URLhaus Database

You are currently viewing the URLhaus database entry for http://pilotscience.com/Halimat/WUW_8421/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1974899
URL: http://pilotscience.com/Halimat/WUW_8421/?i=1
URL Status:Offline
Host: pilotscience.com
Date added:2022-01-13 20:53:04 UTC
Last online:2022-01-14 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: sugimu_sec
Abuse complaint sent (?):mail Yes (Ticket DCU003884610 created on 2022-01-13 20:54:06 UTC)
Takedown time:18 hours, 54 minutes Good (down since 2022-01-14 15:48:36 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1404909382-228.xlsmxlsm 01e14e3c803705655e2068d80e77f2e2103118f38fa43791e069273b46c8cc0dn/a Heodo
2022-01-1484BMFWH_847812.xlsmxlsm 25ffc4f1a9abeb750423f929d563d90c09121eee81a928f86f02f8e4421f5c7bn/a Heodo
2022-01-14l-0095491.xlsmxlsm 6d309b2f00848aad2b4bb6ebe146e8bdc4dddb271c9ce170a5946cef29ccbe41n/a Heodo
2022-01-14rjsh31956595.xlsmxlsm a972c47050ae7cf97f0c52155e8ab1462d5a9606eaf7140f1ee56f1e8a45dbb8n/a Heodo
2022-01-14XUthA_56055602.xlsmxlsm de59e179f2f1f561d14fc8fe0d9e607430201108b22880bef5fb5284a2b0a41eVirustotal results 31.75% Heodo
2022-01-1428445990_91.xlsmxlsm 1f33cccbde25d58a817b0b6355084b8d0694bb104019808808694c2e6bbe2fbbVirustotal results 36.07% Heodo
2022-01-14958284_96595.xlsmxlsm ab3a001d34d3eda5f719c9692589bb86f0fd6fb88bc91e65f73d5a113496382fn/a Heodo
2022-01-14PNG-8.xlsmxlsm e1f0eb778a09fec529aa7aff9d665828b18007c8e52d62565a552f606c04442fn/a Heodo
2022-01-14TDF_15.xlsmxlsm e666db29cafcd8ca53bf39e302e59b22b962a623ce08bea482188b4b198b059eVirustotal results 33.33% 
2022-01-14X-39185.xlsmxlsm 74fbe0349e9ce3a448a58ffd97a0d40d818b39d27cc47c021374846d7ba4d4a8n/a 
2022-01-14KBF-0.xlsmxlsm 7ae8d061dd1dd74a37ac33eced5d361e376cc4b919bdfd82338595f8e17d1e46Virustotal results 33.87% Heodo
2022-01-14TMTZ-31237.xlsmxlsm e96a3f5577ef1f2045def7dac6923247f9ea4baf84301b8425761d362301bd83n/a Heodo
2022-01-14617_227973.xlsmxlsm 77c84a4f67f70d068261158ddf09d5e98292a7d86397fb95dec8f0092a67d25fn/a Heodo
2022-01-1469231132.xlsmxlsm 127c23bfe45f05520e25aa2ee365653314949ad5bf52a5961e3b97b42ee942a4Virustotal results 31.75%Heodo
2022-01-1400VUKAMFP_7656.xlsmxlsm 9ae614389cacb729663a11f54b57c02e7fd9009561d9be530e42e61b4f9eac0an/a Heodo
2022-01-14FLSCH_96233308.xlsmxlsm 8e187d1c08fcb2c9af4b7ad945c3268b5760aa57485520ce53ebf0be9c703935n/a Heodo
2022-01-14966352-70109124.xlsmxlsm e528e3738d4b8284c74b4e98c0cd720a9656a76170631018efa083afe6775b20n/a 
2022-01-14652984697092.xlsmxlsm 3e81aeff6c3de374e2eccaf42502eb484fd572d9cfd1b165fb2d05169913a6e5n/a Heodo
2022-01-14BZNLB_4.xlsmxlsm 2f13a966ef79afed68b41df1a06c3bd0a1eae654232ee05ddde70eecdfeaebf5Virustotal results 28.57% Heodo
2022-01-14tdDElC8707.xlsmxlsm 8930ee76733f7d47386802541a1c011bacf01d3a97b98801b53dc4906502f824n/a Heodo
2022-01-14441DJUDC_01918.xlsmxlsm 6fe82f57e54f0fe528f52bc1934356d50d286498e7f90d4a55ac81b33b811bacVirustotal results 29.51% Heodo
2022-01-1488JWNXKI_9407403.xlsmxlsm 42c5bb56d6d7939abf3f29c32648b0239c79d8362d5b7634e96c8387b4376831n/a Heodo
2022-01-14NY_91.xlsmxlsm a45f772b66ff40e7de3bb7541d5563fc62563fb2aa9ab6b9343e4ab859593c7en/a 
2022-01-14OL-346.xlsmxlsm 93797babbd39191ec7414750b549df061089d4b224c2465baa56820ed3583b66n/a Heodo
