URLhaus Database

You are currently viewing the URLhaus database entry for http://9b-p.work/itdb/70OHUJJSFAHR29/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:1987614
URL: http://9b-p.work/itdb/70OHUJJSFAHR29/?i=1
URL Status:Offline
Host: 9b-p.work
Date added:2022-01-18 22:29:06 UTC
Last online:2022-02-02 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-18 22:30:10 UTC to abuse{at}gmo[dot]jp)
Takedown time:14 days, 13 hours, 44 minutes Bad (down since 2022-02-02 12:14:27 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-19zhgxvgf_44689.xlsmxlsm d08eb16b9f222bfc43f34e7e0efddd2370f747627d6869c18403d9b4b2bf6480n/a Heodo
2022-01-191014080683.xlsmxlsm 619c3ee3590e414b2de3333ff07b4cb2df3c76fc7512468d4a6499833db70078Virustotal results 23.81% Heodo
2022-01-19KQTpTq-42854.xlsmxlsm 892cb5000c5657175c29ea88c181fd1c0ebe8ebce03702df7b7340973c0f52b6n/a Heodo
2022-01-191069DOQPUWFKB_81331541.xlsmxlsm 24466c9b7124aec9a583ebd09b6df592c6a2eba41701a9f78a6ed1142e708614Virustotal results 28.57% Heodo
2022-01-1928085771_412509.xlsmxlsm dd2013ad0148de7b9a7877b7b27f3372c04615fb214c98f8a96d3d5dc80b03f5Virustotal results 30.65% Heodo
2022-01-19498168123-82.xlsmxlsm e612d546205aa859563388f97efd28b24ac64d633c059f4dc746bff6729d1647Virustotal results 25.40% Heodo
2022-01-1992-5.xlsmxlsm 1cfe5e523eb76253a7b3270d91f99f4998ab8ad60ec974444451ef69632a0d29Virustotal results 29.03% Heodo
2022-01-19549425-3306981.xlsmxlsm c8b489b858ea1f5536525a2b538ee8d955f10b8f43b86e4eb06894d5c48e885fVirustotal results 28.57% Heodo
2022-01-19927173446-251.xlsmxlsm 05aeb3fe4bd3f690ebe97d33014d66f3adc9e4a7517507d6df3be40dcbea26d4n/a Heodo
2022-01-1950597_6.xlsmxlsm 17fec23004233b510f24a66fbfbff83304bf565e4138fa85b44c7b80d9dfcbafVirustotal results 26.98% Heodo
2022-01-196815CDRBJACE-27.xlsmxlsm 2145d6f70e0006dd36ea7cf5aebfa8ced1aa682c2187bb301c9e4142ac1acba4Virustotal results 25.81% Heodo
2022-01-191713_35.xlsmxlsm 061f1cbf244c489c29d77924140bd6d380d4d09c0b1019aa2bd30751a08ed12dVirustotal results 23.81% Heodo
2022-01-19ierPtK-262925.xlsmxlsm d13c581258a7b7cea4c550025cf6e9a52d509d4759d34753a8386e339153ef11n/a Heodo
2022-01-1931790-28.xlsmxlsm 84edb0a7a964669aefad50dd27f6a69ab2f4fc6cc70c1f10288a87104775a801Virustotal results 26.98% Heodo
2022-01-1974176382_4708166.xlsmxlsm 26aa470c4f697dd7102f845f4a9588bdd6f76982a3f269646889b90ce6cbc706n/a Heodo
2022-01-198467660-83945376.xlsmxlsm e63a766205f2e9835456e0fc42e94d2509323589fb5b8be7f3727c3f1c2049b2Virustotal results 25.40% Heodo
2022-01-19821_74051.xlsmxlsm 7205ca1889a2890fea1ecce30b118b2050b3583c129580e91cf0429c502d7053Virustotal results 31.67% Heodo
2022-01-198694820806451.xlsmxlsm 8287032d6a1dce441f4a3a64690f9bde0dd5f87453e06758ac9a4c28810608dfVirustotal results 26.98% Heodo
2022-01-1980390009392.xlsmxlsm a52dfa15b66d2ae29ccbc1bb6712cf0654c2c752ac5a63d4eb162d5dac5a731bn/a Heodo
