URLhaus Database

You are currently viewing the URLhaus database entry for https://testmp.dune.ru/wp-content/3347246-493/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1984149
URL: https://testmp.dune.ru/wp-content/3347246-493/?i=1
URL Status:Offline
Host: testmp.dune.ru
Date added:2022-01-17 17:39:05 UTC
Last online:2022-02-16 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-17 17:40:15 UTC to abuse{at}rt[dot]ru)
Takedown time:29 days, 23 hours, 22 minutes Bad (down since 2022-02-16 17:02:31 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-18myubw_34923779.xlsmxlsm e95a1d9f8651d516e59ddffadc5fd94a499b888077d6cc60ee5cc1b95c1f91e7Virustotal results 29.51% Heodo
2022-01-1850859437-41.xlsmxlsm 08ed773eaf043bb76b2576c9376b8715da6d2677f07277f709e74d4844343b7cn/a Heodo
2022-01-18366-230652.xlsmxlsm c837ba3be459d30d75ba53677884651f8ea4be085bfc4fd3bd3d87a85c4f2136n/a Heodo
2022-01-18G-81250131.xlsmxlsm 8a1f1920da77f2aa02e0d38a92cc3f9901781484353db80e8940a750d673f023n/a Heodo
2022-01-18zn_01.xlsmxlsm c376ffe4c231464c947bc77a323936d8eb64d85bcd1ddcd33bcc161dae53ef15n/a Heodo
2022-01-1874442750-41985.xlsmxlsm 64d41354ecd7f297389d824c38b8b00241322769011feb0c864269145fd8f174n/a Heodo
2022-01-183395242711663079.xlsmxlsm 5548e14a9b8742e7772ebe754d1e7c8bd00039714138ddb87d4fe2a8e92dd212n/a Heodo
2022-01-1802373-06533316.xlsmxlsm 1d95f9d613b01b2dcf2ff10254cf77e3210a07f1a209855de18043c161520191n/a Heodo
2022-01-18VD94529.xlsmxlsm ccbc039cf33ad86b9287d5ddeb42977c7b30bdf9e8a728478f7be2f0231c9310n/a Heodo
2022-01-18LKOL07784.xlsmxlsm 42671e33a5cd09da48d20b7a12e9d8c6b5c3e8e397deffd7d721f10e3c26c410n/a Heodo
2022-01-18ZRPO_6112596.xlsmxlsm 0228ceafa8f9fb29813b9462d9aee85f346c43440aabab248ee3a28283eb4f6fn/a Heodo
2022-01-1827648172HNT_660.xlsmxlsm 58a1033b4773f07ae0f7257590bf372fde51e9bc60298c483a5bf53a93210433n/a Heodo
2022-01-18J_8906348.xlsmxlsm 976872f868b49d98d5e487b42d9bce61f8b05d610fb794ccacbe1ca4274d71cdn/a Heodo
2022-01-18JWZ_912.xlsmxlsm 05e2970a2d23748d20962e6a506d75a8649a4f5c2b7a0dc7723c90680659f0c9Virustotal results 23.81% Heodo
2022-01-1801001_09.xlsmxlsm 954cce122bbc5f2db9b047be265ecb1c8dbbe04b37eaf5b2f738423610df2d4an/a Heodo
2022-01-18423108_5815518.xlsmxlsm 72c3f7215a023270169a1f1a078c7df9714bdb4ab297fe3bfde6e13fbcb08c68n/a Heodo
2022-01-18699114052043.xlsmxlsm b977c5112c9836972623051077502437f1a49a9b8c0ae004c54d0a5685f5b974Virustotal results 25.40% Heodo
2022-01-1851711ZCHCQNU635.xlsmxlsm 7a36780755f25695430762b1ae5759a6b789c298db856370cd0b6fd0f857f835Virustotal results 23.81% Heodo
2022-01-18856_80.xlsmxlsm e961e46fe0000505f4534e036a9d1d2a59823cf644438a2733ab659e9c22988bVirustotal results 25.81% Heodo
2022-01-18qIGMxs_835424.xlsmxlsm 5b40663cd5694685107f64ce59209f23d87706238f5b564227a288fdf40749f6Virustotal results 22.22% Heodo
2022-01-18ZJJJ1729.xlsmxlsm 875b1c9e36a5cf567317565b0b54324da0aac7ca5c69f0c688853731da4082feVirustotal results 25.40% Heodo
2022-01-18XfB_514.xlsmxlsm 2fed78e7159614ab93c099805eda683afcb3a8a0efcb75d260f19202886700e3Virustotal results 23.81% Heodo
