URLhaus Database

You are currently viewing the URLhaus database entry for https://businesszone-uae.com/fqpmu/84704_50/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1974679
URL: https://businesszone-uae.com/fqpmu/84704_50/?i=1
URL Status:Offline
Host: businesszone-uae.com
Date added:2022-01-13 19:06:04 UTC
Last online:2022-01-14 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 19:07:08 UTC to abuse{at}cloudflare[dot]com)
Takedown time:9 days, 13 hours, 23 minutes Bad (down since 2022-01-23 08:31:03 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-140211_15.xlsmxlsm ef09ff5f022c6e6a1dbc2d46edece778a389d5074c01aa184fbcaf30fe35fa42n/a Heodo
2022-01-142319747_85092.xlsmxlsm 816516a15351123612dd485904b4c1d86fbfe3e1964affa72fcf1e7db73975fcn/a Heodo
2022-01-14XF_7766124.xlsmxlsm 5d096704a430b052afbdbc31e3ab50be22354e158b327750c24aad5193cbc305n/a 
2022-01-1443566-199.xlsmxlsm ed0448141caba757e10c045d97e8593777ba7c60b8871b5871622b2b80ad1519n/a Heodo
2022-01-141326-0027025.xlsmxlsm df06e51b72166281110f90f19e518fd3a11af0a1ced6a279c8c16277ad38e62dVirustotal results 33.33% 
2022-01-14HEQG-489.xlsmxlsm f79292fd55509a135e97ccf4fed6dd3d4a3f363a0c0023c63bf44699a74a5767n/a Heodo
2022-01-14853692_9615182.xlsmxlsm 76e281e4666c4a90938595d81796364bfc4521ba33fddeecae09aa8fdb0c3b93Virustotal results 33.33% 
2022-01-1418VMSEZYEZAG-89.xlsmxlsm 7911c427c3e4d479ea7f0e467ea8d6ed360db86c861347ec89247094969b1e52Virustotal results 34.43% Heodo
2022-01-14bjdakic_63227162.xlsmxlsm 8a1759da5cf30cda277162bcabe0a579ee44c76e90293cad589f0d6f1e36310bn/a 
2022-01-14nfphqcn256853.xlsmxlsm ab5d8bf5fc5242d31fac07794a032f75a097559e76c27991d42d0afa48519db5n/a Heodo
2022-01-14787735352.xlsmxlsm 63d6ae5feb2ece25c4de9930b6779f1222d705097f3c6d16c06147699adef880Virustotal results 31.75% Heodo
2022-01-14IYIKI-632.xlsmxlsm 8af12a9f834703c63edad17992c5c74f775cae7734f8a363b88ab13d0599c6ffn/a Heodo
2022-01-14JRXBP_99.xlsmxlsm 3e23d05ec9aa086013200c2df62ea349686f0b76b06f16992f3af4cdb0735bb4Virustotal results 33.87% Heodo
2022-01-1417985-45147.xlsmxlsm 01e14e3c803705655e2068d80e77f2e2103118f38fa43791e069273b46c8cc0dn/a Heodo
2022-01-146148802220.xlsmxlsm 91937b58d9ec22774d2b500998864b2929fca1cfe5ded24b2db292ed81b6471dVirustotal results 31.75% Heodo
2022-01-143140459_5509272.xlsmxlsm 9770e911e79143121d645e9e5c84b8472e49263dd3ebe7f615b4051784d2ade9n/a Heodo
2022-01-14E_7159051.xlsmxlsm a972c47050ae7cf97f0c52155e8ab1462d5a9606eaf7140f1ee56f1e8a45dbb8n/a Heodo
2022-01-14oJAI1345.xlsmxlsm de59e179f2f1f561d14fc8fe0d9e607430201108b22880bef5fb5284a2b0a41eVirustotal results 31.75% Heodo
2022-01-145312019_24460.xlsmxlsm 21765812bfbbb2dd7f212135f049e46468f8e4918a096a20ffb4f4048f77a49eVirustotal results 33.87% Heodo