2022-01-1926466090870.xlsmxlsm 61951055cc0d0c6d0cb0676bf6d838590c069ade35a51f512216b4b066cc8bb4Virustotal results 30.16% Heodo
2022-01-19TTFRC_54058545.xlsmxlsm 2edd33f22f1cdfefd80fb2f74cf638dfac623d1f8bad012d0893149332c739f9Virustotal results 26.98% Heodo
2022-01-19BB_15361.xlsmxlsm de02ded5db971410ad7eea0fd4d54fdc32d3dc91a0c1cdcb4d5186cac18ce672Virustotal results 26.98% Heodo
2022-01-19NUY_0356.xlsmxlsm 0e93f184feed7051b8f692e2ee6c4c6f44faa941e4efe0b110ac8fb1047af057n/a Heodo
2022-01-192111735_03.xlsmxlsm 66671730c5926c7cdb67988548c731b379e7437dba331f236f2209d92ed06da6Virustotal results 28.57% Heodo
2022-01-19968032.xlsmxlsm 9844ba0b5c96276df5d7c5f8857d3aeec368f716b39fa9f6be3e02d32aacce76Virustotal results 25.40% Heodo
2022-01-19V_950.xlsmxlsm 5c57c1974bf29931f379b6b95707c210126c11efbcba4755aab7345074fbfbc5n/a Heodo
2022-01-19lqa_020186.xlsmxlsm 8f6f98d111cd75bafd21eec27286c71b2fccc06a18a7cdc006f726c9632b6661Virustotal results 27.42% Heodo
2022-01-19488681576.xlsmxlsm 6611e1be49fc1e4cc8c8e6795521596826e498930f902ddd997e90a7edd9ed99Virustotal results 31.67% Heodo
2022-01-19978124WGGS_17944159.xlsmxlsm 539bd5697617a77934404cfa22605577a8d2ee6aaf4f0d6b6ae03ba4b8022822Virustotal results 28.57% Heodo
2022-01-192074536_042528689.xlsmxlsm 04cbc0b177c15fce9d0ab4d483fae95e6eee3979d6ef931066c569b1748c3908Virustotal results 24.19% Heodo
2022-01-19IZ-1950328.xlsmxlsm 8e5705eed8e4f0f3c6cc77c791c76a7e4c2e68ef45e51439390053d2bed05dban/a Heodo
2022-01-190087796_1930.xlsmxlsm 2b357a6854a4e084dca442a6b7434aead0bccd70a18a8c09c7c93d6373243dafn/a Heodo
2022-01-195614804_132158.xlsmxlsm c76ccf1ffa0548b6ab8e79c37e2baae3534d3c264b7f6f9b28592767f3d244dan/a Heodo
2022-01-19873459915912.xlsmxlsm f402293949516548cf2d981894ff8b70d867c113c15c0c5cae972a0139ffde08n/a Heodo
2022-01-19630480EPBNXVFTE_9374038.xlsmxlsm 1f0a8991f81a6908a431cb2033fd21eeca4f120554a142a3a045f4ebef76fadcn/a Heodo
2022-01-19545250_4376344.xlsmxlsm 2587683a6e78c3cba6367464cacadd406b444b82634ca5761030626203f8760en/a Heodo
2022-01-1993724750.xlsmxlsm 4997c0dbd466c90f4ff63219ea6ae5ddfefdbbe1248cfb0fc6f715278d9af814n/a Heodo
2022-01-19NDJ46837.xlsmxlsm 86126169aa0ea824a141217cdfb2b6796f7c513fe9e21559cfd3ee05f9e32e28Virustotal results 26.98% Heodo
2022-01-1919194-2138999.xlsmxlsm 34fbb165d1df32c51b45c90739709ffd44a7b582b0d0b508605d698a5e8ce52aVirustotal results 23.81% Heodo
2022-01-19118_42.xlsmxlsm 5da43c136fb894a17d4c571672c59311f75e18e0dd188120f4b2e8b70683529fn/a Heodo
2022-01-19cKJLH-96.xlsmxlsm 55767f8ba96adb8e95051d3fb462e5530d56032f652d025cb3dce2ceec0702a4Virustotal results 26.98% Heodo
2022-01-19NCKZU_552146.xlsmxlsm ba442cc18c79b5a35c178a6382c82a719f442eee6bfc7b7fa3805753c6bf1c4dn/a Heodo
2022-01-1960361084630705.xlsmxlsm 14e064f7f62bcfb8f520797593104d69cef2cbb090ac4f36b871ced2daab192bn/a Heodo
