URLhaus Database

You are currently viewing the URLhaus database entry for https://benessere-consapevole.it/wp-admin/NPB1898801/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1988958
URL: https://benessere-consapevole.it/wp-admin/NPB1898801/?i=1
URL Status:Offline
Host: benessere-consapevole.it
Date added:2022-01-19 09:03:04 UTC
Last online:2022-02-11 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-19 09:04:11 UTC to abuse{at}ovh[dot]net)
Takedown time:22 days, 22 hours, 15 minutes Bad (down since 2022-02-11 07:19:23 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-21IXQM_20679.xlsmxlsm 50a3075e32c6850b72c996cf1f807cacda70be55786d08039ae26b37668fc06cVirustotal results 22.22% Heodo
2022-01-199492675XVBSXF36.xlsmxlsm aca67468ced86d88c980d851092607e06405b3109230404fb7c51c6c916f389bn/a Heodo
2022-01-19ey_9256.xlsmxlsm 6255134490f8a0ff4125546a09427e1f23bcd72f7d59d7b48ff561a84c970a6en/a Heodo
2022-01-19C-07.xlsmxlsm 0bd208787cd1e8f9a0fa2c96534f1785b655ad56534abac7b4ce3d1f2f2f062cn/a Heodo
2022-01-1987_43.xlsmxlsm acc9c41ba96ed8a91406bebc1f1d41b88c26bf7e1446c8fc4301ee0b840e1759Virustotal results 25.40% Heodo
2022-01-19344282620.xlsmxlsm ce5381f4301ed8353f311fcd500ad861cb501c8eb8f71e4b9461f3dd7bace7c2Virustotal results 21.67% Heodo
2022-01-19SKNDA5451.xlsmxlsm 553590a6399b86eaf93a718a1c2aaa2be55e8fe6d5896a3b8c44579c5921db6cn/a Heodo
2022-01-19BNS_85810633.xlsmxlsm 607f4df6b7ab8a7d31bb402433e135024645cbc3df474b2d4d4144e093a654d3Virustotal results 24.59%Heodo
2022-01-19SLBQG_12905.xlsmxlsm d7bb3e935a6b066a86cf79ee17a9368b1d461a76a92f9478b694f2c0275beaf7n/a Heodo
2022-01-19NDLE1419555.xlsmxlsm ff21e0d799e7757351192a77594d12cce77faf6ebc669816ad4bc37ded38d952Virustotal results 25.00% Heodo