URLhaus Database

You are currently viewing the URLhaus database entry for http://onafrica.tech/xh4z1v5/557443485-37672/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1977581
URL: http://onafrica.tech/xh4z1v5/557443485-37672/?i=1
URL Status:Offline
Host: onafrica.tech
Date added:2022-01-14 23:40:05 UTC
Last online:2022-01-16 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-14 23:41:06 UTC to abuse{at}a2hosting[dot]com)
Takedown time:1 day, 0 hours, 56 minutes Poor (down since 2022-01-16 00:38:00 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-15dZL-044.xlsmxlsm d8c07f93d53cd970c597ff94a8dc92c5b0e489a7e0489883fc86a4bd6d261f27Virustotal results 33.33% Heodo
2022-01-15A_742.xlsmxlsm 6948e534c2e2cf5d79c9c210e98e900c3c00e4eb86b46c34ff57c29b950717d6n/a Heodo
2022-01-15LLK981983.xlsmxlsm 0592991b1732e1e08398bc9d0d002b8712f5d04c2ccb93bbdc194f100cfe4cd5n/a Heodo
2022-01-15Z_685.xlsmxlsm 2fcf005e25f8417cd55b6e4eadadd73f73f66a4d167f98d82daccb6756ac1609n/a Heodo
2022-01-15Z-4.xlsmxlsm 8463333f274f70052520e2419d87787a7d26dba8fd42ce3636bc31648459c391n/a Heodo
2022-01-1541520045_10658683.xlsmxlsm 847fbb97e6239c45b156e552f926c3ab3a6b874bebddb606349d8748ab97b4e2n/a Heodo
2022-01-15XKE_9301797.xlsmxlsm 295b5684fd4d6da1bb6287b0bade91c880432d8d299e7788a254c9c9738dfcffn/a Heodo
2022-01-15116XQWO34218929.xlsmxlsm 6c4e9288c11bd332eca6874187898648c605529694355f2a945ddfe0aba788a4n/a Heodo
2022-01-15ZPVW_6770366.xlsmxlsm 2e5d9260f3ded87b56eb1a493b09ec187c0deea70d4c32e9e7ba0741b9b37d22n/a Heodo
2022-01-1599911597-76208828.xlsmxlsm 7bd561959295ba5aad56e198caa95e3b1165906ae704be0dea8874044e92aad4Virustotal results 34.43% Heodo
2022-01-159406353-0177088.xlsmxlsm 97a7bf62bcd75bff44e2ec53cecbfb4be386b7ef16c983ca0c5ac1733810f284n/a Heodo
2022-01-15tU_75567.xlsmxlsm 0045b20232732fb2c4598671f7d31824da64275a796b6da748355d3aed6af989n/a Heodo
2022-01-15NESvP-61901728.xlsmxlsm 87a3b24117e7f39be9bcfdce77aeb0bdc0bdd0c7a6b6a508d4252d8d547f68c3n/a Heodo
2022-01-151714120_755736.xlsmxlsm 469f990886088f5fbc7cdcf34a1d989fb4a5e311155eb307828b819517009188n/a Heodo
2022-01-15Lnrz-44556915.xlsmxlsm be5993172db9a317aa35439a8c21a5ff4c2a5f6ce238a32d71ebbff993a2e7bcn/a Heodo
2022-01-152780-959092097.xlsmxlsm 6160bd3b3820942851b4c56066611bd4c01ac70d8a520be8e9abff7f3aff45b7n/a Heodo
2022-01-15298694374417362.xlsmxlsm e646168a1e6ffdd6ebaa34c81d6b6425c67f64db95d217af8b721655458ab199n/a Heodo
2022-01-157264473_7.xlsmxlsm 62339184034e6ad69c9803d78caf51eb93963736899000a79763942bdb54b751n/a Heodo
2022-01-15wGs_6592608.xlsmxlsm 5be4fdc379541be75fda56d996fd5380b4f68fc14a295a5c39baf258f67636c1n/a Heodo
2022-01-15cfuM_3.xlsmxlsm 546583b23bacf305f0c2460964530d3ed35ce17205cba9a3085a4f259d282253n/a Heodo
