URLhaus Database

You are currently viewing the URLhaus database entry for http://markat.thinkgeniux.live/0hbg/IQtWB3z4weS9Jt4/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1990380
URL: http://markat.thinkgeniux.live/0hbg/IQtWB3z4weS9Jt4/?i=1
URL Status:Offline
Host: markat.thinkgeniux.live
Date added:2022-01-19 21:00:05 UTC
Last online:2022-01-21 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-19 21:01:26 UTC to abusencc{at}interserver[dot]net)
Takedown time:1 day, 4 hours, 53 minutes Poor (down since 2022-01-21 01:54:26 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-204832591903209.xlsxls a1d4e9c497ec94e9c1182741b7096c47396c0057014747c17e618e82538eae72Virustotal results 17.31%Heodo
2022-01-204718946868722909623.xlsxls ceafd90b9d8a1fa4ba9b8f81f1c3b138570c8768b75ac1ef0d3bb126cc6d497cVirustotal results 37.29%Heodo
2022-01-208887200140.xlsxls 0e985904fc4e727bcdcb2cb67a0a1c9cdb6e659de8ceef36f331f05ccf81e5fen/a Heodo
2022-01-2034861949185.xlsxls ef091c8fd3da5e55d7349f328528de0c8efbadff875a3a2f4d07355acc5a98d9n/a Heodo
2022-01-2086123991148841749907.xlsxls 5a1489af62963b07c39a536bcd6d0912b6e83fe7c5f14f9335660d0ec8e655ccn/a Heodo
2022-01-202759678328.xlsxls 6b85f542b57e575c08c896ad4d70f32c8d93ed21af22407cf95e7db3005d5b60n/a Heodo
2022-01-209406240889273.xlsxls ef8562b363253996a0a2f5902bafc7d8f345d05e3bef28c3791c48e10d14c78bn/a Heodo
2022-01-20864973489689.xlsxls ecc7d67a95a0bc100a6eebc60573de7ff556da84c43137adf9b23c6fbd5fb0d7n/a Heodo
2022-01-200521070309.xlsxls 1cf09e78181661d05a2e9e41e578ec23bfc41f6cad88f9cccff741d12df4c570n/a Heodo
2022-01-2005950619680815.xlsxls 1a19e1b7b3ea831480dc76486dc3692a3231826c231f08c81898d6aeb508ff71n/a Heodo
2022-01-201405971603557784.xlsxls cb2fc370e9a47d7a55ef8ba2d4752062d8580c4fa8cae3df35655bb736d041ecn/a Heodo
2022-01-202658113621064799.xlsxls f43c7941272a2ffa5252dd03a62fcf67ebcedb4eeefb62b83e282df408cbd899n/a Heodo
2022-01-20671246127395212.xlsxls 980229215a4a60f739f9ef51f351e1ccdd055d509f62df8354277db46af45319n/a Heodo
2022-01-20265504093310043335.xlsxls e5cbcea06c596c35b817e23de0dd39377dd88d951c16e0ff97d2aea7aa748e38n/a Heodo
2022-01-2063923857154922669168.xlsxls 2543badd28fc1740c4784e313fc2627c75b8ffa4ab59f5e79dd74e37973a72ccVirustotal results 20.69% Heodo
2022-01-200975548108807576.xlsxls 8abb9df7dbb7c37ef4298c320074b668493d97486fa893ed0ef7c33001f20966Virustotal results 18.18% Heodo
2022-01-208675300712.xlsxls e10cc43ac64c0bb9759a41c29d470c2c4a8a4b1c7c680d1785c14e635ca01aa5n/a Heodo
2022-01-20882333217371627358.xlsxls b73bd971894582e6cceddac7aa53c67b0266db1737bb1cadc0564f2d35fd84dbn/a Heodo
2022-01-2028142733564482284.xlsxls 167d9ba9d50caf33f2e4e83958b809b81e5a3f9bd5e259d2e233ab5c299afecfn/a Heodo
2022-01-20703079352021037873.xlsxls c5def1c0217fdd6676525fac0514b0cadb01591090c3ef1f8c0cb5d5e305a83en/a Heodo
2022-01-20733289265207618722.xlsxls 331d0cae18cde76a3e23f8ea1443f182cb33a9c9001f3d3e2bb70fe1ad48d906n/a Heodo
2022-01-20144386906115615.xlsxls aa68c6fe9d1119990397dbc46556a017468ff65d4e017efc019f94aa1a03e4efn/a SilentBuilder
2022-01-2032260545621668.xlsxls d27395fc3cb21db27855d92d42265f656f1d027fdb2ffe0cbcfd4339750a8750n/a Heodo
2022-01-20012060441258594126.xlsxls b1ee7aa00b7884ed02a3f5ddc07419b6e8dd6e7382269d8cc5511f06431d5eafn/aHeodo
2022-01-201215418081966045.xlsxls 9bfb1eee6403e410637b319fbb601585ac6858b5c169467e0cf07488ff642845n/aSilentBuilder
2022-01-1993234526367688555.xlsxls 3ce617ed4d5a78ba123d6463b4c0c6b8e7ea29f0800761e9559c8bf182f21afen/aHeodo
2022-01-1941179805118231.xlsxls 4083be0a459f2f9aaa168e5b6c5ecdac601246a50038b458ed3cb1a988dbf700n/aSilentBuilder
2022-01-196364223413749340.xlsxls 9d1fb84bbcd977c6ff6a873b6485cf44af7d6562fa046b0b751dd1f6bfb2d31an/aSilentBuilder
2022-01-1979072484746.xlsxls 4f48ef3036b8e2b724cbf9ec618f35baf7cb5e2017dc5fae4825659a28b58e68Virustotal results 18.64%SilentBuilder
2022-01-1951544285925723782.xlsxls 9395907b748740960ac38d3ba4faeb6248b7953da69f834daff192bb2ff1fff6Virustotal results 16.95%Heodo
2022-01-199085249126919098053.xlsxls 33bcc678281337839c7121adf32e1ea0fab2974709ab30d0099e4bbd147916b6Virustotal results 17.31% Heodo
2022-01-19993555249519.xlsxls 931c80255eb9df794e3bcf120d96baaf081417df4dbfc06a843d3999c9da8df9n/a Heodo
2022-01-193830946572177700.xlsxls f2c355bbcb6f7940c16e851115e7c448c06ef3e384bf0990357cca533f551973n/a Heodo
2022-01-1933191505534248.xlsxls ca1baf60faa9486403587e0fac3c548db3aa5b6fb42897e1569020682499e319Virustotal results 25.42%SilentBuilder
2022-01-1980367742169126239498.xlsxls d7f2a29fddd8dd58c32e86715969193b8a5760e98aea4208c925324af3a633f4n/a SilentBuilder
2022-01-195472720427355.xlsxls 24b2d3568f7207c457507dc3d6256dfb6ab78a78bd47435230e75e72529b8871n/a Heodo
2022-01-191344282325894077801.xlsxls 2aa03ee42002bd26f6c97cec14cf00d8f22ebafd17eb5a631214206d1d33f640n/a Heodo