URLhaus Database

You are currently viewing the URLhaus database entry for https://hammerpzjx.xyz/qatta/596FVEZHHXZZY_9/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1975967
URL: https://hammerpzjx.xyz/qatta/596FVEZHHXZZY_9/?i=1
URL Status:Offline
Host: hammerpzjx.xyz
Date added:2022-01-14 06:46:04 UTC
Last online:2022-01-20 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-14 06:47:17 UTC to abuse{at}cloudflare[dot]com)
Takedown time:5 days, 23 hours, 59 minutes Bad (down since 2022-01-20 06:47:03 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-15344512104-5969966.xlsmxlsm 55609e9411de2aa6dca0995747f89cc0b89081e6722e497433da8f8d02e9a2f2n/a Heodo
2022-01-15HAE-270.xlsmxlsm c909891cc6ab3148cc2e5af0f42b18f4fea635079447729eba2203ffdbdf32d4n/a Heodo
2022-01-15IH481.xlsmxlsm 0c68a7f1d74f3e00c0566eece5ce5825b0d3698dc7f108664e3d9892954062b7Virustotal results 34.43% Heodo
2022-01-156589057972768686.xlsmxlsm 1f93c92652672883150a833d6bdfdf434bde9d61121c95b4a0b77740afa8479cn/a Heodo
2022-01-155260279-482.xlsmxlsm 2966763dc88ba44de5f3aa8ff82addad4bb4b567bdfe60a067f169098258c418n/a Heodo
2022-01-15jzzbw4.xlsmxlsm 20f452bb488539a7e3a4840a8ed88bff9a700b89e50439e71b40181a71ee604dn/a Heodo
2022-01-15P_24.xlsmxlsm 7a75b8d2c5567ef0c4fc7270b77c7deab2f2a81ea2f1b969f66d680a781b5065n/a Heodo
2022-01-15750116477-7525.xlsmxlsm 0400c5d7c8ad85387bca95f3beb4be0b192f8a53aaf64f60e631ac66c60b5504n/a Heodo
2022-01-15535161350.xlsmxlsm 5225cb80d26dfdd86adfb738e4bd1db0465b96e113af141c8cbd9d0bf4dc1e45n/a Heodo
2022-01-1581488842758.xlsmxlsm db676ef714ea818edca3ff4a25da38808cbec2a6d7b944a237e44ad29d8932daVirustotal results 36.51% Heodo
2022-01-15DQB_44926.xlsmxlsm 7502d81e1850ddeca8f2a9b2b5b986b1402710ac10ba7247fa34dbde1e9f1399n/a Heodo
2022-01-1523215_51493.xlsmxlsm d50cee0c37b5505705bfc80ada4886f885ef7a2d9ea5729f811645f9c49ffd01n/a Heodo
2022-01-15G_181054.xlsmxlsm 1f7a5f12dd0eb712be2e7b1743244984f5924481524eb1c67cac97df0c34ddf2Virustotal results 36.51% Heodo
2022-01-1541088555_402.xlsmxlsm 77ffacc52c59a0eb5b6b3714889a43cc959b49088f530582dc6481df50f843f1n/a Heodo
2022-01-15XX8352709.xlsmxlsm ac7bc114197f00db5cdc8220478ccee911aaa8a17481da2be5bd05e884c00b2an/a Heodo
2022-01-15209621_76079.xlsmxlsm 7fc63e1724aca1d4d1d13512a6e3e950a54b7f44d426f8317d88d0744f986fd4n/a Heodo
2022-01-15020CXIVQ_141542.xlsmxlsm b654e1b1f4906be1e6155ad03eba53894dfa66ba899732c7f4cacac7a98d1f6eVirustotal results 34.92% Heodo
2022-01-1537466_441.xlsmxlsm b5d5cd9f663587f2151ec927231d7058d317666224b71c201bf5db90658c12acVirustotal results 37.70% Heodo
2022-01-15AR_8659.xlsmxlsm 1f2fb274efe18ae6707db44fd5e92e99c9da494530658002e2443435536ad260n/a Heodo
2022-01-1584023ZANRG-92466350.xlsmxlsm f58905138f947e83a11dabe1d0fcacd0f6b6390a4b2c968f6de1e7f388ff5f1en/a Heodo
2022-01-15618560364.xlsmxlsm c58ec0360d977c3351cf691b6f778bff30e6392de98f919995bbfa8b77712bdbVirustotal results 34.92% Heodo