2022-01-14AMM-335.xlsmxlsm 722d4a00f62f11f3e669d18aa37360f9fc04792b7d8b9c150c4adfd9f9e10e92n/a Heodo
2022-01-14240987018-8151.xlsmxlsm d8fd315efba4dd6e72aaf30eb91ac6bbdc046717708c740158751ebf6a9e18d4n/a Heodo
2022-01-14xj_20672010.xlsmxlsm 38b84fcdf7e7ed1a95a221a66ebb59bf63847b414da3370144e103a23b9a577an/a Heodo
2022-01-141498792-56.xlsmxlsm bd84338df7f1e8eae032de81e2839eb85a6f05c8e7f3afb88bade961419a9d49n/a 
2022-01-14862PLQBOMA_773454.xlsmxlsm 69ef1b95072beb41ac0bd2bff9613836579a4e1b2738fd5f150a0507e1c97fa4n/a Heodo
2022-01-14IPHZY7595787.xlsmxlsm c38669a80f2dce6bbc2dbfc67e98ecead22379ea9733a7e496c8cc6896d61d11Virustotal results 27.42% Heodo
2022-01-14D-65.xlsmxlsm ec237a7588cb70688e3f57edf9ec59126b234f51b996b68000604002a379dc5dn/aHeodo
2022-01-14UV-3247.xlsmxlsm 8705d70c0665223e1bdafd9d3ab2a3d0d2afa50f899b976f4a480293ccc715eaVirustotal results 28.57% Heodo
2022-01-1486989156NSLVZYCA_61275.xlsmxlsm 878245ca533c239b7066ce1bb483d8cd42a8d5887954c3e4db00b5a52d46f354Virustotal results 31.03% 
2022-01-14EY12827846.xlsmxlsm 296171d1b92b175041ee3829e60a6880b93861ef09614e912d112777fc2fe13an/a Heodo
2022-01-147688735_471533.xlsmxlsm cb0d9916b6be6d3b9d52d057b5b8aa3b223284abe331467dea72eca27165a618Virustotal results 26.98% Heodo
2022-01-14GY_9999140.xlsmxlsm b8e60cbecfbe9cdc725b0f3fc1524d2004d7a1e7a7aca69e4f7bc0ce89fe2f54n/a 
2022-01-14qxxsfq_513365739.xlsmxlsm 0e2db8bad325d450826ee98740532c44b36d70a95f31178c85a50f4e8ee9c8b0n/a Heodo
2022-01-14985198525.xlsmxlsm 70331e285111162a78eb26ed4f17fa1fd42d663b4355e55f6e4aa117d19dd2f3n/a Heodo
2022-01-14PA_44414.xlsmxlsm 77f9047608db228251671697e703de19448819776d18446a1c5cbae840087e02n/a 
2022-01-1466625382_99.xlsmxlsm c2ab14bf957655123abdaeec4efe8202b1e6038c324c3492e2b610175334ff58n/a Heodo
2022-01-141160035_21618292.xlsmxlsm a1a5295caf727bb6210b32ba53371db4451b4355c8bf0b420b09dc8e1182fad5Virustotal results 26.98% Heodo
2022-01-1446903650KYB22417.xlsmxlsm 28d2e274a082c7de870cd52bde0f9bb929bcb9331d7ce9e85f5c9bb6948a59dbn/a 
2022-01-14KSRFQ36417.xlsmxlsm 3dd7791745ef386d30fdac27e392533cbf154de6881440bf6bae3b947c775402n/a Heodo
2022-01-14UQDKJ_9.xlsmxlsm 4eab3977f88e6444a99925c2a5769e6b720e8a6ba4ee8cc8235e23a33a1e6658Virustotal results 24.19% 
2022-01-13Pzg_5.xlsmxlsm 700465c4be1e671b009e46928a0479f311b16f05004d4e24755bb22c405781f1n/a Heodo
2022-01-13848_81338930.xlsmxlsm 731ec98a6308e19709812083b3dfba8b079aa48f36b486f2f06d7170de5d1541Virustotal results 22.58% Heodo
2022-01-1344256036_75876.xlsmxlsm e15f4ab1af0935e26f54b19c1221a5dd41698713dfa44c327a206ffd708f3ceen/a Heodo
2022-01-13GLV-98536424.xlsmxlsm 88d07eac813b81a446e976b9d46feb95a86d3e4d0cdfb6e604d42bba8757db02n/aHeodo
2022-01-13O-7424.xlsmxlsm 7585b5ae0e18149ef1ef83b54ff727158a1f11364edde0d8e4ecaa3462369f3bVirustotal results 21.31% 
2022-01-1375623378-547190997.xlsmxlsm cfcf60f2a598ac8e1abc547928fb7b32fa3b58afb00c098f3b6b34b77d0ffbb9n/a Heodo
2022-01-130985-6642.xlsmxlsm cbfdd288ed81b34166f40cbb96b59bf5836fe4dc0f06b4f121a97ad11fed7786n/a Heodo
2022-01-13EK-65129235.xlsmxlsm ee2c0116fbec7f4a729f4570a26f035ca6cba2264314eb201bb486ee24a1aa0an/a 
2022-01-13oweqd698922.xlsmxlsm a82961d7ec81fbc9a29aa3a06007eb18b887dfbe3e97ca6580c7682aa6021a86Virustotal results 22.58% Heodo
2022-01-13200739883449.xlsmxlsm 00c4657fa8734227eb769bbed474082f1140185ab579073204135735b2c32f9cVirustotal results 32.26%