3ebe7f615b4051784d2ade9n/a Heodo
2022-01-148121_0.xlsmxlsm 7307d478b516d218eccef0870f0358fa2366b09e6e952a953db0b0565710c28fn/a 
2022-01-14208YJWYKXZWEL-7298.xlsmxlsm de59e179f2f1f561d14fc8fe0d9e607430201108b22880bef5fb5284a2b0a41eVirustotal results 31.75% Heodo
2022-01-144980945_095.xlsmxlsm d75b9fb536fb81677c1647eb63af1579bc3f2e7d21a22325d4d17059d3a851ddn/a Heodo
2022-01-14434798561_6.xlsmxlsm ab3a001d34d3eda5f719c9692589bb86f0fd6fb88bc91e65f73d5a113496382fn/a Heodo
2022-01-147047086LABMWTB-4.xlsmxlsm 5cc2efe07bce9271f507e31985055a3f5a845b6269dcb80cc44de065b1f093cdVirustotal results 34.92% 
2022-01-14PUCeFA_3503.xlsmxlsm e666db29cafcd8ca53bf39e302e59b22b962a623ce08bea482188b4b198b059eVirustotal results 33.33% 
2022-01-14v63292636.xlsmxlsm 1c8efbc70bde55f70789960968bfdb1a261eab6bc372e1f6859aee00261a7f82n/a 
2022-01-14094746409.xlsmxlsm 74fbe0349e9ce3a448a58ffd97a0d40d818b39d27cc47c021374846d7ba4d4a8n/a 
2022-01-144066001_9106.xlsmxlsm 7ae8d061dd1dd74a37ac33eced5d361e376cc4b919bdfd82338595f8e17d1e46Virustotal results 33.87% Heodo
2022-01-14VTC-398287.xlsmxlsm e96a3f5577ef1f2045def7dac6923247f9ea4baf84301b8425761d362301bd83Virustotal results 35.48% Heodo
2022-01-147694-74876615.xlsmxlsm 141cd6be868c4fa899a6d5f3f2f0ea22d94887abe2e2a3246efb2908d25031ban/a Heodo
2022-01-14E_864.xlsmxlsm 679a703b419763bfb1ec0a81bcfbb679e4db76684a957e2942c64f8446d0a1adn/a Heodo
2022-01-146484-1965629.xlsmxlsm 0e9ecd9a72922bccbcb8e10f539cb80caf27d6e4a3d3fee85db032623821a4aen/a Heodo
2022-01-14HVLL-566.xlsmxlsm 4ae00681a3df217ac3d3dc4f3e7b9a154540d3047f51504700e9f6d937e6a29dn/a Heodo
2022-01-147506322GJTYUQTE_0332072.xlsmxlsm e528e3738d4b8284c74b4e98c0cd720a9656a76170631018efa083afe6775b20n/a 
2022-01-14903953CGRQDDNS_5182307.xlsmxlsm 5f371bba772204823b8a090dd95b8561926c57c6555fcfbad90d2ab65718ff71n/a Heodo
2022-01-14QM_706.xlsmxlsm efe6738d4ba36185f68784a158eaafecfa97f2a854ae278b8d193f6edc65ed2fVirustotal results 31.15% 
2022-01-1432-955.xlsmxlsm 2a27ce2154d11dc966ffa667153ed128ea0b55eafd8cdd00ec37a4068ea6f5ebn/a
2022-01-14085044MOUZYYUZ_2020.xlsmxlsm 31880b7b69938b12824c65ef7240304c054a61f2c4e62b7f596cafbad8b63eben/a Heodo
2022-01-1467142_955.xlsmxlsm d2248407231158d69f414895bb9f2abc24b31d39c156c0f46e25a49fc0f6942bVirustotal results 28.57% Heodo
2022-01-14500896.xlsmxlsm a45f772b66ff40e7de3bb7541d5563fc62563fb2aa9ab6b9343e4ab859593c7en/a 
2022-01-14551-8790.xlsmxlsm e431741ede2c4e1a83b0a6c32b22491dc3a339ff2bd6fbc65a790a1b40d9c504n/a Heodo
2022-01-14Mcn_1.xlsmxlsm 0766c61d5d861dd6db71ee8f535e5f405f9d7ae80dfc5c83938e000d2b4ba58an/a Heodo
2022-01-14L53938.xlsmxlsm a89097e556d8e582deba3d9f6c471d585cd8ea41cf7e40480f967985ed90e60dn/a 
2022-01-14169656966.xlsmxlsm 38b84fcdf7e7ed1a95a221a66ebb59bf63847b414da3370144e103a23b9a577an/a Heodo
2022-01-14lDrLpq_8455.xlsmxlsm bd84338df7f1e8eae032de81e2839eb85a6f05c8e7f3afb88bade961419a9d49n/a 
2022-01-14JF_61152.xlsmxlsm 69ef1b95072beb41ac0bd2bff9613836579a4e1b2738fd5f150a0507e1c97fa4Virustotal results 29.51% Heodo
2022-01-14NVf-1033.xlsmxlsm c38669a80f2dce6bbc2dbfc67e98ecead22379ea9733a7e496c8cc6896d61d11Virustotal results 27.42% Heodo
2022-01-14052646APJ_6684.xlsmxlsm ec237a7588cb70688e3f57edf9ec59126b234f51b996b68000604002a379dc5dVirustotal results 27.87%Heodo
