URLhaus Database

You are currently viewing the URLhaus database entry for https://guardagfq.xyz/wp-content/2679577_8/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1975922
URL: https://guardagfq.xyz/wp-content/2679577_8/?i=1
URL Status:Offline
Host: guardagfq.xyz
Date added:2022-01-14 06:17:06 UTC
Last online:2022-01-20 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-14 06:18:12 UTC to abuse{at}cloudflare[dot]com)
Takedown time:6 days, 0 hours, 28 minutes Bad (down since 2022-01-20 06:47:03 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-15tibmq60.xlsmxlsm 0c68a7f1d74f3e00c0566eece5ce5825b0d3698dc7f108664e3d9892954062b7n/a Heodo
2022-01-1505214058_85026567.xlsmxlsm 1f93c92652672883150a833d6bdfdf434bde9d61121c95b4a0b77740afa8479cn/a Heodo
2022-01-15V_18440.xlsmxlsm 2966763dc88ba44de5f3aa8ff82addad4bb4b567bdfe60a067f169098258c418n/a Heodo
2022-01-15044439_497604.xlsmxlsm 20f452bb488539a7e3a4840a8ed88bff9a700b89e50439e71b40181a71ee604dn/a Heodo
2022-01-15cbasu_33089465.xlsmxlsm 7a75b8d2c5567ef0c4fc7270b77c7deab2f2a81ea2f1b969f66d680a781b5065n/a Heodo
2022-01-15d-216581.xlsmxlsm 22f20d029b24272da77ea4b56a36a93a3f837d0d98cc207433d92f7eed14074en/a Heodo
2022-01-15780_271852.xlsmxlsm 5225cb80d26dfdd86adfb738e4bd1db0465b96e113af141c8cbd9d0bf4dc1e45n/a Heodo
2022-01-152234711777.xlsmxlsm db676ef714ea818edca3ff4a25da38808cbec2a6d7b944a237e44ad29d8932dan/a Heodo
2022-01-15110852814-7911420.xlsmxlsm 27e87e375006f747c439d7ee9faf69843cc289ff75a5eb062abbea47c57efcacVirustotal results 34.92% Heodo
2022-01-15tkceK-6115342.xlsmxlsm 771e8eb9454d09d3f655f55713b1791583aaa6f813d896737b38d1da511fcb15n/a Heodo
2022-01-15454154.xlsmxlsm d6d33e7076e3ff778ea32c349701dc2c599fc78d287883f2ad9c16a820386e37n/a Heodo
2022-01-1599575749-016056.xlsmxlsm 3abfe866becd4133977aa353ac9851353631d67be57d77cd85419f68a31b3f69n/a Heodo
2022-01-151568547_1734.xlsmxlsm ac7bc114197f00db5cdc8220478ccee911aaa8a17481da2be5bd05e884c00b2an/a Heodo
2022-01-15qczlita-29.xlsmxlsm 0279c45b269370dc573b24043881c52004de70327f21523cf55bba02c4c00ba9n/a Heodo
2022-01-15009932624-39.xlsmxlsm 35101e24e0d9b97edc46d35011a21e505ee4b05036998544ad3dad3444e09376n/a Heodo
2022-01-1553961379_332.xlsmxlsm efa77ac16d7ac9c01da1faece2214bb67d0a73c8b31260dd11522e8a77ab24a4n/a Heodo
2022-01-152237-1895795.xlsmxlsm de54a7c99135db230ba151e513f7813ccca74b08201d7592958e82c51b152386Virustotal results 36.07% Heodo
2022-01-15929_696904020.xlsmxlsm b5d5cd9f663587f2151ec927231d7058d317666224b71c201bf5db90658c12acVirustotal results 37.70% Heodo
2022-01-1596728CWVP-5713573.xlsmxlsm 1f2fb274efe18ae6707db44fd5e92e99c9da494530658002e2443435536ad260n/a Heodo
2022-01-159937_675721.xlsmxlsm 69dd17d667b01b8c139033215bad8690a13db67dcab99d323edee2a21ad0a44en/a Heodo
2022-01-15r_469.xlsmxlsm df3d1c9f634b214294ffb42adacb58b20d8aa9f35da387af12be4ef35556a1ean/a Heodo
2022-01-15RQ39355.xlsmxlsm f843518359dd39cc1adc8c717ca65addcc0803b0130440152c1a23923820ac9an/a Heodo
