URLhaus Database

You are currently viewing the URLhaus database entry for http://ona.pradex.pl/2196/XaXYc_3/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1975311
URL: http://ona.pradex.pl/2196/XaXYc_3/?i=1
URL Status:Offline
Host: ona.pradex.pl
Date added:2022-01-14 00:10:05 UTC
Last online:2022-01-14 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-14 00:11:08 UTC to abuse{at}atman[dot]pl)
Takedown time:20 hours, 54 minutes Good (down since 2022-01-14 21:05:37 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-14WQ_7.xlsmxlsm efd30552aad21aeac0f4a05a866a996d283149a65d8af4139c50960523c46bbfn/a Heodo
2022-01-1432148-2151533.xlsmxlsm 1945d61931cc7e9819244230ab70575eb1cebf7348d804e518182aecd018c76aVirustotal results 37.10% Heodo
2022-01-145082799203783.xlsmxlsm 6c0e05648d4f157e4d9aaeaba27c463a21b4039a0a3ed03209a6c711b556e35cn/a 
2022-01-14XND-3899268.xlsmxlsm e4789d37fc052b9ccb7af72cfe30d0c26d4567dc3c55f9c1436db541d1e09e12n/a Heodo
2022-01-14296312-49038.xlsmxlsm 21961b0d16c7d2561ef0c3d8a055eee86e90688f4a6fbe27c7f64c61096d0aecn/a Heodo
2022-01-14WO05404.xlsmxlsm ef09ff5f022c6e6a1dbc2d46edece778a389d5074c01aa184fbcaf30fe35fa42n/a Heodo
2022-01-14EEX1902.xlsmxlsm 01e7bf755c02b2a01e54ba0c464ce80a6e64a404a541e9fd46ac00fd1d3b22f2n/a Heodo
2022-01-14535247954_89400.xlsmxlsm 4fca1c54e08fdaa16e2a0697f33e798e9dcacde746cc035fe595bdbf1822b2f1Virustotal results 34.43% Heodo
2022-01-1424JKAZCZ11791.xlsmxlsm 89be0892e2374d1d0423930f73ad31cda4da82ee29970a5fef0a996357609051n/a Heodo
2022-01-14059915SIURUOJD_1427.xlsmxlsm df06e51b72166281110f90f19e518fd3a11af0a1ced6a279c8c16277ad38e62dn/a 
2022-01-14695902429407690.xlsmxlsm 8af80399bba56ded76bb3e7373388d1354841bbea61dfab0094215403def66c0n/a Heodo
2022-01-14azR5546289.xlsmxlsm 76e281e4666c4a90938595d81796364bfc4521ba33fddeecae09aa8fdb0c3b93Virustotal results 33.33% 
2022-01-14ckQZ_093679281.xlsmxlsm 91b698296f9258f576362d0b0eb4449692d940a43cc0a15da04204736ee3d17cVirustotal results 32.26% Heodo
2022-01-14AbdR_8376.xlsmxlsm 69c12e112b530ad17135d9bfde2781898ee661501702c81ba5c27903d439623bn/a Heodo
2022-01-14MA_225133248.xlsmxlsm 2b25518c74a4620e944ebbb70b30787175d702d7c2b9dab5072d25bda750f042n/a Heodo
2022-01-147329_8125612.xlsmxlsm 689555499fd2dff9a85acca987cf63ecb004150fb9428e7336b11a90eed8a4a6n/a 
2022-01-14WDNNC-92.xlsmxlsm 8af12a9f834703c63edad17992c5c74f775cae7734f8a363b88ab13d0599c6ffn/a Heodo
2022-01-147404788-360.xlsmxlsm dac736a5562b2a96cece573228b50c17f369d3912fef2b92dc5ea40d5c427034n/a Heodo
