URLhaus Database

You are currently viewing the URLhaus database entry for http://aizz.co.uk/wp-snapshots/63439_1492397/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1988694
URL: http://aizz.co.uk/wp-snapshots/63439_1492397/?i=1
URL Status:Offline
Host: aizz.co.uk
Date added:2022-01-19 07:23:04 UTC
Last online:2022-01-19 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-19 07:24:08 UTC to abuse{at}iv[dot]lt)
Takedown time:6 hours, 9 minutes Good (down since 2022-01-19 13:33:15 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-19FNGRZ_804.xlsmxlsm 12096d0db788662f717f1757f957629e692fc998bb1f86844980fc0b313f17aen/aHeodo
2022-01-19092_20.xlsmxlsm 0416c35114bb1ae97acd2eab3d5c08ffd4372ed62cc3290c0249a8d61b3e3320n/a Heodo
2022-01-1937152_9.xlsmxlsm 34fbb165d1df32c51b45c90739709ffd44a7b582b0d0b508605d698a5e8ce52aVirustotal results 23.81% Heodo
2022-01-19G1869202.xlsmxlsm 1b15e53fc38a5d484d15106696ba0bcc1c5f5e47c32e08cb67bd5ff770676744Virustotal results 25.40% Heodo
2022-01-191298_162231.xlsmxlsm 55767f8ba96adb8e95051d3fb462e5530d56032f652d025cb3dce2ceec0702a4Virustotal results 26.98% Heodo
2022-01-1953_86791.xlsmxlsm ba442cc18c79b5a35c178a6382c82a719f442eee6bfc7b7fa3805753c6bf1c4dn/a Heodo
2022-01-19829988_71009688.xlsmxlsm 7afa40748752731bca088a1f2c3aa7caf190c1a28f97be4c282dd0ae827313dbVirustotal results 26.98% Heodo
2022-01-193082134.xlsmxlsm 50a3075e32c6850b72c996cf1f807cacda70be55786d08039ae26b37668fc06cn/a Heodo
2022-01-19687028ICPB-43598095.xlsmxlsm ad0de4164ae26ef5515f4fb320ad1316776b2eec28e447c51187cf5c58c1b8eaVirustotal results 26.23% Heodo
2022-01-19GE_95895.xlsmxlsm b80bcf2ea57e2d87665f00cd07f6df0049170b65b541621ce3ed45a589d20980Virustotal results 22.22% Heodo
2022-01-19MKN_6047381.xlsmxlsm acc9c41ba96ed8a91406bebc1f1d41b88c26bf7e1446c8fc4301ee0b840e1759n/a Heodo
2022-01-1984261-1736393.xlsmxlsm 7dcec69349b7f26ac097747c90009ca35cb95110a081b89cea1eec408d722400Virustotal results 22.22% Heodo
2022-01-194135938HSRBV585.xlsmxlsm a675b7d974851232b65d25e7fcd87697f9cbbd9a6bac4d21b14a1e249015d321n/a Heodo
2022-01-19WzWG-48.xlsmxlsm 607f4df6b7ab8a7d31bb402433e135024645cbc3df474b2d4d4144e093a654d3n/aHeodo
2022-01-19saesxq-176.xlsmxlsm ce28299f1925f6f4a88ec933927db0810d93239862de85c5cc6bb826e1c8d98an/a Heodo
2022-01-193257QGFSY_63078.xlsmxlsm d81bde62116ee9716708cf99c076a60bc670f4bc811ae34e09f61455f32d50f8Virustotal results 23.81% Heodo
2022-01-19VJGAF_45124893.xlsmxlsm fbc47a25d026a1d3aabf04c65781142ef8d17ce0071e44f5925e33a2e3f715den/a Heodo
2022-01-193419_86457.xlsmxlsm 749221496ba73c4871285740396ab6211d3b803b8a39b6c9b37b468ae82cdd6eVirustotal results 22.22% Heodo
2022-01-19386-26.xlsmxlsm e48f46cd60cb0b369d14352daf83f4a07f78332ff849bf8acf3729fcfd19cd47n/a Heodo
2022-01-192015085_848.xlsmxlsm 919a61a248e3141832d7735e96bc3d49871726bce77e23f72b09f198480bbbb3n/a Heodo
2022-01-19KL_4042345.xlsmxlsm d145d8bd97ef82aed65a01e30b7523f9380bdef7e4af3cbb706c3fe571d2accbVirustotal results 27.42% Heodo
2022-01-19dz_1920.xlsmxlsm a98ce7c10f03702a9933c42dc4c7e46238f2596d3c49ec5df2c6f595e1f7e313Virustotal results 20.63% Heodo
2022-01-19962551356.xlsmxlsm 370dfa56dc03a14617fc925da1015c5d79964388df05a888b13c5755ff4b7585Virustotal results 22.58% Heodo