2022-01-14Zmqc-3820318.xlsmxlsm c7f2afe51337a22d7458aad225f6c867436b3c51c0897ddd6815294d8731353aVirustotal results 37.70% Heodo
2022-01-14ECA048011.xlsmxlsm 2c1629903649cbcf3b885c468c648e7b9caad9bce1bad13edf832b78d8e98d96n/aHeodo
2022-01-144589738_90561732.xlsmxlsm d2569a5701a8fc23468530b950ed661832ef6d909e2a1a921da07a879135f612n/a Heodo
2022-01-14136834PVIYHZR968.xlsmxlsm cf04f9d9d12315b27f3fc16c12ca6860a84b391e604598b91b704eaabcca52d7Virustotal results 36.07% Heodo
2022-01-14jnpfoht_007177.xlsmxlsm d9d89cefabc087af2be25fadd162ff8d73bc3cc83ed65bfa30cc860af14db3c8n/a Heodo
2022-01-1497441_28832744.xlsmxlsm 8e9e28c923feb00ff3fe04657945eb916f591f695f3ca3f43ab65944f9525e14n/a Heodo
2022-01-143036066LQCOIC_80410.xlsmxlsm a51724da5a2c220ccb551df3d43ba4004b8231ff7848bc4058daf8477c56f75en/a Heodo
2022-01-1497135740-33.xlsmxlsm 9847be420a77fa4d97933e016eb214a440c741157a2f13e93b2b770dc01954fcVirustotal results 36.51% Heodo
2022-01-14961234518_288732.xlsmxlsm 013f28c036fa5af595b6c61d98cb6dc88cb8045194ef50facb59d481041c23cdn/a Heodo
2022-01-14msrfn4693458.xlsmxlsm 62b760a1bce4550241c1287ef18a547bafb9d2ea5ac31d67e61e2625321ac359n/a Heodo
2022-01-144775_1.xlsmxlsm d88d83fc565c556b4332a98efdf1c1eb765b0526e632d40c50f8f0bc75d30857n/a Heodo
2022-01-14RI_1180312.xlsmxlsm 6c0e05648d4f157e4d9aaeaba27c463a21b4039a0a3ed03209a6c711b556e35cn/a 
2022-01-14868837NUHZXZCQ-0552640.xlsmxlsm 87a33eb014251fbd3e80d9dce2bf789e0c1b579d59554f4efbdd3f6d78a6e57fn/a Heodo
2022-01-1498309753716.xlsmxlsm 21961b0d16c7d2561ef0c3d8a055eee86e90688f4a6fbe27c7f64c61096d0aecn/a Heodo
2022-01-14916605267.xlsmxlsm 8f06a62f37fbbb2344ff842ed6e0f7f450546ce8fdbb730a05226045d828fb12n/a 
2022-01-14V_24.xlsmxlsm 816516a15351123612dd485904b4c1d86fbfe3e1964affa72fcf1e7db73975fcn/a Heodo
2022-01-143641_89016.xlsmxlsm 4fca1c54e08fdaa16e2a0697f33e798e9dcacde746cc035fe595bdbf1822b2f1n/a Heodo
2022-01-14q-7921713.xlsmxlsm c95f568471e97a600183f2a71c62c8c16c86552989bf03e2e1b9104282700689n/a Heodo
2022-01-14LRKUZ-98552041.xlsmxlsm ed0448141caba757e10c045d97e8593777ba7c60b8871b5871622b2b80ad1519n/a Heodo
2022-01-14HWF_05.xlsmxlsm 0d689f583f780d0dbd3e9197bac7b961ad20c2a5d4e0df322ec0308f43eac999n/a Heodo
2022-01-1435759852_5296071.xlsmxlsm f79292fd55509a135e97ccf4fed6dd3d4a3f363a0c0023c63bf44699a74a5767n/a Heodo
2022-01-1493533595776.xlsmxlsm 76e281e4666c4a90938595d81796364bfc4521ba33fddeecae09aa8fdb0c3b93n/a 
2022-01-14O_100518.xlsmxlsm 91b698296f9258f576362d0b0eb4449692d940a43cc0a15da04204736ee3d17cn/a Heodo
2022-01-14naqo_850178453.xlsmxlsm 6e3f7fbf88f0c06a06f7c3fa532eb76dc49819a18988ab866c98c246717e1e5en/a 
2022-01-149280_569.xlsmxlsm ab5d8bf5fc5242d31fac07794a032f75a097559e76c27991d42d0afa48519db5n/a Heodo
2022-01-14737451OPNALZP_98851.xlsmxlsm 689555499fd2dff9a85acca987cf63ecb004150fb9428e7336b11a90eed8a4a6Virustotal results 33.33% 
2022-01-14717HJOKHFPVB_55566.xlsmxlsm 30998e271a430bad7397afef57404301030b49c3fc434ace1db143a0ee8252e1n/a Heodo