2022-01-1473395468782.xlsmxlsm 01e14e3c803705655e2068d80e77f2e2103118f38fa43791e069273b46c8cc0dVirustotal results 34.43% Heodo
2022-01-140664972-360068.xlsmxlsm 25ffc4f1a9abeb750423f929d563d90c09121eee81a928f86f02f8e4421f5c7bn/a Heodo
2022-01-14999359SVVCPHXYUY-9772433.xlsmxlsm 9770e911e79143121d645e9e5c84b8472e49263dd3ebe7f615b4051784d2ade9n/a Heodo
2022-01-14642462_222.xlsmxlsm a972c47050ae7cf97f0c52155e8ab1462d5a9606eaf7140f1ee56f1e8a45dbb8n/a Heodo
2022-01-14G-2.xlsmxlsm de59e179f2f1f561d14fc8fe0d9e607430201108b22880bef5fb5284a2b0a41eVirustotal results 31.75% Heodo
2022-01-14TWI-5028996.xlsmxlsm 21765812bfbbb2dd7f212135f049e46468f8e4918a096a20ffb4f4048f77a49en/a Heodo
2022-01-14wcjd_5669.xlsmxlsm ab3a001d34d3eda5f719c9692589bb86f0fd6fb88bc91e65f73d5a113496382fn/a Heodo
2022-01-14B_0.xlsmxlsm e1f0eb778a09fec529aa7aff9d665828b18007c8e52d62565a552f606c04442fn/a Heodo
2022-01-14132068719085.xlsmxlsm 33907752a95eb439381ffe72885f212ed6dc3f71fb2a3a352478b5fd83ab3eden/a Heodo
2022-01-14GP_3176637.xlsmxlsm 74fbe0349e9ce3a448a58ffd97a0d40d818b39d27cc47c021374846d7ba4d4a8n/a 
2022-01-149333_8540.xlsmxlsm 7ae8d061dd1dd74a37ac33eced5d361e376cc4b919bdfd82338595f8e17d1e46Virustotal results 33.87% Heodo
2022-01-14665502993_197572.xlsmxlsm e96a3f5577ef1f2045def7dac6923247f9ea4baf84301b8425761d362301bd83n/a Heodo
2022-01-14OHU-4860400.xlsmxlsm 77c84a4f67f70d068261158ddf09d5e98292a7d86397fb95dec8f0092a67d25fn/a Heodo
2022-01-14RK725345.xlsmxlsm 9cd906e8e1ade72180999a159418a5afbfe2cebb2cbcabf9e53352b1101e8e99n/a 
2022-01-14QX_21492.xlsmxlsm 0e9ecd9a72922bccbcb8e10f539cb80caf27d6e4a3d3fee85db032623821a4aeVirustotal results 32.79% Heodo
2022-01-14856-447490.xlsmxlsm 8e187d1c08fcb2c9af4b7ad945c3268b5760aa57485520ce53ebf0be9c703935n/a Heodo
2022-01-1482253247385.xlsmxlsm e528e3738d4b8284c74b4e98c0cd720a9656a76170631018efa083afe6775b20n/a 
2022-01-14K-69285.xlsmxlsm 5f371bba772204823b8a090dd95b8561926c57c6555fcfbad90d2ab65718ff71n/a Heodo
2022-01-141855BIHPNDDFSY87025350.xlsmxlsm efe6738d4ba36185f68784a158eaafecfa97f2a854ae278b8d193f6edc65ed2fVirustotal results 31.15% 
2022-01-141201052958834.xlsmxlsm 8930ee76733f7d47386802541a1c011bacf01d3a97b98801b53dc4906502f824n/a Heodo
2022-01-149390736_8.xlsmxlsm 6fe82f57e54f0fe528f52bc1934356d50d286498e7f90d4a55ac81b33b811bacn/a Heodo
2022-01-1400814NOVFUWDF8964063.xlsmxlsm 42c5bb56d6d7939abf3f29c32648b0239c79d8362d5b7634e96c8387b4376831n/a Heodo