2022-01-15b_96381464.xlsmxlsm e54c7e04ad7a623d9ef4cf30a5c8cd0eaa26f3a162d3e64bb39e9c755d8f839bn/a Heodo
2022-01-15744PLIDITZD-608.xlsmxlsm e869f1f1c15fc3635f603c1f201e91c4d4fc67e27d48fa526512922a2dfa61acn/a Heodo
2022-01-15BKW_30.xlsmxlsm aad14c7063245eaa7cec884fdbf70fb9b202755952f6306a0a608bdae6f3f80cn/a Heodo
2022-01-154096968.xlsmxlsm 88184fd50c3237c5420e39824ef12f6d3ceac1fbd74e9e7875c4649b9a8452bcn/a Heodo
2022-01-15rpau-5604868.xlsmxlsm 9c2abecd00d322ebcd209a17267f2770bfac92d76554a4ff0cfb5f39a136526dn/a Heodo
2022-01-1554534468.xlsmxlsm e122abd14608a2f8f418442d0c8d4db849b832d246000e22b23216b64fc5d148n/a Heodo
2022-01-1529_0482429.xlsmxlsm b5ffff49dd82dfbb3629980f11d5976df500410b593e2c0e336aff839d69dbb0n/a Heodo
2022-01-1582848806-734.xlsmxlsm aa3502e81f27a2ae1486354bd438bb082e23fdd08f5e35defe7a676ea7631c7fn/a Heodo
2022-01-15KN11568.xlsmxlsm 865eb35199ab84b4cefee238e23662fcde705cdd1f89fa2e8adaeb2cd4fe13a0n/a Heodo
2022-01-1506388_79688401.xlsmxlsm e37e5c57c8ee2c0a6920611443300efbaf70d3070a387ad075818f869ca3de35n/a Heodo
2022-01-15505495282_10811.xlsmxlsm 5f18c310f5253557bd4e3db65b76f929de0a63e9228508432f417be214cb1c6en/a Heodo
2022-01-15892448531227590.xlsmxlsm 18407ac6698ef4bcd8d03f4a6e0934e0f737014d3da7b8b9f9573aff85531e86n/a Heodo
2022-01-15yg_1937.xlsmxlsm 24e6bb90d4b84c8fb6769e7637035f9154e23fa9ba28b65c5162f1d5e3b9a0cen/a Heodo
2022-01-15789227761321.xlsmxlsm 7b13a221a0b62f54ec6947573c797094f113558c1bc574b6bacdffe3061cf72en/a Heodo
2022-01-15DFR674923.xlsmxlsm 69b7e80cb47b695d05fe1e5816175cd6f3410e6fcf4e2ac79ebe2f96f04695a5n/a Heodo
2022-01-15wlvb_115789.xlsmxlsm 676121a2e44ebeec23e8103a93adec3154731c96e594e194b21398eb0da2ad1dn/a Heodo
2022-01-1589568-857171.xlsmxlsm 6b905847ed946ae2b8b8e9425995c2ee708464f8c6d0a0c2f5282dbcc79012d8n/a Heodo
2022-01-15454_928047322.xlsmxlsm 9a31fc23a27bd0e049c2fa04ef0d1f830f4183b026889fcdbea3969a2d9e4092n/a Heodo
2022-01-15N_73372571.xlsmxlsm a74e56368e271fed755aa1071a1286036351e04358f0707a7f062d2d18457874n/a Heodo
2022-01-15k-591.xlsmxlsm 44b990e0cecfdbce9a3071b4b5a23cb9bfd7fbccb6fb5eb267b229a822c932b0n/a Heodo
2022-01-15SNB71936271.xlsmxlsm d88a7ac3b8616da5e351a91188251a68584ec2d51a5c491c18f661a322ce9319n/a Heodo
2022-01-15XVX-66952070.xlsmxlsm c8ae806c1fad8007f17331fc0ea71d000140443e4596a430f7cd80332ac3c2cbn/a Heodo
2022-01-1558799477746.xlsmxlsm 3a65abf1b08c0b1d64979d349e28077ac40c68c38fd7f2581468337a6e5d848an/a Heodo
2022-01-15UBPO_301320774.xlsmxlsm d90488474a115987753f7d96f2810900bd6abfc52ac05aeed67710e18e0314adn/a Heodo
2022-01-1505500409-604760.xlsmxlsm af74adf2376ab0a8fb16735d44fc3e72bc4480a91b2cf9de85cd2f9ab7fe1fb5n/a Heodo
