URLhaus Database

You are currently viewing the URLhaus database entry for https://jayambikadevelopers.com/jx8p/RYG-0/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1992109
URL: https://jayambikadevelopers.com/jx8p/RYG-0/?i=1
URL Status:Offline
Host: jayambikadevelopers.com
Date added:2022-01-20 10:17:08 UTC
Last online:2022-01-22 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-20 10:18:12 UTC to abuse{at}cloudflare[dot]com)
Takedown time:3 days, 8 hours, 6 minutes Bad (down since 2022-01-23 18:24:57 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-20IVP_00.xlsmxlsm 45236b922fe0452378bcbc300f48a2aae3cdd17a03fbb9411a36e6540e700086Virustotal results 28.57% Heodo
2022-01-20ynhvgnd5726734.xlsmxlsm e2d111de041c2bd5003a3be379f8c617e854516169debba317cab4168b92e38eVirustotal results 26.98% Heodo
2022-01-20fz_76.xlsmxlsm a6eb230d9c56b8d5e3326a474853c12bfad716f3907296854143c1b77e479244Virustotal results 26.98% Heodo
2022-01-2056_86384374.xlsmxlsm 6bf0a6ea26787e80034772f3e46ac98d7ce874d99213dbea144e9f2cf4892ef8Virustotal results 28.57% Heodo
2022-01-2073881266CQDRJGSP394816.xlsmxlsm a6681bcaacbec6bccec6e70517b523ce00b73cd496cc3458b242fa7c8088edabVirustotal results 28.57% Heodo