2022-01-17NNUOG_988669.xlsmxlsm 053bb9b9096198d542ba99d4aa0148e9af3797c17d2b874f406bf9d35749d809n/a Heodo
2022-01-17796_42168.xlsmxlsm 3205e9241e6f23942fd5b8ff4babdf561cd0022a6d42a800075046bb9e627eb8Virustotal results 23.81% Heodo
2022-01-178482106_8826.xlsmxlsm b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83n/a Heodo
2022-01-170422-904639.xlsmxlsm 47c80c975818ab9bd09449d2130bcfb94eeab3b0aaaa784f5c2b56cc3d32c796Virustotal results 25.40% Heodo
2022-01-1718165565-24.xlsmxlsm f4bb1e4f32c5444db3de6d023a3e27ecd0b948e8b13b1d54d7c725ff63dbd7daVirustotal results 22.22% Heodo
2022-01-17ijxdl_28287452.xlsmxlsm 1227b6464953ca3a4307804a94c248736f40446a42121d3e0ceb52fc63629f8an/a Heodo
2022-01-170099341534474.xlsmxlsm d184b3138413ca1b9e64edc98add0851bdeec2158f3a247532593deb9cbfc808Virustotal results 29.51% Heodo
2022-01-17TGT-38092948.xlsmxlsm ffb2a0ff4ab817787bae6e304ecc561e2e839edd4d20194227a194e6e8bb7b0fn/a Heodo
2022-01-17ru_8607.xlsmxlsm d617e18915823ed787d6a6d05689a574c7286b6e0c1dccfda44870670679f7b5Virustotal results 27.42% Heodo
2022-01-17L_580.xlsmxlsm 9994c128dac8fef0f5b7a94e7379a6eb0f2b3ab28cf8c641f2fecfc11a1100a9Virustotal results 25.81% Heodo
2022-01-176776_880.xlsmxlsm 5951f2e9692548b9221f83d17d2495b963300952539c88355ebb9a7357076104Virustotal results 23.81% Heodo
2022-01-1788506808-894950.xlsmxlsm 50cbe9118f2f994c659e087e8bcc79c4335a7b77644e2e55086ae9ef303abeabn/a Heodo
2022-01-1790541248840.xlsmxlsm 0f2531f6017dbdb8385b0b2243e836b999b88b204074a6d3fb2a59a92e7c9791Virustotal results 23.81% Heodo
2022-01-1735-72692.xlsmxlsm 21c572c1a346c877990cb9682c8b0f8c5389f2df679b028a32b9c1e23b0b8ec3n/a Heodo
2022-01-1743787442870.xlsmxlsm 80870e6a87bfa6bb83d985c448977800bfb8c2746ddd9d19588d43ac10365950n/a Heodo
2022-01-17684391685479.xlsmxlsm 8950d1ad9e167268737a0496f61a0ce8e1243b09f5f6a5fe06ee04f7b5b89e1dn/a Heodo
2022-01-174442227-11.xlsmxlsm bac5bcbe06ad5a143b2d435de9c1e2074ba318eeaccec3c1e31ca60c1bd75463n/a Heodo
2022-01-17FYEVF_298449.xlsmxlsm 9200eedfb05a8401ce051aa398cf19931387d047aba7b49c746fd316297ab5b7n/a Heodo
2022-01-1761706-269.xlsmxlsm 83af043165c31e1dc1a2f84ab1b7a3793e7885f670fd1b3e5fd6da44ef25c4d0Virustotal results 23.73% Heodo
2022-01-1782807126603648.xlsmxlsm 562ddc0012e73ed85326fa4e511d9d25b03fd9d6767e8dcc1b84df292dfff604n/a Heodo
2022-01-170204575_4467692.xlsmxlsm 6bee685b8b324236eb8b115a9e45415d17156584fd6a5766b216655909a50f02n/a Heodo
2022-01-17876GBLTKC_847122.xlsmxlsm 16298042b5073b61f8937b60ccb4efc10b28e4e0b2043383d0e07ff7d302ba7dn/a Heodo
2022-01-17Y-6668241.xlsmxlsm 9fd076e3d8214023a2c4dd24dae3611c7d260f41db72dbf5eca2d37dc6cd25efVirustotal results 22.22% Heodo
2022-01-1774435754-606.xlsmxlsm 88d3af486e197b891b1a5dec3356f7655754ce0a21bd57cbc874a066b73ee78bn/a Heodo
2022-01-1766849290-4477.xlsmxlsm c2e540d9d68762dd0d6b0e5fb6b71d8f01ed205e4b041a36edf232000bbd7093n/a Heodo
2022-01-17304499513-112835.xlsmxlsm 7c3c2188b9cc8f4f771664509a37bb3c4cf568743a9e887095bc598b96d72c33Virustotal results 22.22% Heodo