URLhaus Database

You are currently viewing the URLhaus database entry for https://www.moharrampartners.com/requestion/qhckdu_941/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1984653
URL: https://www.moharrampartners.com/requestion/qhckdu_941/?i=1
URL Status:Offline
Host: www.moharrampartners.com
Date added:2022-01-17 21:47:05 UTC
Last online:2022-01-19 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-17 21:48:08 UTC to abuse{at}fastly[dot]com)
Takedown time:1 day, 7 hours, 43 minutes Poor (down since 2022-01-19 05:31:08 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-18YJDD1.xlsmxlsm e95a1d9f8651d516e59ddffadc5fd94a499b888077d6cc60ee5cc1b95c1f91e7Virustotal results 29.51% Heodo
2022-01-1886485-902.xlsmxlsm c376ffe4c231464c947bc77a323936d8eb64d85bcd1ddcd33bcc161dae53ef15Virustotal results 30.00% Heodo
2022-01-18bvbrh55.xlsmxlsm ccbc039cf33ad86b9287d5ddeb42977c7b30bdf9e8a728478f7be2f0231c9310Virustotal results 25.81% Heodo
2022-01-18YER155182.xlsmxlsm 58a1033b4773f07ae0f7257590bf372fde51e9bc60298c483a5bf53a93210433n/a Heodo
2022-01-1833587339GCPHF16837721.xlsmxlsm 72c3f7215a023270169a1f1a078c7df9714bdb4ab297fe3bfde6e13fbcb08c68Virustotal results 22.58% Heodo
2022-01-18695438963981.xlsmxlsm 5b40663cd5694685107f64ce59209f23d87706238f5b564227a288fdf40749f6Virustotal results 25.40% Heodo
2022-01-18831648066_57.xlsmxlsm 6f547f1af075434c1f8fd54fb78b5a4f15d49e4a38e86d6e129d88c3e83ea230Virustotal results 29.03% Heodo
2022-01-17P_75510.xlsmxlsm f4bb1e4f32c5444db3de6d023a3e27ecd0b948e8b13b1d54d7c725ff63dbd7daVirustotal results 22.22% Heodo
2022-01-17TK_2.xlsmxlsm 2350f0180119d36193a0ff0d35370865e389ebf2b910fbfa8419c7a2258a9356n/a Heodo