URLhaus Database

You are currently viewing the URLhaus database entry for http://peterpolz.to-create.eu/ahzh7o/ycPb764/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1992363
URL: http://peterpolz.to-create.eu/ahzh7o/ycPb764/?i=1
URL Status:Offline
Host: peterpolz.to-create.eu
Date added:2022-01-20 12:03:08 UTC
Last online:2022-01-27 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-20 12:05:20 UTC to abuse{at}ihnetworks[dot]com)
Takedown time:7 days, 1 hours, 7 minutes Bad (down since 2022-01-27 13:13:08 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-218658729259137606.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5n/aHeodo
2022-01-21909964265541937.xlsxls e59173f043483afd41faf0edf28ff91047d48ddbcabe29efe43bbc7d238c9861n/a Heodo
2022-01-2193462238416891.xlsxls 5a6ae409ad46c453172d047a1b1d7685cbdcc317653d90c6a968509d1c2229b6n/a Heodo
2022-01-2157806467101040057.xlsxls f35abc3dbc3faa333da128234f2b7778969e1ea5f8ef088498cc8ecf325f8a9cVirustotal results 40.00% SilentBuilder
2022-01-2110472760144198265807.xlsxls fc79dd33ef2208cbe871b54938ff2ad295a34cb9a720e4995853dfed5761db18n/a SilentBuilder
2022-01-21038782423040.xlsxls 29111d8e5e8306e76660db292e7232ab39e901955014eede21e912c931a09b5fn/aHeodo
2022-01-21473681589020952.xlsxls ab4456f73cd0d49bd6c2dc5553a33ff128bc765cb07cd47f8e0619d01735f966Virustotal results 22.03%Heodo
2022-01-2151627857297689846.xlsxls 2c9af469fcb89bb2e93d1ac70ce0bec912b78d5c3cbadccc3040c18dd03f5e41n/a Heodo
2022-01-212368286802601229781.xlsxls 6027b0c0ed3191c277bd14f9bfca0e7110c5b306dba6bdc3e5bf123d0b31e6aen/a Heodo
2022-01-215390806952116583.xlsxls d314b3d22bcf83bf1f0dfb95189d8101cf360bfb61041246129f3f95f8de2402n/a Heodo
2022-01-21072307649396828.xlsxls 6232ba47b182fc60d16bf5b9d41f5dc614f2f348e83414c533df7ccbfb940885Virustotal results 38.98% Heodo
2022-01-2151288689866668722.xlsxls fe0ea8701f0d1d1b08de951b55324c38441ca10539fdac0274a95e293448f8f3n/a Heodo
2022-01-211050492857.xlsxls 8b24ef9d0556c1351a46d2e0eb996b21b65638c41dc79cd5b676a79bf0d18a17n/a Heodo
2022-01-218797071495888.xlsxls 053d625d162a5e1ad61603ca7d6dfd915cc175e991eaf3377a55b00853fabd07Virustotal results 30.00% Heodo
2022-01-2139720056893989.xlsxls 3b8dc8f1f75a66d545d45ee9f4160ea99cff4e8cc3f5b265ea27736a3eabf381n/a Heodo
2022-01-217508925427601200.xlsxls ccd9c6eef79a18615ba690a35d8a2f238ef0d6cf1e715536299b42f9e67357d6Virustotal results 32.20% Heodo
2022-01-21358944426858.xlsxls 9eb1535c5aaefb0a3a2b583a4aad8ef65f55b805294dca339ab2f8e632ebffedn/a Heodo
2022-01-213565814877455.xlsxls baa950d432aeb1593d886ae1afff9dbc40b6be9828af26c7d3c72431f4fdafffn/aSilentBuilder
2022-01-2170940316690895585147.xlsxls 2cb043937c5838c3f91d3955127cc444ff420b74448d38395ab177b8369753d0Virustotal results 25.00% Heodo
2022-01-211286315566904.xlsxls 4c2ddd629e265246f75b3e606e6bc899afb3c82020fc9a8f440e7793d6fed047n/a Heodo
2022-01-219168247614.xlsxls 3accfd2337522a6c68a1018979e3ac6603237e13aff0b962ae093662129d8609n/a SilentBuilder
2022-01-212353602486.xlsxls 4520398e8aeabb1aed9cd4899a2ac014545d9ad9383959288cf2470f9c1c4731Virustotal results 22.41%Heodo
2022-01-2189275997564.xlsxls c3deaaa5202a717b68951cf04c00e24200a91aeee0eceb58cc032a0471fbda36n/a Heodo
2022-01-212279681895463.xlsxls e57baf9289180802e131633ce599fd55a0a67db3423c45d62f4a88fbf94a0874n/a Heodo
2022-01-2109983707176.xlsxls 01bab18ffb7052e8d67dc6447267ec775667a721592e609cf62dd08649d7a807n/a SilentBuilder
2022-01-2149996400544175.xlsxls cb72aea24f710a0d9b643de1e759ace18205bc20aa8aa7a91ecf20e556cad41fVirustotal results 22.03% Heodo
2022-01-21893299957966960850.xlsxls 9296f02a362c27b1e3a3b4119ede64ea52b6c0430fc70517e5146730c23c987dn/aHeodo
2022-01-209949315478016.xlsxls 88c13197081731462e05ef64b1c9abbdc1b85e0e573437506270137fb7b735d8Virustotal results 22.03%Heodo
