URLhaus Database

You are currently viewing the URLhaus database entry for http://monosun.net/wp-includes/77593230-025420/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1974633
URL: http://monosun.net/wp-includes/77593230-025420/?i=1
URL Status:Offline
Host: monosun.net
Date added:2022-01-13 18:51:05 UTC
Last online:2022-01-19 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003884520 created on 2022-01-13 18:52:07 UTC)
Takedown time:6 days, 3 hours, 30 minutes Bad (down since 2022-01-19 22:22:39 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-14TuM-82.xlsmxlsm 816516a15351123612dd485904b4c1d86fbfe3e1964affa72fcf1e7db73975fcn/a Heodo
2022-01-14P_46.xlsmxlsm 4fca1c54e08fdaa16e2a0697f33e798e9dcacde746cc035fe595bdbf1822b2f1n/a Heodo
2022-01-14b-144.xlsmxlsm c95f568471e97a600183f2a71c62c8c16c86552989bf03e2e1b9104282700689n/a Heodo
2022-01-1484891915_91254324.xlsmxlsm ed0448141caba757e10c045d97e8593777ba7c60b8871b5871622b2b80ad1519n/a Heodo
2022-01-14iwenr_1069.xlsmxlsm 0d689f583f780d0dbd3e9197bac7b961ad20c2a5d4e0df322ec0308f43eac999n/a Heodo
2022-01-1415022_39227627.xlsmxlsm f79292fd55509a135e97ccf4fed6dd3d4a3f363a0c0023c63bf44699a74a5767n/a Heodo
2022-01-14JAU_3273430.xlsmxlsm 76e281e4666c4a90938595d81796364bfc4521ba33fddeecae09aa8fdb0c3b93Virustotal results 33.33% 
2022-01-14jnl-01919.xlsmxlsm 2243ada22b4c83d5f5470d40be8a9a88035c7264ad4404dad0776975a93da710n/a Heodo
2022-01-143592199.xlsmxlsm ab5d8bf5fc5242d31fac07794a032f75a097559e76c27991d42d0afa48519db5n/a Heodo
2022-01-14686189HSAT-1415.xlsmxlsm 689555499fd2dff9a85acca987cf63ecb004150fb9428e7336b11a90eed8a4a6Virustotal results 33.33% 
2022-01-14O_155.xlsmxlsm 30998e271a430bad7397afef57404301030b49c3fc434ace1db143a0ee8252e1n/a Heodo
2022-01-14gmul_96.xlsmxlsm 9ee1680a43e5c1dc04ba4bde66dd54c7703bb4d94b8be7a1e65c41ffc7e2809cn/a 
2022-01-1466482843604.xlsmxlsm 1c68f30f7393f7ed3b31069e559a5247a7b2dca41c214fcf30a88a67f89f5d21n/a 
2022-01-13789951329_30264779.xlsmxlsm 0282a5f27aea18bebe2c3a6406c3145994755a9f37ec1e941ea0dcc1f6978550Virustotal results 33.33% Heodo
2022-01-13RYDMI30926.xlsmxlsm accddc7c06e08cf3517f7277a5c299c85176cd7821220fcbc6681c3dfba5be01Virustotal results 30.16% Heodo
2022-01-137641.xlsmxlsm f6319e708e7c942acfec28dcc5e23df293475f01d892e4992d9717277f79d6een/a Heodo
2022-01-13302994TAQ_07.xlsmxlsm 4a3a254a975f87ed78ab0ab53de0a7f8ab2235a1bc8abea99ade0593d3c2c450Virustotal results 31.15% Heodo