URLhaus Database

You are currently viewing the URLhaus database entry for http://blog-ru.stage2.wikium.tech/assets/ef-102/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1977054
URL: http://blog-ru.stage2.wikium.tech/assets/ef-102/?i=1
URL Status:Offline
Host: blog-ru.stage2.wikium.tech
Date added:2022-01-14 19:02:05 UTC
Last online:2022-03-24 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-14 19:03:18 UTC to abuse{at}selectel[dot]ru)
Takedown time:2 months, 8 days, 16 hours, 38 minutes Bad (down since 2022-03-24 11:41:57 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-15ZCCZL-718.xlsmxlsm 6c4e9288c11bd332eca6874187898648c605529694355f2a945ddfe0aba788a4n/a Heodo
2022-01-15c_1.xlsmxlsm 2e5d9260f3ded87b56eb1a493b09ec187c0deea70d4c32e9e7ba0741b9b37d22n/a Heodo
2022-01-15gh-961.xlsmxlsm b787a1d8e313b50c3d202b02d494e17511de6780ced98dba1a21e9b8da3030e8n/a Heodo
2022-01-1581337_1815.xlsmxlsm c166b02530b91b0f018879e26b84c50a6763051fb7703ca93201de1d43e69035n/a Heodo
2022-01-15BOX978.xlsmxlsm 7605f72db5b159afe28fb4a8838e86705dc8cf60d780b307eaf0decd7bedd18dn/a Heodo
2022-01-1514503EDFXFNFLC-65617339.xlsmxlsm 87a3b24117e7f39be9bcfdce77aeb0bdc0bdd0c7a6b6a508d4252d8d547f68c3n/a Heodo
2022-01-15856677-026221.xlsmxlsm 469f990886088f5fbc7cdcf34a1d989fb4a5e311155eb307828b819517009188n/a Heodo
2022-01-151396_1.xlsmxlsm be5993172db9a317aa35439a8c21a5ff4c2a5f6ce238a32d71ebbff993a2e7bcn/a Heodo
2022-01-152458446_366.xlsmxlsm 501a67a818729282cb9c1bb2c8060e926bbfc3a4f351c1e11a7f43746bd8b756n/a Heodo
2022-01-15CWTE-0.xlsmxlsm e646168a1e6ffdd6ebaa34c81d6b6425c67f64db95d217af8b721655458ab199n/a Heodo
2022-01-15821332_15493.xlsmxlsm 62339184034e6ad69c9803d78caf51eb93963736899000a79763942bdb54b751n/a Heodo
2022-01-15491823436262.xlsmxlsm 5be4fdc379541be75fda56d996fd5380b4f68fc14a295a5c39baf258f67636c1n/a Heodo
2022-01-15958022017_01615716.xlsmxlsm a5060366b1c36dad5149d5a828e1480f4c31bb4e3041796f014eff93e55a322dn/a Heodo
2022-01-154064424_9.xlsmxlsm e54c7e04ad7a623d9ef4cf30a5c8cd0eaa26f3a162d3e64bb39e9c755d8f839bn/a Heodo
2022-01-15994344218690931.xlsmxlsm 103ebce0fa6518db55234f954a8cc2f199225e8badf6cc45d82cba723101a60an/a Heodo
2022-01-15RNV-02905.xlsmxlsm e869f1f1c15fc3635f603c1f201e91c4d4fc67e27d48fa526512922a2dfa61acn/a Heodo
2022-01-15oelO4429.xlsmxlsm 88184fd50c3237c5420e39824ef12f6d3ceac1fbd74e9e7875c4649b9a8452bcn/a Heodo
2022-01-15V_2729.xlsmxlsm 9f593a4d8c3165dc5052f06fac8f6bc92bfe45012131fc75cf27ec63ce1f3adfn/a Heodo
2022-01-15PZKy_663736.xlsmxlsm afde85c0f3400cdd70d59c378196695e4b64b7b6b559a7d481e1679f0dd8ed09n/a Heodo
2022-01-15NF88.xlsmxlsm d7818be62c9a6e0eefdc0fd0a685debddaa7d58bdc9140d59be286e46b7bb766n/a Heodo
2022-01-15KCNTS_421048725.xlsmxlsm 8a87fbe3b9242408d0e31783b71fde98d14e737723758665aff6775a60fd22den/a Heodo
2022-01-15EYF_027.xlsmxlsm e37e5c57c8ee2c0a6920611443300efbaf70d3070a387ad075818f869ca3de35n/a Heodo