2022-01-1495460602_97.xlsmxlsm fc35484b7ef1a18a7ceb82df9d86f0b80de2741cddc33c3fdb8d5a51ab630b1en/a Heodo
2022-01-1453UIAH-56024.xlsmxlsm 1c68f30f7393f7ed3b31069e559a5247a7b2dca41c214fcf30a88a67f89f5d21n/a 
2022-01-14KIQ3931079.xlsmxlsm dfde0acf3284d504559d7ba1a52f478ec7e78a6a34cc8626f3bb5eced2d456b1n/a 
2022-01-14aVxnD_933.xlsmxlsm c51b53b80e46faa2609fc03aa38720a82a939a25e4999abdd30b94a915ddc24cn/a Heodo
2022-01-145586195_059.xlsmxlsm a071e68277a7133cb48b04e16b3df8081238c690317747153fc4c48d7f508952n/a 
2022-01-1462838366.xlsmxlsm 1d5a664f5ee71027f50ea0456755bd1285f2d04b4bbfbdb59389b49e9aa3f06dn/a 
2022-01-14nh9237.xlsmxlsm cfc8d8da63f1d1f71fd70525e8d7532860d35f706ae829ad3b6cdec1aac96fdbn/a Heodo
2022-01-14hqcldgx592.xlsmxlsm 1e42138c4309e5be0268be8f2e1b3a5831f56b26749146dbfa02a7ccf863b3fcn/a Heodo
2022-01-14700350-7.xlsmxlsm d5410b70cb30784d5cb00821826ddbbcb7aebec8f3cef9658c6dca679e86aff0n/a 
2022-01-1412180-49453.xlsmxlsm 6adebb1f908d95b0e98266710b732c600ff552131a6844031fc5417ea84615b9n/a Heodo
2022-01-140484349_74024.xlsmxlsm 38fae338f6c68c5cf6e80768b44a9286d484b36262b24c1766f66e76de463aafn/a Heodo
2022-01-14ugsv-719.xlsmxlsm 91d755374725859f64dc3160258cc1f6a2f04cb768b0da56e86e04511d57aca7n/a Heodo
2022-01-14wopqcdn_916.xlsmxlsm daf92a74582de89dee72174738e3196b3e9246a624735a3ab312f4ffe7ef1855Virustotal results 32.79% 
2022-01-143315-4152321.xlsmxlsm 44f26e4d53adb8ef86a7002203ec875caaa24b24a0ae88d88eccb71c5b610b56n/a Heodo
2022-01-14860921871_75.xlsmxlsm f36635fc524dee008c90bd6556c998119d281be4995e4a5fd140a69fbbfea36dn/aHeodo
2022-01-14GRqUxh-3892535.xlsmxlsm 1c297a6ab065acb1152f13e630509d68b98eedaca18dd4ab43062f8f95ea9a16Virustotal results 30.16% Heodo
2022-01-1444343NJCQDWSQU-574.xlsmxlsm 240d9c912338f39fde436264a56a9b48ded82608f23ae5f4a8f732110c2b30a2Virustotal results 33.87% Heodo
2022-01-145581238_8720216.xlsmxlsm 6ba6a434d96f238abda3e5064859a5053d173170c8d3f596833217b77a9d7d95Virustotal results 30.16% 
2022-01-141598-5776.xlsmxlsm 2e1bb3122c60fb3a905e69cc01ba10588cf13ce9c563048fb404b14ed1f3d7d4n/a Heodo
2022-01-14GVQ10.xlsmxlsm 8c7c460cd7d30d42c7553c1289f1b0af67da2b3cd1f3273a5d39cfc34afcbb72n/a Heodo
2022-01-148353_5.xlsmxlsm 558a12c36fe643eed7b84461909486d24aadb653c730a99fa333aee3d4c6caedn/a Heodo
2022-01-14QZ-9617054.xlsmxlsm c6d25e85c9b94f389f35a0dcf68e58dd96c1b1dd4269ef4b5b8aac454b2efcban/a 
2022-01-14NYB_1223250.xlsmxlsm 3c1065f5a3bd623799cdc9f2d15405189dd2604a1ddc45c113c19eec70f81c77n/a 
2022-01-140414478-206551.xlsmxlsm e7dff9977a528e887ecaa6aa818a1ddf868d700f6e13078ac53d801c61d4771an/a Heodo
2022-01-14Wwb_9123.xlsmxlsm 1b541aec384ee441ed95203089c219b335fc960c20351c2b7abda2fd6ef0d502n/a 
2022-01-14PI_2499.xlsmxlsm d08e195ad3750d53f5dab90cbc01f05dc26d11db16c7eb3dc74a1656b7417cf7n/a Heodo
2022-01-14RTFL-402647.xlsmxlsm 0405a1313355193cbf501e7e742a3085235669f2eadcac48cda287e3000c685an/a Heodo