URLhaus Database

You are currently viewing the URLhaus database entry for https://thewritingmachinecompany.com/Browallia/XXPD952/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1989519
URL: https://thewritingmachinecompany.com/Browallia/XXPD952/?i=1
URL Status:Offline
Host: thewritingmachinecompany.com
Date added:2022-01-19 13:40:05 UTC
Last online:2022-03-16 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-19 13:41:17 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:1 month, 25 days, 11 hours, 31 minutes Bad (down since 2022-03-16 01:12:37 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-16n/aunknown e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855Virustotal results 0.00% 
2022-01-2000360_1293391.xlsmxlsm bf154edb1260fa98f30bb6201ed8abd72a55e51938f300f504e164aea6a40603Virustotal results 28.57% Heodo
2022-01-2083620058_390068324.xlsmxlsm 692e6a1d963c3d86284eb6c906ded29e71fe7b5fdaa6b0170a964f23fb1c4ac8Virustotal results 29.03% Heodo
2022-01-20lI-52060007.xlsmxlsm 3b4c7690fa48369fdc9a684e697c5ba23a23d5e89955484364a79fc0e74c99deVirustotal results 30.16% Heodo
2022-01-20C_4.xlsmxlsm 645e264c2f657e1f901918767938090cbb4403348a8eb2a6c4eca245175dbd18Virustotal results 31.75% Heodo
2022-01-20QG45938.xlsmxlsm 92f01f34d0d3d902538fa84268d937ddcbfb4e40234b4a97b1b50a227a002f1aVirustotal results 29.31%Heodo
2022-01-20H_2965613.xlsmxlsm 45ae174e0c5d865a0e1a2f1831df896eb8e6edd60b0505864baa9a2db811a536Virustotal results 26.98% Heodo
2022-01-2067KZLDGFAYYD-39.xlsmxlsm e2d111de041c2bd5003a3be379f8c617e854516169debba317cab4168b92e38eVirustotal results 26.98% Heodo
2022-01-20858_4066.xlsmxlsm 8f1383b4d7504257b4e3da2743e895eead15a36132d6bac13452a546fd20bbdbVirustotal results 28.57% Heodo
2022-01-20270_277771.xlsmxlsm 24466c9b7124aec9a583ebd09b6df592c6a2eba41701a9f78a6ed1142e708614Virustotal results 25.40% Heodo
2022-01-2044540_78812405.xlsmxlsm 05aeb3fe4bd3f690ebe97d33014d66f3adc9e4a7517507d6df3be40dcbea26d4Virustotal results 26.98% Heodo
2022-01-209047_4279.xlsmxlsm 7ae489b418b123b5ca0566783c49e02bfda66276979c79bbd46e3c71a144f850Virustotal results 26.98% Heodo
2022-01-20GDBQ-1973.xlsmxlsm a75d803a646fa5cfa41b0489c6de355e62319450b46d41792b4b5b3cd21a0dc3Virustotal results 29.03% Heodo
2022-01-2042729_48.xlsmxlsm 4bd8c91634e67571e3d3ef12e97ec113895c366559309e1ed0cf9a18b196b787n/a Heodo
2022-01-20jcylk_66836.xlsmxlsm fb18f3109867f5c66552ed2cb8f624bd0d7b882b0c68ede96f53782bde872794n/a Heodo
2022-01-20d_05920.xlsmxlsm 3d11f45dbed68dde6e6af551a506629bd68c240343e060af2666bff02e8368c0n/a Heodo