2022-01-15zb_44235674.xlsmxlsm 5f18c310f5253557bd4e3db65b76f929de0a63e9228508432f417be214cb1c6en/a Heodo
2022-01-15E_5133.xlsmxlsm be942d6de6c231e6bc861c1e67b20cf20bde4a7b78751e26f4e779c0a67ca9abn/a Heodo
2022-01-15oLo_6.xlsmxlsm dd2c0fe2695c9a23678226e60228715951f3a61a3ee3dd18d36c9fd420c88647n/a Heodo
2022-01-152479353RCIOTMJ4.xlsmxlsm 7b13a221a0b62f54ec6947573c797094f113558c1bc574b6bacdffe3061cf72en/a Heodo
2022-01-1553689954_631285026.xlsmxlsm ea323d7a384e59dac300c3c2cd80c0f43f2e2f36f5179625d40490a3dd996197n/a Heodo
2022-01-15765007-6.xlsmxlsm 676121a2e44ebeec23e8103a93adec3154731c96e594e194b21398eb0da2ad1dn/a Heodo
2022-01-15gNJx-7605929.xlsmxlsm 6b905847ed946ae2b8b8e9425995c2ee708464f8c6d0a0c2f5282dbcc79012d8n/a Heodo
2022-01-158930-28814.xlsmxlsm 9a31fc23a27bd0e049c2fa04ef0d1f830f4183b026889fcdbea3969a2d9e4092n/a Heodo
2022-01-15des-617.xlsmxlsm a74e56368e271fed755aa1071a1286036351e04358f0707a7f062d2d18457874n/a Heodo
2022-01-15Bisne79.xlsmxlsm 3eb7ff0ef35d108a0719b6beea7306c849157fc6b8ef972d9d1f4b24696f71c8n/a Heodo
2022-01-154355180-4587699.xlsmxlsm d88a7ac3b8616da5e351a91188251a68584ec2d51a5c491c18f661a322ce9319n/a Heodo
2022-01-15714943052_574.xlsmxlsm c8ae806c1fad8007f17331fc0ea71d000140443e4596a430f7cd80332ac3c2cbn/a Heodo
2022-01-1549713225CWWXJGPIHO_0419.xlsmxlsm 3a65abf1b08c0b1d64979d349e28077ac40c68c38fd7f2581468337a6e5d848an/a Heodo
2022-01-15nm_8.xlsmxlsm d90488474a115987753f7d96f2810900bd6abfc52ac05aeed67710e18e0314adn/a Heodo
2022-01-15M-63.xlsmxlsm af74adf2376ab0a8fb16735d44fc3e72bc4480a91b2cf9de85cd2f9ab7fe1fb5n/a Heodo
2022-01-15jBUjEg_49.xlsmxlsm 9e6ff25a737baf5b6e837a5adec1a04f237f97615cccdd44c7052878b10ca1ban/a Heodo
2022-01-15494256_90260709.xlsmxlsm c909891cc6ab3148cc2e5af0f42b18f4fea635079447729eba2203ffdbdf32d4n/a Heodo
2022-01-15416306724_28524.xlsmxlsm 0c68a7f1d74f3e00c0566eece5ce5825b0d3698dc7f108664e3d9892954062b7n/a Heodo
2022-01-15dgmYj_6039.xlsmxlsm 1f93c92652672883150a833d6bdfdf434bde9d61121c95b4a0b77740afa8479cn/a Heodo
2022-01-151973335_5473.xlsmxlsm 2966763dc88ba44de5f3aa8ff82addad4bb4b567bdfe60a067f169098258c418n/a Heodo
2022-01-15XHCVI9.xlsmxlsm 0090643800e1f49a41801bb84916471fe71b2778e2cef65930e5b25b3c62fc8dn/a Heodo
2022-01-150796NJBATEI_36637.xlsmxlsm 22f20d029b24272da77ea4b56a36a93a3f837d0d98cc207433d92f7eed14074en/a Heodo
2022-01-15686-41913.xlsmxlsm 0400c5d7c8ad85387bca95f3beb4be0b192f8a53aaf64f60e631ac66c60b5504n/a Heodo
2022-01-15BCI75.xlsmxlsm 5225cb80d26dfdd86adfb738e4bd1db0465b96e113af141c8cbd9d0bf4dc1e45n/a Heodo
2022-01-15419WEXMRB_344.xlsmxlsm db676ef714ea818edca3ff4a25da38808cbec2a6d7b944a237e44ad29d8932dan/a Heodo
2022-01-1596156_684999.xlsmxlsm 7502d81e1850ddeca8f2a9b2b5b986b1402710ac10ba7247fa34dbde1e9f1399n/a Heodo
2022-01-15X_5499508.xlsmxlsm 771e8eb9454d09d3f655f55713b1791583aaa6f813d896737b38d1da511fcb15n/a Heodo
2022-01-159837286-2606906.xlsmxlsm d6d33e7076e3ff778ea32c349701dc2c599fc78d287883f2ad9c16a820386e37n/a Heodo
