URLhaus Database

You are currently viewing the URLhaus database entry for https://site.aau.edu.et/pigeonholer/wtjjc_3168/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1975756
URL: https://site.aau.edu.et/pigeonholer/wtjjc_3168/?i=1
URL Status:Offline
Host: site.aau.edu.et
Date added:2022-01-14 04:23:05 UTC
Last online:2022-06-27 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-14 04:24:11 UTC to abuse{at}ripe[dot]net)
Takedown time:5 months, 14 days, 9 hours, 28 minutes Bad (down since 2022-06-27 13:52:23 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-15yte_65856.xlsmxlsm 5225cb80d26dfdd86adfb738e4bd1db0465b96e113af141c8cbd9d0bf4dc1e45n/a Heodo
2022-01-15414_36844968.xlsmxlsm db676ef714ea818edca3ff4a25da38808cbec2a6d7b944a237e44ad29d8932dan/a Heodo
2022-01-15aAWhRb-5860512.xlsmxlsm 27e87e375006f747c439d7ee9faf69843cc289ff75a5eb062abbea47c57efcacVirustotal results 34.92% Heodo
2022-01-157776778WBCUTME-8.xlsmxlsm 771e8eb9454d09d3f655f55713b1791583aaa6f813d896737b38d1da511fcb15n/a Heodo
2022-01-15186273208-307184616.xlsmxlsm 1f7a5f12dd0eb712be2e7b1743244984f5924481524eb1c67cac97df0c34ddf2Virustotal results 36.51% Heodo
2022-01-1589930_2428748.xlsmxlsm 5d0cc537deee02adfdfc8d27167144f5c222745162c15df34803e67f09cd7f1fn/a Heodo
2022-01-15YW_131393.xlsmxlsm ac7bc114197f00db5cdc8220478ccee911aaa8a17481da2be5bd05e884c00b2an/a Heodo
2022-01-15LUV15407814.xlsmxlsm d23b6087f9c63fee7bf5d8e620cf88ca2c38fe8ee342deed923d705fa9b6d68cn/a Heodo
2022-01-15822144.xlsmxlsm 35101e24e0d9b97edc46d35011a21e505ee4b05036998544ad3dad3444e09376n/a Heodo
2022-01-15FVXM_60362842.xlsmxlsm efa77ac16d7ac9c01da1faece2214bb67d0a73c8b31260dd11522e8a77ab24a4n/a Heodo
2022-01-15zbftui_831.xlsmxlsm de54a7c99135db230ba151e513f7813ccca74b08201d7592958e82c51b152386Virustotal results 36.07% Heodo
2022-01-15bjuzh90647.xlsmxlsm b5d5cd9f663587f2151ec927231d7058d317666224b71c201bf5db90658c12acVirustotal results 37.70% Heodo
2022-01-15Ihxud-645275.xlsmxlsm c20613da92dc6c60ccdd38a6c41f069e973921e2e618c3e9b673480e0fdbe172n/a Heodo
2022-01-15FRY-754627.xlsmxlsm f58905138f947e83a11dabe1d0fcacd0f6b6390a4b2c968f6de1e7f388ff5f1en/a Heodo
2022-01-1561195630.xlsmxlsm df3d1c9f634b214294ffb42adacb58b20d8aa9f35da387af12be4ef35556a1ean/a Heodo
2022-01-1463399768DVNPW22214.xlsmxlsm 8f0f2077aa3edcc93ab9afc1a8e9b37a8e2188bd636656b06daedf8135750b73n/a Heodo
2022-01-141171603-636767.xlsmxlsm c7f2afe51337a22d7458aad225f6c867436b3c51c0897ddd6815294d8731353aVirustotal results 37.70% Heodo
2022-01-14A_720583585.xlsmxlsm 23d904c32148793e80d050809ec6989aa4733e705e1aa03df256c3fa6ae218cfn/a Heodo
2022-01-148230IZIXJL_30.xlsmxlsm 2a5d979303bbfb1841259d7d749dfbd18ede67591c12a1bf6226ee347e5987a7Virustotal results 36.51% Heodo
2022-01-14238-010328.xlsmxlsm cf04f9d9d12315b27f3fc16c12ca6860a84b391e604598b91b704eaabcca52d7n/a Heodo
2022-01-14IE_2904208.xlsmxlsm 46b8a68b043ea9ede033a603ef771e24c4e2255070731c00b909c41607b2bdf3Virustotal results 34.92% Heodo
