URLhaus Database

You are currently viewing the URLhaus database entry for http://kitchenstudio.tokyo/images/jGM0s4MP7e/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1990499
URL: http://kitchenstudio.tokyo/images/jGM0s4MP7e/?i=1
URL Status:Offline
Host: kitchenstudio.tokyo
Date added:2022-01-19 22:01:08 UTC
Last online:2022-01-20 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-19 22:02:45 UTC to abuse{at}sakura[dot]ad[dot]jp)
Takedown time:3 hours, 36 minutes Good (down since 2022-01-20 01:39:07 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-20220559523752029165.xlsxls c5def1c0217fdd6676525fac0514b0cadb01591090c3ef1f8c0cb5d5e305a83en/a Heodo
2022-01-20974581431948634081.xlsxls 331d0cae18cde76a3e23f8ea1443f182cb33a9c9001f3d3e2bb70fe1ad48d906n/a Heodo
2022-01-204748019586637545887.xlsxls aa68c6fe9d1119990397dbc46556a017468ff65d4e017efc019f94aa1a03e4efn/a SilentBuilder
2022-01-2019676553906499.xlsxls e671c9b26b2b246cc5789ad0668750051048ef78c28d162f0af953a4f52e6aa2n/a Heodo
2022-01-203741506054407.xlsxls b1ee7aa00b7884ed02a3f5ddc07419b6e8dd6e7382269d8cc5511f06431d5eafVirustotal results 28.81%Heodo
2022-01-206302981155313.xlsxls 9bfb1eee6403e410637b319fbb601585ac6858b5c169467e0cf07488ff642845n/aSilentBuilder
2022-01-199375973618.xlsxls 3ce617ed4d5a78ba123d6463b4c0c6b8e7ea29f0800761e9559c8bf182f21afen/aHeodo
2022-01-19133717248253719.xlsxls 4083be0a459f2f9aaa168e5b6c5ecdac601246a50038b458ed3cb1a988dbf700Virustotal results 19.64%SilentBuilder
2022-01-193803643406213.xlsxls c48a780e4664704fea5ddb053288a405a134644cd21cf1b2a21050df56d28d94Virustotal results 17.86% Heodo
2022-01-19137599842199669038.xlsxls c964bd44cc4dfa14cdab694d620128715a62156b83e9aeb8496b88228937afban/a Heodo
2022-01-19092906730913.xlsxls 33bcc678281337839c7121adf32e1ea0fab2974709ab30d0099e4bbd147916b6Virustotal results 17.31% Heodo
2022-01-19970251077872007689.xlsxls 931c80255eb9df794e3bcf120d96baaf081417df4dbfc06a843d3999c9da8df9n/a Heodo
2022-01-1935212384535597061.xlsxls f2c355bbcb6f7940c16e851115e7c448c06ef3e384bf0990357cca533f551973n/a Heodo