2022-01-15o_428.xlsmxlsm 77ffacc52c59a0eb5b6b3714889a43cc959b49088f530582dc6481df50f843f1n/a Heodo
2022-01-157684773_85.xlsmxlsm ac7bc114197f00db5cdc8220478ccee911aaa8a17481da2be5bd05e884c00b2an/a Heodo
2022-01-15LMU_68.xlsmxlsm 0279c45b269370dc573b24043881c52004de70327f21523cf55bba02c4c00ba9Virustotal results 34.92% Heodo
2022-01-15fmkulk-454.xlsmxlsm 7fc63e1724aca1d4d1d13512a6e3e950a54b7f44d426f8317d88d0744f986fd4n/a Heodo
2022-01-1530989507.xlsmxlsm efa77ac16d7ac9c01da1faece2214bb67d0a73c8b31260dd11522e8a77ab24a4n/a Heodo
2022-01-15dcvfmh20.xlsmxlsm b654e1b1f4906be1e6155ad03eba53894dfa66ba899732c7f4cacac7a98d1f6eVirustotal results 34.92% Heodo
2022-01-1528182414_5601.xlsmxlsm b5d5cd9f663587f2151ec927231d7058d317666224b71c201bf5db90658c12acVirustotal results 37.70% Heodo
2022-01-1527721208_718.xlsmxlsm bd6f9bc0e68e1508ca81f61f53878f1a5567ee9a16d80d3a7f0384862c6b076fn/a Heodo
2022-01-15504183.xlsmxlsm 1f2fb274efe18ae6707db44fd5e92e99c9da494530658002e2443435536ad260n/a Heodo
2022-01-1500123154_75.xlsmxlsm c58ec0360d977c3351cf691b6f778bff30e6392de98f919995bbfa8b77712bdbVirustotal results 34.92% Heodo
2022-01-1476078UUINJHXN27816351.xlsmxlsm 8f0f2077aa3edcc93ab9afc1a8e9b37a8e2188bd636656b06daedf8135750b73n/a Heodo
2022-01-14135366508_431508.xlsmxlsm c151c6b2183a27f1151ec40b487e7bcc228da192d477c6b628ce965363d13518n/a Heodo
2022-01-1462984ZJULWVHIO_753.xlsmxlsm 7b0a79d4567f32c87c170f7f28df91ff107a7d0753d5044a904811b263b93876n/a Heodo
2022-01-14962_83428.xlsmxlsm 934198fa8d46dc9e4ff666b11fd85ce6eca5f2d73d5b10e2f15f0e14e8cc9fc2n/a Heodo
2022-01-14N-187263.xlsmxlsm 300aed6d55432d78487afcc99333b1ffe50decd99dbf5e6d531829de3440ab4dn/a Heodo
2022-01-14MF_690121668.xlsmxlsm 67b8bc9b9f613a0e8f643668110c104053b5b703a46252a2445760d716f3af21n/a Heodo
2022-01-1440444109_03.xlsmxlsm 72ace94123093efcc2cc3934fe5a2ad6d05b2f9d2b4145faca7cd3bba5a08012n/a Heodo
2022-01-1478556178_7023.xlsmxlsm e14da1d2f648bd44fb7360111eecf1fb467ee22a05d91f5fc3c73a0cbb3a4c48n/a Heodo
2022-01-14UN5.xlsmxlsm dd31658b856327acc38aef012d17ffa817d5b1a966bebdb5ffae466295fbf4e8Virustotal results 37.70% Heodo
2022-01-14746058VDXH-434.xlsmxlsm d594b280f7c65a809908f22ea58661b721f25ed2c85d6bec36915a9432207170Virustotal results 36.51% Heodo
2022-01-14I_458410.xlsmxlsm 59f7f3d7f8dec07d2f6bf9229961a2d22538dd45230c180a11feea913a1c9239n/a Heodo
2022-01-1409_681.xlsmxlsm 3695be5bbc05bfe095b188f1c8737c7e56a238e61ffc12056ae5b6998cdf8525n/a Heodo
2022-01-14218164_31.xlsmxlsm 7e054a15952ed6624616fd6bd285a9c8a7b0a7d7bd45c02bdbb748cf3e3f3809n/a 
2022-01-14xvkFnI_26.xlsmxlsm 58f3f44165e589703e69eeffbc546345b0f221996cb8b647349c8c5ab401c654n/a Heodo
2022-01-14ETVX-436.xlsmxlsm 334531d476f92d830aa64cdb52ba2e80eaa2c1f2612c6c0b7d361634947ae29cn/a Heodo
2022-01-14ba_406.xlsmxlsm 456b57e4ea5721e28754ccc7dd83a57069d64745a190dcdb75d875b0e3154282n/a Heodo
2022-01-14ef-102.xlsmxlsm d705d89fa039fa910246099f0b9796c6a043584c01ef7d486f814377c7a53a75n/a Heodo