URLhaus Database

You are currently viewing the URLhaus database entry for http://www.fitrahhanniah.sch.id/p2db.fitrahhanniah.sch.id/86FGTCRZRHBD-753227/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1984346
URL: http://www.fitrahhanniah.sch.id/p2db.fitrahhanniah.sch.id/86FGTCRZRHBD-753227/?i=1
URL Status:Offline
Host: www.fitrahhanniah.sch.id
Date added:2022-01-17 19:30:06 UTC
Last online:2022-01-19 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-17 19:31:09 UTC to abuse{at}jalanet[dot]co[dot]id)
Takedown time:1 day, 9 hours, 16 minutes Poor (down since 2022-01-19 04:47:18 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-1851518460219991044.xlsmxlsm e961e46fe0000505f4534e036a9d1d2a59823cf644438a2733ab659e9c22988bn/a Heodo
2022-01-18GPA96.xlsmxlsm 5b40663cd5694685107f64ce59209f23d87706238f5b564227a288fdf40749f6n/a Heodo
2022-01-18BSW-0517.xlsmxlsm 64b618a8cd97c14013cdb8352e6959b5f4097adfa9986a19e4a916141cccc9adn/a Heodo
2022-01-18utw-678041.xlsmxlsm 2fed78e7159614ab93c099805eda683afcb3a8a0efcb75d260f19202886700e3Virustotal results 23.81% Heodo
2022-01-1801517GYGQWDJMK_70.xlsmxlsm 053bb9b9096198d542ba99d4aa0148e9af3797c17d2b874f406bf9d35749d809Virustotal results 25.40% Heodo
2022-01-17RQGNV_8205.xlsmxlsm 6f547f1af075434c1f8fd54fb78b5a4f15d49e4a38e86d6e129d88c3e83ea230Virustotal results 29.03% Heodo
2022-01-17LQ-693654.xlsmxlsm 3205e9241e6f23942fd5b8ff4babdf561cd0022a6d42a800075046bb9e627eb8Virustotal results 25.40% Heodo
2022-01-17089_7288156.xlsmxlsm b74ebda344b21397a7dda793d725fc98a04efae5d4cc51c8c8b6f9c253bdcb83Virustotal results 22.95% Heodo
2022-01-17W_35259288.xlsmxlsm 47c80c975818ab9bd09449d2130bcfb94eeab3b0aaaa784f5c2b56cc3d32c796Virustotal results 25.40% Heodo
2022-01-17AAP380469.xlsmxlsm f4bb1e4f32c5444db3de6d023a3e27ecd0b948e8b13b1d54d7c725ff63dbd7daVirustotal results 22.22% Heodo
2022-01-17queiqmc_6563681.xlsmxlsm 1227b6464953ca3a4307804a94c248736f40446a42121d3e0ceb52fc63629f8aVirustotal results 22.22% Heodo
2022-01-17121592IQYDXNQWOG_23594.xlsmxlsm ffb2a0ff4ab817787bae6e304ecc561e2e839edd4d20194227a194e6e8bb7b0fVirustotal results 22.58% Heodo
2022-01-17gvUQ-70.xlsmxlsm 2350f0180119d36193a0ff0d35370865e389ebf2b910fbfa8419c7a2258a9356Virustotal results 23.81% Heodo
2022-01-179906528_6393387.xlsmxlsm d617e18915823ed787d6a6d05689a574c7286b6e0c1dccfda44870670679f7b5Virustotal results 27.42% Heodo
2022-01-17GJPK2515.xlsmxlsm 9994c128dac8fef0f5b7a94e7379a6eb0f2b3ab28cf8c641f2fecfc11a1100a9n/a Heodo
2022-01-17ozftkmj_428418904.xlsmxlsm 5951f2e9692548b9221f83d17d2495b963300952539c88355ebb9a7357076104n/a Heodo
2022-01-17zwuvq_0530770.xlsmxlsm 711c2a23d09932cc67f28994fdb13eedf23666eb60c844a1d40c7d52b6ab3f9cn/a Heodo
2022-01-1789470_9116100.xlsmxlsm c62935e0c5ecf2508acb98ce148bdc6e18bd76cca679ec4cf9dde9bed15f1984Virustotal results 23.81% Heodo
2022-01-17mwC_02835.xlsmxlsm e65056c46dd67d975b08e3c95022e40789f0ec764f0375df83d1534b34c14670Virustotal results 23.81% Heodo
2022-01-17pgcqi781462.xlsmxlsm 669a677211cd0365c904dc95014febef3e5b32be3d52e0b4da69ae5f79d67d57n/a Heodo
2022-01-17tZAC_9099930.xlsmxlsm 240eea341736e3d6091948435139358fd0b6b3e508709296bcf0d1a870596a52n/a Heodo
2022-01-17UOH_48097345.xlsmxlsm 066efdf5222121043efd895d61f397cec3089491b81f5501f9db9d517e649b98n/a Heodo
2022-01-176104_037.xlsmxlsm b7fc32e00135f65946eecbf56d3c8bd1353d1c09962ee449e8e79bf761df406bn/a Heodo