2022-01-1466HPUKHAD_985.xlsmxlsm 8241a915f1a80d0c6898233cdfef1c73d4e00a2b17c41b4bf84984d9b4234f46n/a Heodo
2022-01-14PRFYM-82580.xlsmxlsm 5cc2efe07bce9271f507e31985055a3f5a845b6269dcb80cc44de065b1f093cdVirustotal results 34.92% 
2022-01-14645892-35686.xlsmxlsm e666db29cafcd8ca53bf39e302e59b22b962a623ce08bea482188b4b198b059eVirustotal results 33.33% 
2022-01-14389652_618222527.xlsmxlsm 1c8efbc70bde55f70789960968bfdb1a261eab6bc372e1f6859aee00261a7f82n/a 
2022-01-144629467_95510.xlsmxlsm 7ae8d061dd1dd74a37ac33eced5d361e376cc4b919bdfd82338595f8e17d1e46n/a Heodo
2022-01-14tghie92777.xlsmxlsm e96a3f5577ef1f2045def7dac6923247f9ea4baf84301b8425761d362301bd83n/a Heodo
2022-01-14VqMygk_5926.xlsmxlsm 679a703b419763bfb1ec0a81bcfbb679e4db76684a957e2942c64f8446d0a1adn/a Heodo
2022-01-14316_2414.xlsmxlsm 0e9ecd9a72922bccbcb8e10f539cb80caf27d6e4a3d3fee85db032623821a4aen/a Heodo
2022-01-14645978351-198015.xlsmxlsm 4ae00681a3df217ac3d3dc4f3e7b9a154540d3047f51504700e9f6d937e6a29dn/a Heodo
2022-01-14oI_3968.xlsmxlsm e528e3738d4b8284c74b4e98c0cd720a9656a76170631018efa083afe6775b20n/a 
2022-01-14H_03888.xlsmxlsm 5f371bba772204823b8a090dd95b8561926c57c6555fcfbad90d2ab65718ff71n/a Heodo
2022-01-149914573_10921.xlsmxlsm 4388bfb3d3bd1ca9b1fc3350e1a4b12fa5eb80e25003b4cf503e7613279e4aceVirustotal results 30.16% Heodo
2022-01-14389852867.xlsmxlsm 8930ee76733f7d47386802541a1c011bacf01d3a97b98801b53dc4906502f824n/a Heodo
2022-01-14384932369942237.xlsmxlsm 6fe82f57e54f0fe528f52bc1934356d50d286498e7f90d4a55ac81b33b811bacn/a Heodo
2022-01-14G_7.xlsmxlsm 42c5bb56d6d7939abf3f29c32648b0239c79d8362d5b7634e96c8387b4376831n/a Heodo
2022-01-14X_5980.xlsmxlsm a45f772b66ff40e7de3bb7541d5563fc62563fb2aa9ab6b9343e4ab859593c7en/a 
2022-01-14876FNTBUH148909.xlsmxlsm e431741ede2c4e1a83b0a6c32b22491dc3a339ff2bd6fbc65a790a1b40d9c504n/a Heodo
2022-01-14045OWRBXL_01541.xlsmxlsm 3466d520bb73d37c5ba72056b46d00bd6346db16cfdef557cf14e6554b7cf98fVirustotal results 27.42% Heodo
2022-01-14Bux_5613.xlsmxlsm d8fd315efba4dd6e72aaf30eb91ac6bbdc046717708c740158751ebf6a9e18d4n/a Heodo
2022-01-14XAE-1642688.xlsmxlsm a4fac371acf37f2dfbd34397e355ade1361d93fd5c85013e9a902677149da2f4Virustotal results 30.51% 
2022-01-142837549_7813292.xlsmxlsm bd84338df7f1e8eae032de81e2839eb85a6f05c8e7f3afb88bade961419a9d49n/a 
2022-01-14789-74096.xlsmxlsm 69ef1b95072beb41ac0bd2bff9613836579a4e1b2738fd5f150a0507e1c97fa4n/a Heodo
2022-01-14482549-4670568.xlsmxlsm be9b720458252f06a6688c838079c24730523961b9242c3a0c76ef5c4c1ac949Virustotal results 26.98% Heodo
2022-01-14cC_252075088.xlsmxlsm 28d1e4658a5855c9dd40f51712aa35a428f2a49c8ae9c5c29232226e521b4a86Virustotal results 25.81% Heodo
2022-01-14PU-3.xlsmxlsm 59ae2ce51e3e9e2d3e412dcf23488aa002acb72d34656606872d00bb4ab0eca3Virustotal results 26.98% 