2022-01-204220187DXQEW_22518.xlsmxlsm de0b33c3c71a43da9e30795f36c6e98ca85e1685853d66977dc5dd8cf228a667Virustotal results 28.57% Heodo
2022-01-20BmgJ-602204609.xlsmxlsm 1b8a7503b95b685e1c29207ac2a9a9d75b188abfc9c492e670eb365377c1ad90n/a Heodo
2022-01-20066403_8118467.xlsmxlsm 40b52631655bde48abffe4d280833b1b6019e1ab64d64762283108f4cbaa0c5fn/a Heodo
2022-01-20LFIV-0576328.xlsmxlsm dfa1de096862a3281db07782e1a8365a37fb07c94cd5b390ea1ba9a0e202d507Virustotal results 28.57% Heodo
2022-01-20AK-481848027.xlsmxlsm 7798bb812270c2c7736281585caab8c2f272c52405a7d2f9cf5da363192e9904Virustotal results 27.42%Heodo
2022-01-20196043872-12.xlsmxlsm 0df825699f788f7c626557258cc6c79c394f663837325ae5fb3977b5ae23a67dn/a Heodo
2022-01-20rPXXSR_812900539.xlsmxlsm a793be1725a52c2dd1d2ba69f6654b8eeac0db5740a175fa7a12b185a8f30223Virustotal results 29.03% Heodo
2022-01-2007537JULARVDRRF-0.xlsmxlsm 66f754fa0c762bb97ca72ff0da7ed505aced3d99925ab65efc7402ff27e56039Virustotal results 28.57% Heodo
2022-01-207699826-856478.xlsmxlsm bcb65e9df3e9dcb986aa80009aafb81881e2be6f99721d924df5688e14ae4ea0Virustotal results 30.16% Heodo
2022-01-20FTHT-66195.xlsmxlsm 46473d491bc661da90163ce5ed77341a80de9595296e65cacc351343a6b278d9n/a Heodo
2022-01-20536_63298249.xlsmxlsm d63cb63141af447b2bac52e24948f5d9b47036a98df5d352877f0dbb90f767dfVirustotal results 33.90% Heodo
2022-01-20tcpon_820304.xlsmxlsm 37c3cbe89b92c8cee51b59711fd9d0f93edbc1de99811347b51cc46ec5eb74ccn/a Heodo
2022-01-20mgjjbbd-42.xlsmxlsm 4d964042a788ed7c18e08a244a124e2b5842f454ca619abb8c475ba47c601c78Virustotal results 28.57% Heodo
2022-01-20UXZEJ_330669.xlsmxlsm cc6c720dbe0651cb2b617927ad0a5601915eeb6e7b07800617f78a9f0e8250f8n/a Heodo
2022-01-20oovaam_6239.xlsmxlsm 6da24dd576c553009fc21904ae8117a7d11c2867b85f41b271af0bba1f3257c0Virustotal results 30.16% Heodo
2022-01-20ur-5.xlsmxlsm e812d0407be6f5f61d6266dd8eb193af17bb71f3cb34231e0758122f624bee44Virustotal results 25.81% Heodo
2022-01-207031879LUKSWA_34791019.xlsmxlsm 8780c110ac6a022d4680f7b4edd073f5f9ad7b44b42449db5932379896010f8an/a Heodo
2022-01-20dele_772568.xlsmxlsm dc538d8c326048d59dfae049619e3364ddc87ae4f9db61eaca4f2294fca2fca7n/a Heodo
2022-01-20865WNICEQH_914.xlsmxlsm 61321c50b38056096bf8ac1bdefddd03bc9ca518baf59da4d4a8199013877146n/a Heodo
2022-01-202327539219.xlsmxlsm bfadf53e88ea78a1e97b9dc7e2176373e6ca626057e8ce059096bebb04f86f18Virustotal results 26.98% Heodo
2022-01-20575916_97738.xlsmxlsm 950477a11af1110ac463d4cd3ffe9770d71810c8e74025df9992e848d9ecb74dn/a Heodo