2022-01-14CFZ4802575.xlsmxlsm 8e9e28c923feb00ff3fe04657945eb916f591f695f3ca3f43ab65944f9525e14n/a Heodo
2022-01-14b-660056.xlsmxlsm a51724da5a2c220ccb551df3d43ba4004b8231ff7848bc4058daf8477c56f75en/a Heodo
2022-01-14718428940131.xlsmxlsm 2819520aee64e6800af25eca5fa2aa0bc926fc6dd13200b425c0a686d95db027n/a Heodo
2022-01-14PSL-5181955.xlsmxlsm 5431cd4c5693f99cd843792b98dcb1a50f26e42db66186aebd56c2ae8b0053b6Virustotal results 36.51% Heodo
2022-01-1403479975_365766.xlsmxlsm efd30552aad21aeac0f4a05a866a996d283149a65d8af4139c50960523c46bbfn/a Heodo
2022-01-14IJA-939924.xlsmxlsm 1945d61931cc7e9819244230ab70575eb1cebf7348d804e518182aecd018c76aVirustotal results 37.10% Heodo
2022-01-14EDOA_81.xlsmxlsm 6c0e05648d4f157e4d9aaeaba27c463a21b4039a0a3ed03209a6c711b556e35cn/a 
2022-01-14exglhte_176205.xlsmxlsm e4789d37fc052b9ccb7af72cfe30d0c26d4567dc3c55f9c1436db541d1e09e12n/a Heodo
2022-01-14344105-6726.xlsmxlsm 8e5f2412f3d12b279e75f2237ca109db4bcf1196f89e12bf331a48f4b7850668n/a Heodo
2022-01-14XNL_0044794.xlsmxlsm c822efa6c4fed299c0bd7794b8f9a4e193703f2d22f78a795dbebc4748dbd4b1n/a 
2022-01-14hzfv_52796.xlsmxlsm 816516a15351123612dd485904b4c1d86fbfe3e1964affa72fcf1e7db73975fcn/a Heodo
2022-01-14374950_80.xlsmxlsm 4fca1c54e08fdaa16e2a0697f33e798e9dcacde746cc035fe595bdbf1822b2f1n/a Heodo
2022-01-148603966856.xlsmxlsm 5d096704a430b052afbdbc31e3ab50be22354e158b327750c24aad5193cbc305n/a 
2022-01-14467_884.xlsmxlsm 89be0892e2374d1d0423930f73ad31cda4da82ee29970a5fef0a996357609051n/a Heodo
2022-01-14ICI-0832854.xlsmxlsm df06e51b72166281110f90f19e518fd3a11af0a1ced6a279c8c16277ad38e62dVirustotal results 33.33% 
2022-01-14MDDQN_6878.xlsmxlsm f79292fd55509a135e97ccf4fed6dd3d4a3f363a0c0023c63bf44699a74a5767n/a Heodo
2022-01-147666_05.xlsmxlsm 76e281e4666c4a90938595d81796364bfc4521ba33fddeecae09aa8fdb0c3b93n/a 
2022-01-14273BOGARBX3598.xlsmxlsm 91b698296f9258f576362d0b0eb4449692d940a43cc0a15da04204736ee3d17cVirustotal results 32.26% Heodo
2022-01-14mT752627.xlsmxlsm 6e3f7fbf88f0c06a06f7c3fa532eb76dc49819a18988ab866c98c246717e1e5eVirustotal results 33.33% 
2022-01-14411824524981.xlsmxlsm ab5d8bf5fc5242d31fac07794a032f75a097559e76c27991d42d0afa48519db5n/a Heodo
2022-01-14AT-87965112.xlsmxlsm 63d6ae5feb2ece25c4de9930b6779f1222d705097f3c6d16c06147699adef880Virustotal results 31.75% Heodo
2022-01-14271610683.xlsmxlsm 8af12a9f834703c63edad17992c5c74f775cae7734f8a363b88ab13d0599c6ffn/a Heodo
2022-01-14J-7.xlsmxlsm 3e23d05ec9aa086013200c2df62ea349686f0b76b06f16992f3af4cdb0735bb4n/a Heodo
2022-01-14DLWJP_2589892.xlsmxlsm 01e14e3c803705655e2068d80e77f2e2103118f38fa43791e069273b46c8cc0dn/a Heodo
2022-01-147906-401419.xlsmxlsm 25ffc4f1a9abeb750423f929d563d90c09121eee81a928f86f02f8e4421f5c7bn/a Heodo
2022-01-14BAHQZ_21355005.xlsmxlsm 9770e911e79143121d645e9e5c84b8472e49263dd3ebe7f615b4051784d2ade9n/a Heodo
2022-01-14077129CWQDM_069959741.xlsmxlsm a972c47050ae7cf97f0c52155e8ab1462d5a9606eaf7140f1ee56f1e8a45dbb8n/a Heodo
