URLhaus Database

You are currently viewing the URLhaus database entry for http://meca.global/wp-admin/CEGR_030275314/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1983254
URL: http://meca.global/wp-admin/CEGR_030275314/?i=1
URL Status:Offline
Host: meca.global
Date added:2022-01-17 09:10:11 UTC
Last online:2022-01-18 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-17 09:11:17 UTC to abuse{at}godaddy[dot]com)
Takedown time:21 hours, 9 minutes Good (down since 2022-01-18 06:20:19 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-18CLCYJ-7106158.xlsmxlsm 08ed773eaf043bb76b2576c9376b8715da6d2677f07277f709e74d4844343b7cn/a Heodo
2022-01-189258320171756.xlsmxlsm c837ba3be459d30d75ba53677884651f8ea4be085bfc4fd3bd3d87a85c4f2136n/a Heodo
2022-01-18DHVBV7018018.xlsmxlsm 8a1f1920da77f2aa02e0d38a92cc3f9901781484353db80e8940a750d673f023Virustotal results 22.22% Heodo
2022-01-18261_866.xlsmxlsm c376ffe4c231464c947bc77a323936d8eb64d85bcd1ddcd33bcc161dae53ef15n/a Heodo
2022-01-18E_94967.xlsmxlsm 64d41354ecd7f297389d824c38b8b00241322769011feb0c864269145fd8f174n/a Heodo
2022-01-18OaqhmF_7.xlsmxlsm 1d95f9d613b01b2dcf2ff10254cf77e3210a07f1a209855de18043c161520191Virustotal results 24.19% Heodo
2022-01-18181159_24245120.xlsmxlsm 2fa3f98b356abd03728f0483564efe772cf7b96ad1b42fe1cbfb4a0298ac7b53Virustotal results 23.81% Heodo
2022-01-18996860_764172.xlsmxlsm ccbc039cf33ad86b9287d5ddeb42977c7b30bdf9e8a728478f7be2f0231c9310Virustotal results 25.81% Heodo
2022-01-18o_393.xlsmxlsm 42671e33a5cd09da48d20b7a12e9d8c6b5c3e8e397deffd7d721f10e3c26c410Virustotal results 23.81% Heodo
2022-01-18sikumk_86520.xlsmxlsm 865dc6708076f891bd39b67e2f62ac875029eb002601a31442dcd0280c0c829fn/a Heodo
2022-01-185292268_206.xlsmxlsm 58a1033b4773f07ae0f7257590bf372fde51e9bc60298c483a5bf53a93210433n/a Heodo
2022-01-18270799647_004.xlsmxlsm 976872f868b49d98d5e487b42d9bce61f8b05d610fb794ccacbe1ca4274d71cdn/a Heodo
2022-01-1839461_52799.xlsmxlsm 071b56a5371a11d25784a06fa995cbf3127cafc79a1da89ed889d7d35b235f46Virustotal results 25.40% Heodo
2022-01-18484_99640.xlsmxlsm 05e2970a2d23748d20962e6a506d75a8649a4f5c2b7a0dc7723c90680659f0c9n/a Heodo
2022-01-18013_609701.xlsmxlsm 954cce122bbc5f2db9b047be265ecb1c8dbbe04b37eaf5b2f738423610df2d4an/a Heodo
2022-01-18idu_58395.xlsmxlsm 72c3f7215a023270169a1f1a078c7df9714bdb4ab297fe3bfde6e13fbcb08c68n/a Heodo
2022-01-1821321-95.xlsmxlsm bca263286c21f2647b4f0885a0848164685ab40aa0d758e94eb8d774d940c69dn/a Heodo
2022-01-18cslh623.xlsmxlsm b977c5112c9836972623051077502437f1a49a9b8c0ae004c54d0a5685f5b974Virustotal results 25.40% Heodo
2022-01-18307770692-868918.xlsmxlsm e961e46fe0000505f4534e036a9d1d2a59823cf644438a2733ab659e9c22988bVirustotal results 25.81% Heodo
2022-01-18Q_2903401.xlsmxlsm 5b40663cd5694685107f64ce59209f23d87706238f5b564227a288fdf40749f6n/a Heodo
2022-01-18FSA_77.xlsmxlsm 875b1c9e36a5cf567317565b0b54324da0aac7ca5c69f0c688853731da4082feVirustotal results 25.40% Heodo
2022-01-1896815_798.xlsmxlsm 2fed78e7159614ab93c099805eda683afcb3a8a0efcb75d260f19202886700e3Virustotal results 23.81% Heodo