2022-01-2080987918_38853213.xlsmxlsm a6eb230d9c56b8d5e3326a474853c12bfad716f3907296854143c1b77e479244Virustotal results 26.98% Heodo
2022-01-20PAZEM-498.xlsmxlsm c36c4073bcd870f0eb879b91b0e818e1dedfb43e5a56250408058d0fc35acca8Virustotal results 26.23% Heodo
2022-01-207904050_47050.xlsmxlsm 50287afb21f8acc7cbe8875a5728905602fe3be8df2f272203fb623634036a58Virustotal results 25.81% Heodo
2022-01-19R_72376.xlsmxlsm dd38d6ee9ae7e8e31483e7ea1196e3e7c0826781f091dcadbf0d038087249506n/a Heodo
2022-01-19170371QRBXJ_585995008.xlsmxlsm 6bf0a6ea26787e80034772f3e46ac98d7ce874d99213dbea144e9f2cf4892ef8n/a Heodo
2022-01-1971423563_634137991.xlsmxlsm 6e0f1798503f0e8463ff4f2d2d2e8c72ff56d1afecc1308fa4ace80eb24cf9f3n/a Heodo
2022-01-19hp_049.xlsmxlsm dfffd5bedb16c420de36d981d628089780ae2a7a322710bd499212105eb448b1Virustotal results 25.81% Heodo
2022-01-197801_886.xlsmxlsm c3c36da69de48f38c2d39dc8a6675c4d397b745e01d5b8e9f314cf465fe849d8n/a Heodo
2022-01-191281107_6631779.xlsmxlsm e6fd30ae19d5263d800bdfde3088608f1f5c1a8ce3cd0cf4eea56c802da3a9f8n/a Heodo
2022-01-19OZPL-30035.xlsmxlsm d08eb16b9f222bfc43f34e7e0efddd2370f747627d6869c18403d9b4b2bf6480n/a Heodo
2022-01-19473FXALVNW_4343.xlsmxlsm 619c3ee3590e414b2de3333ff07b4cb2df3c76fc7512468d4a6499833db70078Virustotal results 23.81% Heodo
2022-01-194231645183.xlsmxlsm 892cb5000c5657175c29ea88c181fd1c0ebe8ebce03702df7b7340973c0f52b6n/a Heodo
2022-01-1994643UYQDJERND_6929763.xlsmxlsm d3f4d5fc34a444c8ae251c04b1e12ad1371e72f9f7f5682c02e0339eb3fb6ba8Virustotal results 26.98% Heodo
2022-01-19UNLC_16487.xlsmxlsm dd2013ad0148de7b9a7877b7b27f3372c04615fb214c98f8a96d3d5dc80b03f5n/a Heodo
2022-01-1933744_349.xlsmxlsm b888459d1357d67943ce5a794338519d4a543b73cf7a58339dba66c242a5973fn/a Heodo
2022-01-19o_59.xlsmxlsm 9761bc5de47973837988a9be7b5128db72f1817d53c224709b5b2c63848e47ddVirustotal results 25.40% Heodo
2022-01-1977430360GBNXKE_5447681.xlsmxlsm c8b489b858ea1f5536525a2b538ee8d955f10b8f43b86e4eb06894d5c48e885fn/a Heodo
2022-01-19rqvk_867.xlsmxlsm 39d40e8b39b2ded1846a5ac1aa2441a8bc1e11f4edf26d60f60d49862a3435bbVirustotal results 26.98% Heodo
2022-01-19PBVI_3535488.xlsmxlsm 3879470574f426659493e8ba460017b0c7e6d26446a49c161486027559030032Virustotal results 31.15% Heodo
2022-01-19L_177751.xlsmxlsm 17fec23004233b510f24a66fbfbff83304bf565e4138fa85b44c7b80d9dfcbafVirustotal results 26.98% Heodo
2022-01-1953880199GPYMSUVCD9978.xlsmxlsm bc7476f9d9148b939127a2024a1b341cec82fb398bf06667bdd3da4b1acc8bd2n/a Heodo