2022-01-145463586XCFCSQN6411236.xlsmxlsm d75b9fb536fb81677c1647eb63af1579bc3f2e7d21a22325d4d17059d3a851ddVirustotal results 33.33% Heodo
2022-01-147206-234414.xlsmxlsm 21765812bfbbb2dd7f212135f049e46468f8e4918a096a20ffb4f4048f77a49en/a Heodo
2022-01-14TS_4188446.xlsmxlsm 8241a915f1a80d0c6898233cdfef1c73d4e00a2b17c41b4bf84984d9b4234f46n/a Heodo
2022-01-14VFG_68904460.xlsmxlsm 5cc2efe07bce9271f507e31985055a3f5a845b6269dcb80cc44de065b1f093cdn/a 
2022-01-14173988175424461.xlsmxlsm 1c8efbc70bde55f70789960968bfdb1a261eab6bc372e1f6859aee00261a7f82n/a 
2022-01-1492-370.xlsmxlsm 7ae8d061dd1dd74a37ac33eced5d361e376cc4b919bdfd82338595f8e17d1e46n/a Heodo
2022-01-14037015081_42.xlsmxlsm e96a3f5577ef1f2045def7dac6923247f9ea4baf84301b8425761d362301bd83Virustotal results 35.48% Heodo
2022-01-14V_44023372.xlsmxlsm 4d980d3d8656da33b500d36477892c55a6fe412ab339437b696812bd69568203n/a Heodo
2022-01-141532894_7.xlsmxlsm 3aa0a90872759b35bb2892f042fa8a9b8b296d265e9f068d29d588b81458bdd2n/a Heodo
2022-01-14957152267.xlsmxlsm 4ec65acfeccdd87a918f6a5a09d569b4f8ec2553e67f558f432c89e3a2d0300en/a 
2022-01-1488MWWEWRDSW79273414.xlsmxlsm 1c183538db4d2feaec54995ab30b00d70fa772995b7afd8203198db1816e0664n/a 
2022-01-14FS-73.xlsmxlsm ccaa6507919076a28b38c5b5e30d2091705e482d54aedc76bec5163d31e21fe1n/a Heodo
2022-01-14312-1722.xlsmxlsm c10d40fd29ee12ca187becbe26e5d7f132695ffca909bf6013247c9146b71b81n/a 
2022-01-1476496530_540470590.xlsmxlsm d853a787212fe504d5224c16b769a947ab8a04dafadfa9efcf9209c82b92d530n/a Heodo
2022-01-14tOWngN_8914.xlsmxlsm 558a12c36fe643eed7b84461909486d24aadb653c730a99fa333aee3d4c6caedn/a Heodo
2022-01-14UPK_193.xlsmxlsm c6d25e85c9b94f389f35a0dcf68e58dd96c1b1dd4269ef4b5b8aac454b2efcban/a 
2022-01-1480988217DCHKOIRWOK_60.xlsmxlsm 3ed54e7edbfda5e8c76a389606e9626d5cdab72b4ed9b940465970e322d47ebcn/a Heodo
2022-01-14jhuip_21.xlsmxlsm e7dff9977a528e887ecaa6aa818a1ddf868d700f6e13078ac53d801c61d4771aVirustotal results 27.87% Heodo
2022-01-14056-6198485.xlsmxlsm 1b541aec384ee441ed95203089c219b335fc960c20351c2b7abda2fd6ef0d502n/a 
2022-01-1433604538PNGOMJBAJ_51026.xlsmxlsm d08e195ad3750d53f5dab90cbc01f05dc26d11db16c7eb3dc74a1656b7417cf7n/a Heodo
2022-01-14xQBjlC_13171.xlsmxlsm 8f7a9cc8cbc19032e25ab6524b05b1e6807b05e96abe4e3467200394ef44f5a8n/a Heodo
2022-01-14269886-54206.xlsmxlsm 44e19014ff150d3e22446507b5bc37be8660bf0cd9130a211434997867391938Virustotal results 27.87% 
2022-01-14iqojxmv_5545650.xlsmxlsm dc91c7176e2bff04a36a36648c214aded82bdc8c5a148d7eed728ce18b4c470dn/a Heodo
2022-01-14T-35.xlsmxlsm 0db8962b34a097cbefe62d17aae56cbb6e86fd1f8302a190427bf5de9e3a678cn/a Heodo
2022-01-14ucofqog_6028.xlsmxlsm 5e5e12a3a114f3edcabd2e37239ea81f03db5f04ae7c6a5b5436f8898489f84fn/a Heodo
2022-01-1470050_7734057.xlsmxlsm 4098eed9c3a2b676312fcf3dcdbcf4f18affb50ab9b31d02868aeee1b6e7d932n/aHeodo
2022-01-14fG_77433305.xlsmxlsm 38aa8bb59cfaed48d361e496e1682f677a3f58223fbe1a6a9e2e1fcd5d837c43n/a Heodo