2022-01-14AYGG-4117026.xlsmxlsm a45f772b66ff40e7de3bb7541d5563fc62563fb2aa9ab6b9343e4ab859593c7en/a 
2022-01-14uqiC_636.xlsmxlsm e431741ede2c4e1a83b0a6c32b22491dc3a339ff2bd6fbc65a790a1b40d9c504n/a Heodo
2022-01-14KIEL71.xlsmxlsm 3466d520bb73d37c5ba72056b46d00bd6346db16cfdef557cf14e6554b7cf98fVirustotal results 27.42% Heodo
2022-01-14BTY-68.xlsmxlsm d8fd315efba4dd6e72aaf30eb91ac6bbdc046717708c740158751ebf6a9e18d4n/a Heodo
2022-01-146998421_0156424.xlsmxlsm 38b84fcdf7e7ed1a95a221a66ebb59bf63847b414da3370144e103a23b9a577an/a Heodo
2022-01-1452126_974.xlsmxlsm bd84338df7f1e8eae032de81e2839eb85a6f05c8e7f3afb88bade961419a9d49n/a 
2022-01-144939-9344.xlsmxlsm ff585f534b9fcb8f660da3a92bdf92629e9d66cc31aceff6d3cf69be3aa2da60n/a 
2022-01-1444095DDJET-604543215.xlsmxlsm be9b720458252f06a6688c838079c24730523961b9242c3a0c76ef5c4c1ac949Virustotal results 26.98% Heodo
2022-01-14L2.xlsmxlsm ec237a7588cb70688e3f57edf9ec59126b234f51b996b68000604002a379dc5dn/aHeodo
2022-01-14VDf309529232.xlsmxlsm 59ae2ce51e3e9e2d3e412dcf23488aa002acb72d34656606872d00bb4ab0eca3n/a 
2022-01-14quko0332.xlsmxlsm 15b5006b335aba5547f75fb7a9399251115e8ae410691b568fd1064c2facafe8Virustotal results 25.40% Heodo
2022-01-14813_4573175.xlsmxlsm 296171d1b92b175041ee3829e60a6880b93861ef09614e912d112777fc2fe13aVirustotal results 26.98% Heodo
2022-01-146499531.xlsmxlsm cb0d9916b6be6d3b9d52d057b5b8aa3b223284abe331467dea72eca27165a618Virustotal results 26.98% Heodo
2022-01-14j3664.xlsmxlsm 0e2db8bad325d450826ee98740532c44b36d70a95f31178c85a50f4e8ee9c8b0n/a Heodo
2022-01-14336-7802.xlsmxlsm 70331e285111162a78eb26ed4f17fa1fd42d663b4355e55f6e4aa117d19dd2f3Virustotal results 25.81% Heodo
2022-01-14DCI_4.xlsmxlsm b8b1fb98701bf450f491a99a027c35455ecc635801276ec74d0f637aa91aa3f9Virustotal results 25.40% Heodo
2022-01-14WRH_5128.xlsmxlsm c2ab14bf957655123abdaeec4efe8202b1e6038c324c3492e2b610175334ff58n/a Heodo
2022-01-149354868_6285520.xlsmxlsm 7419106ec7430cee9167f7375fefe8db7222770b811dd208a87ebc8ecc6823dbn/aHeodo
2022-01-14342052-75.xlsmxlsm 28d2e274a082c7de870cd52bde0f9bb929bcb9331d7ce9e85f5c9bb6948a59dbn/a 
2022-01-143723731IKK-61692727.xlsmxlsm 5e752b11e5c8a995688ec34e8bacbf253a0450479c1c2582dbd770d004babe51Virustotal results 27.87% 
2022-01-1412MPKPGEPVC_76448.xlsmxlsm 9914b76a0ba3fb9da5a56e91338779ce902665c925d401d929aadf7974293d79Virustotal results 25.42% Heodo
2022-01-1430-1293728.xlsmxlsm c7adfacaa5e5152c2d59ac167dcc0b8d013f6ca3bc95b913ede6612d32e34e5cn/a