2022-01-19lldt_047.xlsmxlsm 57933fa64877cd7abbc18abd28ab60ac340b94c4f00445e8b98851108d6706e1n/a Heodo
2022-01-19ZJ-6.xlsmxlsm d13c581258a7b7cea4c550025cf6e9a52d509d4759d34753a8386e339153ef11n/a Heodo
2022-01-19RHvC-71.xlsmxlsm 84edb0a7a964669aefad50dd27f6a69ab2f4fc6cc70c1f10288a87104775a801n/a Heodo
2022-01-19ljlm_2.xlsmxlsm b58db86f3081864f0c0c9d89384b47eddd6bf313316fe20693600bcdb4b8af79n/a Heodo
2022-01-1911407166705114.xlsmxlsm 4cda0434ce312685fb50ca7a27ea563cca49e9721b3353edae62c0f103228985n/a Heodo
2022-01-197945-9.xlsmxlsm 7205ca1889a2890fea1ecce30b118b2050b3583c129580e91cf0429c502d7053Virustotal results 31.67% Heodo
2022-01-19lkmlyue_737575531.xlsmxlsm 8287032d6a1dce441f4a3a64690f9bde0dd5f87453e06758ac9a4c28810608dfVirustotal results 26.98% Heodo
2022-01-1903TRQZEL_40.xlsmxlsm d217e68146e4a0d5d03dde307b715860fb950fe6d113c134822272e5166f9381n/a Heodo
2022-01-19V_6110.xlsmxlsm 8f2f48985e92a73c9f132d87cc35df6f3183364c36404ce333c25fef793f50caVirustotal results 27.42% Heodo
2022-01-19vrem_00.xlsmxlsm 3c1a977b592b8e43c086b92cff49d48f18bdaa55f8f9ff09fe5eed747cf47321n/a Heodo
2022-01-19D-7348.xlsmxlsm 2edd33f22f1cdfefd80fb2f74cf638dfac623d1f8bad012d0893149332c739f9Virustotal results 26.98% Heodo
2022-01-19ew_39980982.xlsmxlsm 7539852b85e95b5a61e66f191fe9e27aa53ccd1a1e2e1ea3b92fc8249442f3ban/a Heodo
2022-01-19MIkwl_47422.xlsmxlsm 92a235e8bf41c86d159540abfee442d8189fcc870cece8f18795a7ce5e14346bn/a Heodo
2022-01-1997927_27.xlsmxlsm 1952fb1b54841904e92b2ad6b42ab471f765e20104be4240822e8b925f0cd1ean/a Heodo
2022-01-19L31408095.xlsmxlsm 965d2f4cdb756ab82b4df8519c0439b4dffb7e34f8599a3a20ffdff17b93d569n/a Heodo
2022-01-195478099113388.xlsmxlsm 6611e1be49fc1e4cc8c8e6795521596826e498930f902ddd997e90a7edd9ed99Virustotal results 31.67% Heodo
2022-01-19ieyowps_353.xlsmxlsm 539bd5697617a77934404cfa22605577a8d2ee6aaf4f0d6b6ae03ba4b8022822Virustotal results 28.57% Heodo
2022-01-19i-590239.xlsmxlsm 04cbc0b177c15fce9d0ab4d483fae95e6eee3979d6ef931066c569b1748c3908Virustotal results 24.19% Heodo
2022-01-19551ZFIITIVLVF_69537.xlsmxlsm 80079af4efe5733cfe73c9bfed838688167bc5d6f1e0c5e1b28ace842559a4fbn/a Heodo
2022-01-192750102_77.xlsmxlsm 2b357a6854a4e084dca442a6b7434aead0bccd70a18a8c09c7c93d6373243dafn/a Heodo
2022-01-19c_62858364.xlsmxlsm 662f174a52c6cc824562e9f20052794d6186dd29fee9cc64f197af759296dcf3n/a Heodo
2022-01-19889NZDKAWWV997581.xlsmxlsm 71407e6c3854f830dcdf5ac3bd633139a9855893eb9f436c5b9330a14bfeb6f8n/a Heodo
2022-01-19627241231_2019.xlsmxlsm 1f0a8991f81a6908a431cb2033fd21eeca4f120554a142a3a045f4ebef76fadcn/a Heodo