2022-01-1415941TSVQ912426770.xlsmxlsm 8f0f2077aa3edcc93ab9afc1a8e9b37a8e2188bd636656b06daedf8135750b73n/a Heodo
2022-01-14161577801-131120.xlsmxlsm c7f2afe51337a22d7458aad225f6c867436b3c51c0897ddd6815294d8731353aVirustotal results 37.70% Heodo
2022-01-149748742630.xlsmxlsm 2c1629903649cbcf3b885c468c648e7b9caad9bce1bad13edf832b78d8e98d96n/aHeodo
2022-01-1402320KONZLE_182.xlsmxlsm 2a5d979303bbfb1841259d7d749dfbd18ede67591c12a1bf6226ee347e5987a7Virustotal results 36.51% Heodo
2022-01-14NQJ_059.xlsmxlsm 269e9c81c482255515158bebf6c871afb18b879ac13cfcd7e9a22a6e6476423fn/a Heodo
2022-01-1408292053-5827994.xlsmxlsm 46b8a68b043ea9ede033a603ef771e24c4e2255070731c00b909c41607b2bdf3Virustotal results 34.92% Heodo
2022-01-14880LWII_39082096.xlsmxlsm 1f9d9fca72abbfae3dc8f70790c4d8ee3916adc5c68ab73c3d2cdd1fa38198b4n/a Heodo
2022-01-1430625_3.xlsmxlsm a51724da5a2c220ccb551df3d43ba4004b8231ff7848bc4058daf8477c56f75en/a Heodo
2022-01-14594_00.xlsmxlsm 2819520aee64e6800af25eca5fa2aa0bc926fc6dd13200b425c0a686d95db027n/a Heodo
2022-01-149781623ZZXIMIC_08995307.xlsmxlsm 5431cd4c5693f99cd843792b98dcb1a50f26e42db66186aebd56c2ae8b0053b6Virustotal results 36.51% Heodo
2022-01-14QRL49435072.xlsmxlsm 62b760a1bce4550241c1287ef18a547bafb9d2ea5ac31d67e61e2625321ac359n/a Heodo
2022-01-1401318_93.xlsmxlsm 1945d61931cc7e9819244230ab70575eb1cebf7348d804e518182aecd018c76aVirustotal results 37.10% Heodo
2022-01-14jGZE_463117.xlsmxlsm 6c0e05648d4f157e4d9aaeaba27c463a21b4039a0a3ed03209a6c711b556e35cn/a 
2022-01-1405985551_515727.xlsmxlsm 87a33eb014251fbd3e80d9dce2bf789e0c1b579d59554f4efbdd3f6d78a6e57fn/a Heodo
2022-01-14O-541607.xlsmxlsm 8e5f2412f3d12b279e75f2237ca109db4bcf1196f89e12bf331a48f4b7850668n/a Heodo
2022-01-14NV_514.xlsmxlsm c822efa6c4fed299c0bd7794b8f9a4e193703f2d22f78a795dbebc4748dbd4b1n/a 
2022-01-14MGQKE-430049.xlsmxlsm 816516a15351123612dd485904b4c1d86fbfe3e1964affa72fcf1e7db73975fcn/a Heodo
2022-01-142100067-93.xlsmxlsm 4fca1c54e08fdaa16e2a0697f33e798e9dcacde746cc035fe595bdbf1822b2f1n/a Heodo
2022-01-14ogaNH-05631.xlsmxlsm 89be0892e2374d1d0423930f73ad31cda4da82ee29970a5fef0a996357609051n/a Heodo
2022-01-143956YJJHOWVJB_157075.xlsmxlsm ed0448141caba757e10c045d97e8593777ba7c60b8871b5871622b2b80ad1519n/a Heodo
2022-01-148248101-133.xlsmxlsm df06e51b72166281110f90f19e518fd3a11af0a1ced6a279c8c16277ad38e62dVirustotal results 33.33% 
2022-01-14823164.xlsmxlsm f79292fd55509a135e97ccf4fed6dd3d4a3f363a0c0023c63bf44699a74a5767n/a Heodo
2022-01-14AT_4.xlsmxlsm 76e281e4666c4a90938595d81796364bfc4521ba33fddeecae09aa8fdb0c3b93n/a 
2022-01-14715462_28128.xlsmxlsm 91b698296f9258f576362d0b0eb4449692d940a43cc0a15da04204736ee3d17cn/a Heodo
2022-01-1479822239_75.xlsmxlsm 69c12e112b530ad17135d9bfde2781898ee661501702c81ba5c27903d439623bn/a Heodo
2022-01-14667-158484.xlsmxlsm 2b25518c74a4620e944ebbb70b30787175d702d7c2b9dab5072d25bda750f042n/a Heodo
2022-01-14DPXSG_10.xlsmxlsm 689555499fd2dff9a85acca987cf63ecb004150fb9428e7336b11a90eed8a4a6Virustotal results 33.33% 