2022-01-19KV_6119.xlsmxlsm aca67468ced86d88c980d851092607e06405b3109230404fb7c51c6c916f389bn/a Heodo
2022-01-1915-59117470.xlsmxlsm 6255134490f8a0ff4125546a09427e1f23bcd72f7d59d7b48ff561a84c970a6en/a Heodo
2022-01-19Qwep963.xlsmxlsm b80bcf2ea57e2d87665f00cd07f6df0049170b65b541621ce3ed45a589d20980Virustotal results 22.22% Heodo
2022-01-19193202554_5193.xlsmxlsm baacda28b1d3abb14f12dee320b6f11dad6a5c4eb967c8f4fc46ef954da8b1bcn/a Heodo
2022-01-194781954_4838.xlsmxlsm 7dcec69349b7f26ac097747c90009ca35cb95110a081b89cea1eec408d722400Virustotal results 22.22% Heodo
2022-01-19MO8122659.xlsmxlsm 553590a6399b86eaf93a718a1c2aaa2be55e8fe6d5896a3b8c44579c5921db6cn/a Heodo
2022-01-194254996_0257288.xlsmxlsm d7bb3e935a6b066a86cf79ee17a9368b1d461a76a92f9478b694f2c0275beaf7Virustotal results 23.81% Heodo
2022-01-196848LVLKNAVE_0568.xlsmxlsm 5d8f3e821b8605a2923c1068cf92de2ac04fe489f65fb33ece709bdc9e4f3c4bVirustotal results 22.22% Heodo
2022-01-19BRRH82139098.xlsmxlsm 8cb5a34b606e75e3f34d9e0f5d6abfe0d4debd70688a0cfc260e234fd47cece2Virustotal results 22.22% Heodo
2022-01-196274-9760.xlsmxlsm 749221496ba73c4871285740396ab6211d3b803b8a39b6c9b37b468ae82cdd6eVirustotal results 22.22% Heodo
2022-01-19R_3246962.xlsmxlsm 443dd2d26f74bfa06fd47b8f66378fa889268f0f6c4ced9fae74d7847811681en/a Heodo
2022-01-193729238-2201965.xlsmxlsm d145d8bd97ef82aed65a01e30b7523f9380bdef7e4af3cbb706c3fe571d2accbVirustotal results 27.42% Heodo
2022-01-1928414_7761858.xlsmxlsm a98ce7c10f03702a9933c42dc4c7e46238f2596d3c49ec5df2c6f595e1f7e313Virustotal results 20.63% Heodo
2022-01-19WST_31520044.xlsmxlsm e645688505083165509fd637e93c86cb2390f1a9a93a38a0cfaa1e1b88f24b68Virustotal results 20.63% Heodo
2022-01-19YJ_684048.xlsmxlsm bf358073ed5741312e901e0fac9cc9af2c7d3f4b3b9f6d1f89f0c02fcaae63f8Virustotal results 22.22% Heodo
2022-01-1912874_2.xlsmxlsm 6b326bd8775334752e05a398a534955fd2ae44993cd2d6c4f1f85e3ee38503ceVirustotal results 28.33% Heodo
2022-01-191099_0743.xlsmxlsm 96bc549312ea7fde7f0e9897ce14a8f4a7b0f970cce2bf36a9d1be5e2b7bfc3aVirustotal results 23.81% Heodo
2022-01-1966JGABC-6554008.xlsmxlsm b63e4863cf6daee93a61ffb74ae312b6345f3ea4bbbdff04155dd5cedb554cd7Virustotal results 22.22% Heodo
2022-01-19Yali_0127.xlsmxlsm 7fa31dadb117ef22bbce1462447468727b056cff0d6f874582c03d7db2243df0n/a Heodo
2022-01-19cnebaby-88.xlsmxlsm fef7017d59c99fb7ef55f867d66297ace1a66b98f61817b5f42b0b9c4e22a3e0n/a Heodo
2022-01-1921248056645408.xlsmxlsm 17e58485ceea86f7c5a32f35a478b985b7a90573512c8cd051e090e4888e1f20Virustotal results 22.22% Heodo
2022-01-19901864-45.xlsmxlsm 9460b2bb8ba2fb292c897532ce1f2671a383bed1194dd3aef7c2027fd427c09fn/a Heodo
2022-01-1998641238_887815.xlsmxlsm e9d92f683085b6c1e2fca6795a259dfcf39a6537cfd7b6c72ec45cf1889c7d80n/a Heodo
2022-01-1904531262GVRHHB-81.xlsmxlsm e3f5e0fe4b1a91a4511c3621a2d351a6132fe0bf448379a4953829cbc6579641Virustotal results 28.33% Heodo
