URLhaus Database

You are currently viewing the URLhaus database entry for https://skcyber.xyz/usvz/ieIXGGNqAyeqIdtx8fQQnGrQ1/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1992358
URL: https://skcyber.xyz/usvz/ieIXGGNqAyeqIdtx8fQQnGrQ1/?i=1
URL Status:Offline
Host: skcyber.xyz
Date added:2022-01-20 12:03:06 UTC
Last online:2022-01-21 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-20 12:05:36 UTC to abuse{at}cloudflare[dot]com)
Takedown time:1 day, 7 hours, 28 minutes Poor (down since 2022-01-21 19:33:45 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-218202482241.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5Virustotal results 36.67%Heodo
2022-01-2151317120087670198264.xlsxls b443a467b699497e7eabc0c3bdf7bf6a86705a29944ec4ee8e249abb7d17828fn/a Heodo
2022-01-2177777043444.xlsxls 2f51046242d3bd4fc8a58e9ee765707e09c8efbc4bd58b302262b181e9960bf1n/a Heodo
2022-01-21332472619876.xlsxls a012d6c3ff9ac12c39dc7e32fb51008897bf8ec0ea7291f80801a2bcdf195cffVirustotal results 40.00%SilentBuilder
2022-01-2197252065566836.xlsxls ce8ed57f03c2c3733b81f29e38332753051c9d5917d62760190dbc6b9dcebf45n/aSilentBuilder
2022-01-2163884419269.xlsxls 1f8c4b036377f2a61d53cb148ad29e36409e2248ccb66479eea7f3e5eac3cb78Virustotal results 20.00% Heodo
2022-01-21781587654090098759.xlsxls 595457287262641f193afae7ac66120029ef90f2ba59b310fce3d9335b1cf304Virustotal results 30.51% Heodo
2022-01-2186256352296410350893.xlsxls 7ecf0d5b556f400f2d98ef9f7e90373854ec0bda7732f5300223f9c600405235n/aHeodo
2022-01-2189203260523740342.xlsxls db8baab6295830de9d3d9a59dc3b8c88a5de601deeaffaaa83bb6aa941e29b6cVirustotal results 33.33%Heodo
2022-01-21202211462100943.xlsxls ad583c4b877a37dbf913c275e1bce335b8e73817d61039a2a510e28f325d3e6cVirustotal results 31.67%Heodo
2022-01-216153143479.xlsxls dac57112411305935ad4318c4ff4f495b8b39f84f001b64d83ea3ae69a994b02n/a Heodo
2022-01-2159052857759621197.xlsxls f81b07415f482920feaf5352e72d1997c9a746dcde98208be75087efd6e4eab2Virustotal results 31.67% Heodo
2022-01-21886256696017.xlsxls aaec559a9461b2ceb6da5a557186641e67370e83fddc9b23237f6f92c0e22fc3n/aSilentBuilder
2022-01-2140081114439.xlsxls 0dac6c23f1feaae5aa06f2ca15b939bde3b0392babe7cb38b91abc4112c0fea8n/a Heodo
2022-01-2135734010221343789.xlsxls f8d6b99d4c2313eca81f477de5763048a8606e5e06adf6e6cd4dc0675f8b891dVirustotal results 32.76% Heodo
2022-01-21140879133215.xlsxls 21e23ea56b3d3198bc790c23569c989367c1907f23680e1760b7e76250e87549n/a Heodo
2022-01-214239820607591.xlsxls 5ceff31125b1d5b68a48d4ce817ba3b487201c0c24e2efe3ad2e14400edccd42n/a Heodo
2022-01-217049773462123.xlsxls 82dd39849f520450c56ac21901abda18f16d08294e0c9569e659ed9133781c7cn/a SilentBuilder