2022-01-148415073_367079.xlsmxlsm 59ae2ce51e3e9e2d3e412dcf23488aa002acb72d34656606872d00bb4ab0eca3n/a 
2022-01-14QKTPN_649957.xlsmxlsm 15b5006b335aba5547f75fb7a9399251115e8ae410691b568fd1064c2facafe8Virustotal results 25.40% Heodo
2022-01-14SliDH_2278515.xlsmxlsm 296171d1b92b175041ee3829e60a6880b93861ef09614e912d112777fc2fe13aVirustotal results 26.98% Heodo
2022-01-14CPC7757919.xlsmxlsm cb0d9916b6be6d3b9d52d057b5b8aa3b223284abe331467dea72eca27165a618Virustotal results 26.98% Heodo
2022-01-14gyzqcv26664.xlsmxlsm 0e2db8bad325d450826ee98740532c44b36d70a95f31178c85a50f4e8ee9c8b0n/a Heodo
2022-01-1475125_207550.xlsmxlsm 70331e285111162a78eb26ed4f17fa1fd42d663b4355e55f6e4aa117d19dd2f3n/a Heodo
2022-01-14703NVGXHK353.xlsmxlsm b8b1fb98701bf450f491a99a027c35455ecc635801276ec74d0f637aa91aa3f9Virustotal results 25.40% Heodo
2022-01-14qmnxstp-543.xlsmxlsm b258f9290e51fbb164e311ba5ed55dc99113582e4f849be35be5efcd3a6784a7n/a Heodo
2022-01-1466248673-61675.xlsmxlsm d55979fab69e6383de91fecd3232f4f013cc7eb8de5a4a0090c6e0a371765b4cn/a 
2022-01-1492821634_00195649.xlsmxlsm 28d2e274a082c7de870cd52bde0f9bb929bcb9331d7ce9e85f5c9bb6948a59dbn/a 
2022-01-14dvpir-585.xlsmxlsm 3dd7791745ef386d30fdac27e392533cbf154de6881440bf6bae3b947c775402Virustotal results 24.19% Heodo
2022-01-1443580_193.xlsmxlsm 4eab3977f88e6444a99925c2a5769e6b720e8a6ba4ee8cc8235e23a33a1e6658Virustotal results 24.19% 
2022-01-13FJYFT_08910607.xlsmxlsm 700465c4be1e671b009e46928a0479f311b16f05004d4e24755bb22c405781f1n/a Heodo
2022-01-13AtdR_77.xlsmxlsm fbaad03de2f185ae958c7192e2215fb6678792763d4872c4d3081d8980edc463n/a Heodo
2022-01-13122391914-014969.xlsmxlsm 88422e6f6a8baaf355add1168faec3c2cf520438933d982dcff40a31f2468a09n/a 
2022-01-1394447958_1.xlsmxlsm 88d07eac813b81a446e976b9d46feb95a86d3e4d0cdfb6e604d42bba8757db02n/aHeodo
2022-01-13vihkcjl7797.xlsmxlsm 7585b5ae0e18149ef1ef83b54ff727158a1f11364edde0d8e4ecaa3462369f3bn/a 
2022-01-13WN_591698.xlsmxlsm bade694a72c3d8e5887ae4e1f1554aa85add86c8748b60af2e53e4241570d8f7n/a 
2022-01-13vdOhcD_367.xlsmxlsm 6e346a952b92ea8d7ecde685f07f01806f0d66530eb588748cfdf35aa4467797Virustotal results 22.58% 
2022-01-13go_81840.xlsmxlsm 929400abfc42d038419315b35d0fd68f85270fee48b20985276ff79651f09264n/a Heodo
2022-01-13JDM_9052.xlsmxlsm ecf91431dd232099783efaccf118d076e4116f577bd121646ecfdb2e66cef7efn/a Heodo
2022-01-1378607_09855.xlsmxlsm f82aed370591fd8b536179975bac82d0c6c17f97b74d1dcf5c235fbfb66dad72n/a 
2022-01-13Z_00550678.xlsmxlsm e894314815096ab9fbaa2b7f084fbe70f1de47caf8d5f282e012a8095831da67n/a 
2022-01-1328841_2.xlsmxlsm 0282a5f27aea18bebe2c3a6406c3145994755a9f37ec1e941ea0dcc1f6978550Virustotal results 31.75% Heodo
2022-01-13BR_68725697.xlsmxlsm 8b8691c729c4aae4cda2049c3fcbf3153562829da68bfd3121e61dc3f9bf2cfbn/a Heodo
2022-01-1383937-6962318.xlsmxlsm b935e9ee2e3088640c3924e7434607aa3af911123be613e2f1456c19afb23c9bVirustotal results 33.33% Heodo
2022-01-13EK_54872275.xlsmxlsm 4a3a254a975f87ed78ab0ab53de0a7f8ab2235a1bc8abea99ade0593d3c2c450n/a Heodo
2022-01-1376776-66745.xlsmxlsm 67db098ffc37f7ee91efe9d171ee286e1f72b744f50dce8d4e83309ba5f21593Virustotal results 30.16% Heodo