2022-01-19PX_10.xlsmxlsm 20e1b79f4121f583c67f16137601ae1bc4eaa69562da95c9ff987317b5ca496fVirustotal results 23.81% Heodo
2022-01-1929606760-283.xlsmxlsm 1f513a8a5f8abe29e8c9fda004daca2f4154840fce7c903e05372f0ef8a45903Virustotal results 22.22% Heodo
2022-01-19GZ_8460.xlsmxlsm 3f25b33a654731325f43de1d4580715d04256dbc9a5edadae6cdecf84897d962n/a Heodo
2022-01-19083302-13791302.xlsmxlsm f2136dea41d8f87bda99e7a714825442517cef672c6081c69904bd3ca8b51455Virustotal results 18.18% Heodo
2022-01-195321750VJZBXZP-5899503.xlsmxlsm 007b703040eca65bd22588faeaaf7316df014c55b1e2e4ff505468d1c9c7788cVirustotal results 22.22% Heodo
2022-01-1929534ELBZTMM08560799.xlsmxlsm 18d6d143faa6a760ba0a476fa10612391cb6ea8c22ab604dc7c47fd3f1f04afan/a Heodo
2022-01-194941807.xlsmxlsm 237b2490c0e6d27ef3badff081fa7ba4b7e05a805a3664047eac211affbf612eVirustotal results 24.19% Heodo
2022-01-19YWJN_82.xlsmxlsm aa2a65229b69fd6ac54c602b320e13c8b883087f9f221cbb358cb563443bffe1Virustotal results 28.33% Heodo
2022-01-19iSa_4211.xlsmxlsm 8952c009d68e8b229b37ba6b51f3d7cd9ccbd91536ef4229eb400bf4ce0fd836Virustotal results 24.19% Heodo
2022-01-1994629RBLYG-586.xlsmxlsm 42b3f45dbdebb32d3b00bb80dc8e8f559d772005a06a6e08c256f25d088a6e46n/a Heodo
2022-01-191584035_7067.xlsmxlsm 05b8d6322852c3054d0dd30228d150e394160d4f1a8bf281c39953a012e691c3Virustotal results 20.97% Heodo
2022-01-19iqeam_2940.xlsmxlsm df2769638bd691851f529a5320a54d92d23f6d702c88d31a37ebbce68491a635Virustotal results 24.19% Heodo
2022-01-19FP-7830.xlsmxlsm f5577c81556fa38d796518163c5c798b23415437423aa249a0cc9c20a65f3349Virustotal results 22.22% Heodo
2022-01-19YFTHU_84386.xlsmxlsm 1fa60639ea962861142d2efeb77fd77c280fb3442d31d2db07918d54e6b5336cVirustotal results 28.33% Heodo
2022-01-19419799_113047.xlsmxlsm 79cfdb919315844deefdaa5f9ad364a026f3a795b473171647cd0176a4333f01n/a Heodo
2022-01-1981686_181141.xlsmxlsm 894a023ed44d99d8947ce2e484d9febd346dbfb7ea54d7f2506e257f641f292an/a Heodo
2022-01-19953GKNFYJMNFY_035975120.xlsmxlsm ceaa2e4a3e4521b680dbbb7645140a69929ac5ecb0d9342bd88ffe34e33bfcb6n/a Heodo
2022-01-1861385343.xlsmxlsm b9b41dd1ed9fc80d53af9daa78ea014acbcd6780ef0d352cd32fd50a04ca0508n/a Heodo
2022-01-1890708-22.xlsmxlsm 6001966534b597395906f4462e7dcc3068171124579b7265e5e7be7e05e5c427Virustotal results 25.00% Heodo
2022-01-1815448074UTAL_29.xlsmxlsm 256a56de41a6a0e96dd9b8c581075fc900b450f2f872e4403f332c509c328ca6n/a Heodo
2022-01-18825258271.xlsmxlsm 96cbfe690490f4cfdbfdf395626f5f393deb559f0c078aecfa9facc6fdac9d54n/a Heodo
2022-01-18nMT-87313226.xlsmxlsm 42fce6fdb4460cd9ed23a7e05582c8344c254ca42bf5a384ec854274e372b0ddn/a Heodo
2022-01-18FIHB_89.xlsmxlsm e866853bf48a43badc9eab45feb4d681cb79c02c7cc352ac594964d5f4b2798dVirustotal results 19.35% Heodo
2022-01-18394_63002.xlsmxlsm c96f85662e9b91ef48116048a2b379783a961a851b6281497f1e93de0721ad15Virustotal results 25.42% Heodo