2022-01-17GRMY_90681551.xlsmxlsm 6f547f1af075434c1f8fd54fb78b5a4f15d49e4a38e86d6e129d88c3e83ea230n/a Heodo
2022-01-17zr_10.xlsmxlsm b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83n/a Heodo
2022-01-17627160151_44176.xlsmxlsm 47c80c975818ab9bd09449d2130bcfb94eeab3b0aaaa784f5c2b56cc3d32c796Virustotal results 25.40% Heodo
2022-01-17999411_19.xlsmxlsm f4bb1e4f32c5444db3de6d023a3e27ecd0b948e8b13b1d54d7c725ff63dbd7daVirustotal results 22.22% Heodo
2022-01-17315_170623257.xlsmxlsm 1227b6464953ca3a4307804a94c248736f40446a42121d3e0ceb52fc63629f8an/a Heodo
2022-01-17gsthcs63.xlsmxlsm ffb2a0ff4ab817787bae6e304ecc561e2e839edd4d20194227a194e6e8bb7b0fVirustotal results 22.58% Heodo
2022-01-17h-9.xlsmxlsm 2350f0180119d36193a0ff0d35370865e389ebf2b910fbfa8419c7a2258a9356Virustotal results 23.81% Heodo
2022-01-17N_3956.xlsmxlsm d617e18915823ed787d6a6d05689a574c7286b6e0c1dccfda44870670679f7b5Virustotal results 26.98% Heodo
2022-01-17B-0990720.xlsmxlsm 9994c128dac8fef0f5b7a94e7379a6eb0f2b3ab28cf8c641f2fecfc11a1100a9n/a Heodo
2022-01-17268XYT3228.xlsmxlsm 5951f2e9692548b9221f83d17d2495b963300952539c88355ebb9a7357076104n/a Heodo
2022-01-17bwwynfc_3571.xlsmxlsm 39c543e8e8c15d86ce6846357dfb9bc121ec589e7541240515953a672cf960c1n/a Heodo
2022-01-17KOR-6112.xlsmxlsm 2a1119b07fbb806edb203f06e3e4ebe42817e018151f58340fe48b9c7115f24en/a Heodo
2022-01-172997AIIK_7931421.xlsmxlsm 0305018e9cd43eb72a5a1d128e27d836c7db1a37cb217fac21551515f87a8904Virustotal results 23.81% Heodo
2022-01-17TT-1180924.xlsmxlsm 669a677211cd0365c904dc95014febef3e5b32be3d52e0b4da69ae5f79d67d57n/a Heodo
2022-01-17TUWZ342.xlsmxlsm 240eea341736e3d6091948435139358fd0b6b3e508709296bcf0d1a870596a52n/a Heodo
2022-01-17sdkwbT_082808057.xlsmxlsm 066efdf5222121043efd895d61f397cec3089491b81f5501f9db9d517e649b98Virustotal results 24.59% Heodo
2022-01-17B_207.xlsmxlsm b7fc32e00135f65946eecbf56d3c8bd1353d1c09962ee449e8e79bf761df406bn/a Heodo
2022-01-17N055.xlsmxlsm 0f72eed22b58f5d63fbba18836777f39f79e300d1d00e4890b229d8140f09ac8n/a Heodo
2022-01-17PNDLR_583450.xlsmxlsm 677edcb3338b40c05e2c3eec629faeb2078019b07669765c7bf2a1343aab5a92n/a Heodo
2022-01-17TNAPI_5102579.xlsmxlsm 1233717961aafe39a8460a60e274f121faa33e31fb60051e6300f4bf57adf8ban/a Heodo
2022-01-1758031442-201985.xlsmxlsm 7649eee2e5b1f2c5b855fbc12652082557a841f30248c6e38f9b7648846fed45Virustotal results 22.22% Heodo
2022-01-17kwlpzrd-0.xlsmxlsm a2d005d3b194ae1348bfaf036d70b762ec3321ea9b1d572d2d6ebb0bf327024fn/a Heodo
2022-01-17368136EUOAFX78968.xlsmxlsm 70dab940cb93b890660f316b522fd903fc2880758fd69b1fdeff859d7974c445n/a Heodo
2022-01-17935546064.xlsmxlsm c2991af88ad8e583e75b148a541d7f5b7457878308a7913424b15e9711f2ac04n/a Heodo
2022-01-17hr-033042.xlsmxlsm 6bdbb92cd4daddedd242c8698d421dc0136dc5687709d94b56ed27a34de618a9n/a Heodo
2022-01-17I-823970.xlsmxlsm 7d5b87160342eb33ff47fbe556194367dbb71a4b61af523f44757dbb3c360bbfn/a Heodo
2022-01-17XV52013.xlsmxlsm 3a55adfeec140105693c634f12d39236152d62ca36bb2c001a286278b19ad53cn/a Heodo
2022-01-17648270119655.xlsmxlsm 320818cf69af73fbb7eb478c571632afcfe31e32b5ae4f8572827fe4bd0f0f2fn/a Heodo