2022-01-214240752484345588951.xlsxls d209f6f33da26aefbc9f93e2bb3379d164efbc34f6ed2f38b4c8f19024098971n/a Heodo
2022-01-21311786824110603584.xlsxls 5d8d1d8cee7bfa315d6091608aaad9d7d72ffe649d9dd9d4583369298b45160cn/a Heodo
2022-01-215856525298691072863.xlsxls 9fdb19b415f24dfd571c8289d1952dd827d1fb2a14e8776e495da67e5b38a176n/a Heodo
2022-01-215143036431737839.xlsxls 17c8e59bb1ddb5280a54987b4ccdf4c98cfb72071d795eb10b5c50b7d32b9d8bn/aHeodo
2022-01-213056979744500111301.xlsxls 8aa9a577a3bd2b2fb4b35339f5593a8a3f1c7635247b6fe78fbbb2983a8cdd4fVirustotal results 23.08% Heodo
2022-01-215907526911760164.xlsxls 3d14cf1ac0e948d8d736d86a089783fc5dae612426213cbead14ec631ab46fddVirustotal results 22.03% Heodo
2022-01-2163584466870156832.xlsxls 8bf7d7d4defb13d445be8e02c114fbe19561d60aefe633018efe1627b4cf3d24n/aSilentBuilder
2022-01-217459117459882448.xlsxls cd97472d360862a86136445487d9dbb26ff6337cd1cc2817b3acf7afd49ed01cVirustotal results 19.64% Heodo
2022-01-20282144594664427.xlsxls 2d259bd946fb388d1a7d75d28ba591aca3377e0ca8b49e0add414fe82b76f483n/aSilentBuilder
2022-01-203273972167057540.xlsxls 39123bd1932920eca6749593bee628c405f8bb88114d8647a5d9db8b5914f46cVirustotal results 22.03% Heodo
2022-01-20595249632805247.xlsxls 5d36041450aacaf14696b91009e0d0724695c47586467dfad802076b3dd6adden/a Heodo
2022-01-2019243993679537889393.xlsxls 536582463c4d7bc11c931e61b72316d539e0b4ed677451ec3ab8942f6a02a040n/aHeodo
2022-01-2099840222373186578264.xlsxls 3e36c6f45c9f9361f6c28f811cd2048a727e022281815b02c021811cab7ed01en/a Heodo
2022-01-206922180100629292277.xlsxls 7758c1ef7b05f4e4e7e283eda2aba34801589c1ed656610c149a5b1a1a0b7fc3Virustotal results 22.03% Heodo
2022-01-205210876462849651.xlsxls cc087101e48ffeece56deba54e6da814a6d35e371396b07cc4e10b121aac9907Virustotal results 22.03%Heodo
2022-01-2009295076409491261.xlsxls 48fee052f0fa5361ddc892d4768321a00e5c80adabc60654488ea8fc1ffa135fn/aHeodo
2022-01-208249343586052999161.xlsxls 0450c09d5fe3db81273bb016f057664f805ea0dde2c1c53ad512324c191ac2a5n/a Heodo
2022-01-2080816646099010.xlsxls 6f95d343a882d6e800379be638a48804dfc956537ffcc06361e1f57fa2938808n/aHeodo
2022-01-207680375024.xlsxls e33811b4dab432d10d50a8357ec88ab255590ac412e6a386ae3cee55c40df20en/a Heodo
2022-01-200224316518352041034.xlsxls 2dc878cbd56aa3817a893c118a8257f705517f72326c6d5424d2b498fcb0c54bn/aHeodo
2022-01-20788942136572.xlsxls 4a4ee3f8e96ff14a83d4f61b0c94a52dab1ed3a0bcd3d588cfc52606df19d1d4n/aHeodo
2022-01-2036099465200133422.xlsxls 9abfbf06900053672f9e159b4c57db0807dc5a3d5816702f17c5b07fe83370d0n/aHeodo
2022-01-2024806807971898274812.xlsxls 54afab7495df32a4992bbf3b49a156d0701358881ff8c996345fa6788a80d789n/a Heodo