2022-01-1480790635636.xlsmxlsm fb51ebfd72054de8cbd7f74a05ce8d3cce650a9224c21504077cce9e86ae6fd1n/a Heodo
2022-01-1416513_646.xlsmxlsm 9ee1680a43e5c1dc04ba4bde66dd54c7703bb4d94b8be7a1e65c41ffc7e2809cVirustotal results 35.00% 
2022-01-14A616518635.xlsmxlsm 1c68f30f7393f7ed3b31069e559a5247a7b2dca41c214fcf30a88a67f89f5d21n/a 
2022-01-14n1943.xlsmxlsm dfde0acf3284d504559d7ba1a52f478ec7e78a6a34cc8626f3bb5eced2d456b1Virustotal results 31.75% 
2022-01-14438708697_8276.xlsmxlsm 5a2aef933d4e5f7047736fa4cf87af3ced016c1e6b1bdd7afba9e7e0cfe81d1fn/a Heodo
2022-01-14UULRL56316046.xlsmxlsm a071e68277a7133cb48b04e16b3df8081238c690317747153fc4c48d7f508952n/a 
2022-01-14ZOB_677144.xlsmxlsm 1d5a664f5ee71027f50ea0456755bd1285f2d04b4bbfbdb59389b49e9aa3f06dn/a 
2022-01-14YDJBJ_85.xlsmxlsm 60373a2b7942416a3047d1724d055f1383105920170390683cf2e74aea7d632dn/a 
2022-01-14SubhOJ-39.xlsmxlsm 1e42138c4309e5be0268be8f2e1b3a5831f56b26749146dbfa02a7ccf863b3fcn/a Heodo
2022-01-143095-447928.xlsmxlsm 014ff5c82b7c1bdb0b30b6c7148eba05ceb93243f3a0611ff6ee6be8d29009a3Virustotal results 34.92% Heodo
2022-01-1404LWV-24511.xlsmxlsm 6adebb1f908d95b0e98266710b732c600ff552131a6844031fc5417ea84615b9n/a Heodo
2022-01-14151904593668.xlsmxlsm 38fae338f6c68c5cf6e80768b44a9286d484b36262b24c1766f66e76de463aafVirustotal results 35.00% Heodo
2022-01-14vlregt-88.xlsmxlsm dd6f67bc6417791f565e1ddd1c550b3888a6673f3bc8d689ba259d955f373430n/a 
2022-01-14CSK_10610.xlsmxlsm daf92a74582de89dee72174738e3196b3e9246a624735a3ab312f4ffe7ef1855Virustotal results 32.79% 
2022-01-146928922_8629.xlsmxlsm 684179a59ccb9a4240a2cb91d8dcc96b15c6aa79eb8a928080a253684d3c2b2cn/a Heodo
2022-01-14P75370.xlsmxlsm f36635fc524dee008c90bd6556c998119d281be4995e4a5fd140a69fbbfea36dn/aHeodo
2022-01-14729392780_348178033.xlsmxlsm 4ec65acfeccdd87a918f6a5a09d569b4f8ec2553e67f558f432c89e3a2d0300en/a 
2022-01-1493934195_0866.xlsmxlsm 240d9c912338f39fde436264a56a9b48ded82608f23ae5f4a8f732110c2b30a2n/a Heodo
2022-01-146004715_36.xlsmxlsm ccaa6507919076a28b38c5b5e30d2091705e482d54aedc76bec5163d31e21fe1Virustotal results 33.33% Heodo
2022-01-148699419RCUXJZB_424.xlsmxlsm c10d40fd29ee12ca187becbe26e5d7f132695ffca909bf6013247c9146b71b81n/a 
2022-01-14yt_1.xlsmxlsm efe6738d4ba36185f68784a158eaafecfa97f2a854ae278b8d193f6edc65ed2fn/a 
2022-01-145267377-757623.xlsmxlsm 2a27ce2154d11dc966ffa667153ed128ea0b55eafd8cdd00ec37a4068ea6f5ebn/a
2022-01-14pRe_3.xlsmxlsm 6fe82f57e54f0fe528f52bc1934356d50d286498e7f90d4a55ac81b33b811bacn/a Heodo
2022-01-14553YWBGHWJ_5148.xlsmxlsm d2248407231158d69f414895bb9f2abc24b31d39c156c0f46e25a49fc0f6942bn/a Heodo
2022-01-1420353275YIHJJZPBJ-74867360.xlsmxlsm a45f772b66ff40e7de3bb7541d5563fc62563fb2aa9ab6b9343e4ab859593c7en/a 
2022-01-14tzz5998687.xlsmxlsm e431741ede2c4e1a83b0a6c32b22491dc3a339ff2bd6fbc65a790a1b40d9c504n/a Heodo
2022-01-14288157_327.xlsmxlsm 0766c61d5d861dd6db71ee8f535e5f405f9d7ae80dfc5c83938e000d2b4ba58an/a Heodo