2022-01-1755097662RPW_052831.xlsmxlsm cc2d5d96bee1a1163fac2504e913534d43e1eb78658e73dc5adc750f81d548bbn/a Heodo
2022-01-17wsrf15.xlsmxlsm b176337ee1c641809d42eb432da3762bef144a722d2d25f99ad62e90e879400an/a Heodo
2022-01-175547_293.xlsmxlsm 806646c0e20461a2043f38f8876b87ebd0101c4bd493aef42d766d957f2b9045n/a Heodo
2022-01-17mmypco-2421567.xlsmxlsm a18229a896ad390cfb7832892e22f4a346b014adb0c7b5aa5502b2a128d97ab8n/a Heodo
2022-01-17MZ9131.xlsmxlsm 437045ddbd2da94c3d4dec889059ac355354f3fd4a1f9a7f6550e730f39f6141n/a Heodo
2022-01-171291439_386380.xlsmxlsm 6ddf22f24242752cf15ad5b9e5c27b696e1b48e18a0d4818884cbd1f65ce2082n/a Heodo
2022-01-17VDYI_94643.xlsmxlsm f72dbc6edf5d46df8506897b4ce87b302d828f454c080ab0a474df3bfed344e2n/a Heodo
2022-01-17sq-34.xlsmxlsm 43f60f8a924254b96672c801ccd135f538ad351ff4879471edef65b3494fc0f6n/a Heodo
2022-01-17JquoCy78631603.xlsmxlsm f78560c7db1c0122cb9158dc23d96041a5fb7550afcd947b6576964c93c71ed8n/a Heodo
2022-01-172414_53448222.xlsmxlsm fc57dee93794223b8d68d7f9afd4e3ac9f24dc1d2f365f694dd949d4334b42acn/a Heodo
2022-01-1779572415VZT_2022840.xlsmxlsm 8d209fcf2f9009c909f1a62b0a87100c7bf3eccf9a61e853e0b1ff836bc21defn/a Heodo
2022-01-1749789110645.xlsmxlsm a0f04ce015d83b6bce350f1e139b4280fa2f0836326ac9796ead0ea622c973f2n/a Heodo
2022-01-17L-207827018.xlsmxlsm d83bab7b2ba5c97259a4b9c8250a26f8a683267982c93a7ef82f2341ba5bea6en/a Heodo
2022-01-17SISNQ_9.xlsmxlsm eef937fbe0caad5c018326b47bd786a47a2cac5ab59fc11ffd247fe5c363173fVirustotal results 17.74% Heodo
2022-01-17RM_95.xlsmxlsm c155b963bb8446fe90e7f59ab3b36eade8da29cb306e1b27ebc7b416ba76ee8cn/a Heodo
2022-01-17DF-22583.xlsmxlsm 9a8faf682c61112381816cba571de9d92f078bd2fce763c399075445aed799abn/a Heodo
2022-01-17Lue-87922.xlsmxlsm a5333d22d5a64a89c54d3fa14145fdc98e9b50eb613ff05040de825bcb9866acVirustotal results 16.95% Heodo
2022-01-17yk_73010.xlsmxlsm 48f88923445a520932ad00a33e305f4dcd0e4be586875071acaf466eb9369809n/a Heodo
2022-01-17F2177.xlsmxlsm 3d66d8d329a9dcf8b3c17ab6bb4bd85050df809a3119185e0aa76449d0ea08dfVirustotal results 17.74% Heodo
2022-01-176846806734005.xlsmxlsm 097c9b7fbc89bb7d52061a8795dfae399768a8f69c3c5443f89b8c0bd896bc94n/a Heodo
2022-01-17700699-82.xlsmxlsm f4e94422d4abcb48081b73cc2b519d3e319de291217c686742466efa17e228a0n/a Heodo
2022-01-17417297847-40274407.xlsmxlsm 5fafdd6417f37d7346c346ba7211283a06579e8a1c740233e677ac0e059e2b26n/a Heodo
2022-01-17BVFLG-62639392.xlsmxlsm b9069642cbcfa12bdada8b8fe12637656678345deef366760d78e131c7d0209dn/a Heodo
2022-01-1797849_89.xlsmxlsm aa9cc645887757e88b125130668a09e5b1748efa5edab52b880f9fdac5b54992n/a Heodo
2022-01-179800KUPQEQFEWG-4909277.xlsmxlsm 083174483358eace0a12418b4f0e95861d119ff01724abf83c8c4be9e5b82dcbVirustotal results 17.74% Heodo
2022-01-1722389_5.xlsmxlsm 7f952bd5cadd4ecc1988f7cf025ea5019beccb91f9d6a2752a89b4e604dbdf61Virustotal results 18.64% Heodo
2022-01-178898_95.xlsmxlsm a0a2ef392e27bd52abf0d328817d23ace9d30d431274a4586b3e1d86d5a1dba4n/a Heodo
2022-01-17uzvwxza-6978.xlsmxlsm 98aadc5c7dc3374fe504018399fc36a25c3ba7580322558d75a47c791d3d057fn/aHeodo
2022-01-17zunm809626435.xlsmxlsm dd4ab089221411ab6d041287ac5e96ce2ee0e288f05d99b5b90c16ba6d361681n/a Heodo