2022-01-15V5148.xlsmxlsm 55609e9411de2aa6dca0995747f89cc0b89081e6722e497433da8f8d02e9a2f2n/a Heodo
2022-01-15R_29205078.xlsmxlsm c909891cc6ab3148cc2e5af0f42b18f4fea635079447729eba2203ffdbdf32d4n/a Heodo
2022-01-15JE-382.xlsmxlsm 0c68a7f1d74f3e00c0566eece5ce5825b0d3698dc7f108664e3d9892954062b7n/a Heodo
2022-01-15au167809312.xlsmxlsm 7048b590b47e71cb6a20b35c192d264bc4bb1fb4213dbb9a9a2c9748d53af762n/a Heodo
2022-01-15522015_9255.xlsmxlsm 2966763dc88ba44de5f3aa8ff82addad4bb4b567bdfe60a067f169098258c418n/a Heodo
2022-01-152662038131.xlsmxlsm 20f452bb488539a7e3a4840a8ed88bff9a700b89e50439e71b40181a71ee604dn/a Heodo
2022-01-1505289987_72890.xlsmxlsm 22f20d029b24272da77ea4b56a36a93a3f837d0d98cc207433d92f7eed14074en/a Heodo
2022-01-1515722640_8073.xlsmxlsm 0400c5d7c8ad85387bca95f3beb4be0b192f8a53aaf64f60e631ac66c60b5504n/a Heodo
2022-01-1555659_7.xlsmxlsm 5225cb80d26dfdd86adfb738e4bd1db0465b96e113af141c8cbd9d0bf4dc1e45n/a Heodo
2022-01-158193_3247.xlsmxlsm db676ef714ea818edca3ff4a25da38808cbec2a6d7b944a237e44ad29d8932dan/a Heodo
2022-01-1560647543.xlsmxlsm 27e87e375006f747c439d7ee9faf69843cc289ff75a5eb062abbea47c57efcacVirustotal results 34.92% Heodo
2022-01-154710074005092.xlsmxlsm 771e8eb9454d09d3f655f55713b1791583aaa6f813d896737b38d1da511fcb15n/a Heodo
2022-01-1562566_83.xlsmxlsm d6d33e7076e3ff778ea32c349701dc2c599fc78d287883f2ad9c16a820386e37n/a Heodo
2022-01-15102-766374.xlsmxlsm 3abfe866becd4133977aa353ac9851353631d67be57d77cd85419f68a31b3f69n/a Heodo
2022-01-153116770-041.xlsmxlsm acc909b16bebc45d5321810acc605b915d831920e00fc443380298a602eb911dn/a Heodo
2022-01-1585724_4466130.xlsmxlsm d18ee35b037d473e3ef71c9d7b34e4a758b27a2ac27316621475b6944e5d453cn/a Heodo
2022-01-15744991_283884121.xlsmxlsm 17f92479a5b8f4bd0e4ea0601f49f3d43a2998b0fe44ad764e298f6fd561074dn/a Heodo
2022-01-1519042URZRGHH200919.xlsmxlsm 38e63247da950af1a3a96864cef46f801d99fe847c9cfab2022dd1bbfd969247n/a Heodo
2022-01-159612092-4.xlsmxlsm 26261f6683880339a902fbe83bf577ff5656ba5e8b1b274c694a8a2f31a83346n/a Heodo
2022-01-15ZZdQVR5043.xlsmxlsm 9e4e5949a37f75d6982aac9b092694911ce63a2c0bdda51d4a4e318d655f72a2n/a Heodo
2022-01-15WIH_76389259.xlsmxlsm 7c6700d88b841ee2fef7de88ce4486004142a265bc1ab53c49bfc35e56a93608n/a Heodo
2022-01-15996324463_54509.xlsmxlsm 39f0876ad6c8bcc72ac8e603e2a76774875c093b28d0d0334fb516aa70552a38n/a Heodo
2022-01-15cv-257925.xlsmxlsm da212a847de3ec4a0c978c8381ce63f01d5147f5c4dc126039572b44eb31e771Virustotal results 34.92% Heodo
2022-01-1503734.xlsmxlsm 9bd24cb87c4cce6952ace24b5b41e4be0f7606fb7941eff03d2d872d37c44d5bn/a Heodo
2022-01-14557443485-37672.xlsmxlsm 81914cad7d88ef0b90b3eb2ea2bdd84ecdadcaca51cf2673e82350452c0b094an/a Heodo