URLhaus Database

You are currently viewing the URLhaus database entry for https://cosmos.stories.ch/wp-admin/CC_71597/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1992284
URL: https://cosmos.stories.ch/wp-admin/CC_71597/?i=1
URL Status:Offline
Host: cosmos.stories.ch
Date added:2022-01-20 11:35:04 UTC
Last online:2022-01-20 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-20 11:36:15 UTC to abuse{at}hetzner[dot]com)
Takedown time:5 hours, 16 minutes Good (down since 2022-01-20 16:53:05 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-204033475_6419604.xlsmxlsm 8f1383b4d7504257b4e3da2743e895eead15a36132d6bac13452a546fd20bbdbVirustotal results 28.57% Heodo
2022-01-20OXHYD_57538.xlsmxlsm e612d546205aa859563388f97efd28b24ac64d633c059f4dc746bff6729d1647Virustotal results 25.40% Heodo
2022-01-20612996965_5.xlsmxlsm 05aeb3fe4bd3f690ebe97d33014d66f3adc9e4a7517507d6df3be40dcbea26d4Virustotal results 26.98% Heodo
2022-01-20ytdvrqi-7.xlsmxlsm 57933fa64877cd7abbc18abd28ab60ac340b94c4f00445e8b98851108d6706e1Virustotal results 28.57% Heodo
2022-01-20WJH_42055.xlsmxlsm 8440eb113e9093c7bb2f228ac7cd77334e4168cbb32dd19d86f2f49cc3466da7n/a Heodo
2022-01-20wXNlmc174.xlsmxlsm 42eefcfe7fff0afcdc0bca565d1d1dd9cfaae1167d9d0a9ca49e0389d53ed46dn/a Heodo
2022-01-2084139427_999010.xlsmxlsm e4b4b4aeffb795fbbac1cd7bf7465c6fd98c0906401fdb3a90ecca0ce903b3c4Virustotal results 30.16%Heodo
2022-01-20405596_53316.xlsmxlsm fb18f3109867f5c66552ed2cb8f624bd0d7b882b0c68ede96f53782bde872794Virustotal results 33.33% Heodo
2022-01-2088067.xlsmxlsm f48ab458724fad35a7456e9f640afa8c061c0b6bd04acbc9cb0d0dbb2f4d3202Virustotal results 28.57% Heodo
2022-01-20btjv15.xlsmxlsm 40b52631655bde48abffe4d280833b1b6019e1ab64d64762283108f4cbaa0c5fVirustotal results 27.45% Heodo
2022-01-20EAZat-65605.xlsmxlsm dfa1de096862a3281db07782e1a8365a37fb07c94cd5b390ea1ba9a0e202d507Virustotal results 28.57% Heodo
2022-01-201580516_59128.xlsmxlsm 0df825699f788f7c626557258cc6c79c394f663837325ae5fb3977b5ae23a67dVirustotal results 27.87% Heodo
2022-01-20OED59.xlsmxlsm 66f754fa0c762bb97ca72ff0da7ed505aced3d99925ab65efc7402ff27e56039Virustotal results 28.57% Heodo
2022-01-20H_056.xlsmxlsm 645e264c2f657e1f901918767938090cbb4403348a8eb2a6c4eca245175dbd18Virustotal results 31.75% Heodo
2022-01-20644906-244114005.xlsmxlsm 92f01f34d0d3d902538fa84268d937ddcbfb4e40234b4a97b1b50a227a002f1aVirustotal results 29.31%Heodo
2022-01-20714862650_7710.xlsmxlsm 45ae174e0c5d865a0e1a2f1831df896eb8e6edd60b0505864baa9a2db811a536Virustotal results 26.98% Heodo
2022-01-20416792NWVDWSZ_2037567.xlsmxlsm 8780c110ac6a022d4680f7b4edd073f5f9ad7b44b42449db5932379896010f8aVirustotal results 27.12% Heodo