2022-01-14hv_902.xlsmxlsm a49399789b01cd98a86c1e039af45a87a2c9ec07d14956bb189152912239bc4cn/a 
2022-01-149128177_79026886.xlsmxlsm 296171d1b92b175041ee3829e60a6880b93861ef09614e912d112777fc2fe13aVirustotal results 26.98% Heodo
2022-01-146338_4.xlsmxlsm cb0d9916b6be6d3b9d52d057b5b8aa3b223284abe331467dea72eca27165a618Virustotal results 26.98% Heodo
2022-01-1439965-937886.xlsmxlsm 0e2db8bad325d450826ee98740532c44b36d70a95f31178c85a50f4e8ee9c8b0n/a Heodo
2022-01-14SounN9941736.xlsmxlsm d7e424ccc4f316f9abbabc2a3b0bc47b61daf071111fed745056ffc823c541c1n/a Heodo
2022-01-14CVNB_016177.xlsmxlsm 77f9047608db228251671697e703de19448819776d18446a1c5cbae840087e02n/a 
2022-01-1487477659.xlsmxlsm c2ab14bf957655123abdaeec4efe8202b1e6038c324c3492e2b610175334ff58n/a Heodo
2022-01-14TDP_567.xlsmxlsm d55979fab69e6383de91fecd3232f4f013cc7eb8de5a4a0090c6e0a371765b4cn/a 
2022-01-145927-793.xlsmxlsm 88309150746b21b8bf021aead74ef1695d5008b340897b2a84f0a254ddfcc7f8Virustotal results 26.98% Heodo
2022-01-1407793_28227.xlsmxlsm 3dd7791745ef386d30fdac27e392533cbf154de6881440bf6bae3b947c775402n/a Heodo
2022-01-14968AKSPOOTDV-413.xlsmxlsm 9914b76a0ba3fb9da5a56e91338779ce902665c925d401d929aadf7974293d79n/a Heodo
2022-01-14766029_45091904.xlsmxlsm 700465c4be1e671b009e46928a0479f311b16f05004d4e24755bb22c405781f1n/a Heodo
2022-01-13KG_8849.xlsmxlsm 731ec98a6308e19709812083b3dfba8b079aa48f36b486f2f06d7170de5d1541Virustotal results 22.58% Heodo
2022-01-13G_01754.xlsmxlsm e15f4ab1af0935e26f54b19c1221a5dd41698713dfa44c327a206ffd708f3ceen/a Heodo
2022-01-1359420863477983.xlsmxlsm 88d07eac813b81a446e976b9d46feb95a86d3e4d0cdfb6e604d42bba8757db02n/aHeodo
2022-01-1392713.xlsmxlsm 792a7b8e75aa51f90c66ee711faf429dfe3220b038cc3725ee935083fcb60e0fn/a Heodo
2022-01-133085382-3.xlsmxlsm bade694a72c3d8e5887ae4e1f1554aa85add86c8748b60af2e53e4241570d8f7Virustotal results 22.58% 
2022-01-13U_1372362.xlsmxlsm a2c4ed091b3f72777bb52bb63738e0cd8b5fc88eb4408d1ebf355c431920a2f1n/a Heodo
2022-01-13141691-30899.xlsmxlsm 8956b950352fe247497f8aa4a0738a1fd22c1e32a643a1e98ecc416229fa29f4n/a Heodo
2022-01-138705SYWC-16.xlsmxlsm f1ec4f871b40968083790f9f1e19eaf6c17301f20743055e00b6382b3d5b2f55n/a Heodo
2022-01-13147_23092801.xlsmxlsm 3ee5184a13e445cfb1886d07497ad642ebcf9b1d33fa9628d60e50e8cfa882e3n/a Heodo
2022-01-1393284198_45385.xlsmxlsm bdaea2c03177079e3874c6f5d9df40bd1d98dc7adf2f25e7226e35852c2a633bn/a 
2022-01-13Vivhz45127986.xlsmxlsm 0282a5f27aea18bebe2c3a6406c3145994755a9f37ec1e941ea0dcc1f6978550n/a Heodo
2022-01-1353411_94998.xlsmxlsm 8b8691c729c4aae4cda2049c3fcbf3153562829da68bfd3121e61dc3f9bf2cfbn/a Heodo
2022-01-13871007-544.xlsmxlsm a58fa75e6f2b26544b017856c6e1c56cb39d7769f3854c1cebdebdc0bcdbee9eVirustotal results 30.65% Heodo