2022-01-2098510779001.xlsxls b0e176129f7c1c4ae1d31d420d8ecacaceb6c4682002848a769d98e4b0f21399n/a Heodo
2022-01-2049802869232150194.xlsxls 345965e8a8dc6b64c4fad5c48851aa3a2efb483d409eb259fb2ceaaec1f01dbcn/a Heodo
2022-01-2086580467973.xlsxls 536582463c4d7bc11c931e61b72316d539e0b4ed677451ec3ab8942f6a02a040Virustotal results 20.34%Heodo
2022-01-204207667992.xlsxls 7758c1ef7b05f4e4e7e283eda2aba34801589c1ed656610c149a5b1a1a0b7fc3Virustotal results 22.03% Heodo
2022-01-2025758420504551446856.xlsxls afc76f4aa05482102ea34e10b3d2397db55857510ce6ae3dcfe05e29cc92bde3n/a Heodo
2022-01-201083307826136.xlsxls cc087101e48ffeece56deba54e6da814a6d35e371396b07cc4e10b121aac9907n/aHeodo
2022-01-20963219372904851.xlsxls 02beb553bb2d04182e73cf34f42a9dc4c52f84b4278e97f9fbce8f111af576d3Virustotal results 22.41% Heodo
2022-01-2022242979629481524.xlsxls 26abe8e8297849c2a5721808548030b0abb405538a62e4a4d7bc0bf2a6279476n/a SilentBuilder
2022-01-20280140570757257819.xlsxls 6f95d343a882d6e800379be638a48804dfc956537ffcc06361e1f57fa2938808n/aHeodo
2022-01-205618246052411079.xlsxls 51dc452edd7c975ac8f632ad888d6cada4233c19aa061416076abbdb2ac596b4n/aHeodo
2022-01-207317246308.xlsxls caa57a0d7208775ee50b80b88384a83804e8b132229162b88db9a3a57abb7acbn/aHeodo
2022-01-20314514021883591558.xlsxls 5c8cb7136b7f89772e79c0a2f6ead69434dbd7cd66ed030ca620de279c9b20a2Virustotal results 50.00%Heodo
2022-01-202894016185119140730.xlsxls 4102ee23d580a34ad9a1790ea81e7d9739cae27b843165e0daa30b9450585db4Virustotal results 23.73% Heodo
2022-01-2043589068591.xlsxls 3ce617ed4d5a78ba123d6463b4c0c6b8e7ea29f0800761e9559c8bf182f21afeVirustotal results 30.51%Heodo
2022-01-20597540437354.xlsxls 670b10a706a22c6efc34af36bf591688d08eb44be993d5901a66525c6369bd9en/aHeodo
2022-01-2072223262289362443850.xlsxls 23dc54d35406a09e9c7ebc21aed24c81434f62784b5a94ff6b762b39008d3a05Virustotal results 17.24%Heodo
2022-01-2092157049377666318773.xlsxls db6061f8252704ee6f243e9d5792be120e6743cd366b4ae8f3b56d12b00866ffn/a Heodo
2022-01-20329203891537893862.xlsxls 039adcca4d205850117d5b2348ceec561c57868668ab822350ef94a9b9467842Virustotal results 41.67%Heodo
2022-01-20560743148924582357.xlsxls a871770ef1ba329147828026ab5d7d1d0edf83ea93fca2bb2d0faada51cf48e1n/a Heodo
2022-01-2005352754737415663269.xlsxls 909664581c9c1270d91b217c94841e2f6035a12c5f15725c384b2fa746b0b3ddVirustotal results 27.12%Heodo
2022-01-2046173790253.xlsxls 8367f873c806ac8d56f4ddb2f158e4d559c67dc1d7b66ac3221cd28a2c8079f9n/aHeodo
2022-01-2051643700692309812291.xlsxls 88f602cd8f6b66886acb349720da52c3f5fdb367fe8a72f76812af27347cf32eVirustotal results 22.03%Heodo
2022-01-2067277311555766218792.xlsxls d7f2a29fddd8dd58c32e86715969193b8a5760e98aea4208c925324af3a633f4Virustotal results 20.34% SilentBuilder
2022-01-2098227279960102126493.xlsxls 9713bd6e70b57a5f98a05f4c674192803b49850ec2f298546fc6fa8e5b473d5en/aHeodo
2022-01-209280092241589061.xlsxls b3973d991b4f3e3870404c40bf59257bd40f4207f10dd5a6c34a8d4e29e0f7eaVirustotal results 24.14%SilentBuilder
2022-01-206144463782.xlsxls f8df5c1460204b9a00c575ec537837a007f7e09f3c16b2525e119476eb8f9316Virustotal results 41.67% Heodo
2022-01-207307273068698089867.xlsxls d0e970149a72b878303b425cbeb058aac6d74f1b94b2c3e150e40ea7da2e9072Virustotal results 22.22% Heodo
2022-01-20282242512211474112.xlsxls 77151a31805014e0dc372a02bdabcbe7cee6ce3eaa1cfe9646290a6969581666n/aHeodo
2022-01-206144756378.xlsxls 6e5d0e25330f5d7d6c00aea7a32e5256546d31add66431519af4957ae9dca729n/aHeodo
2022-01-2017248715214.xlsxls 6b65f37d876f38bcc12bc144f25a9674a7461b5500953b5ff8bf02186d82b3b8Virustotal results 19.30%Heodo
2022-01-203120990805.xlsxls 4b1800da594032e6944a2b0728eaa50223d1ca0a6eaf3883ce9a0dc05d2e982aVirustotal results 18.64%Heodo
2022-01-20691278534008840.xlsxls 29a765d282e097a0ddcba25fb078bb0b81fbf9a3e5939f0be8bf41c72c770f83Virustotal results 38.60%Heodo
2022-01-20245942317495.xlsxls 417bde625790c8bb2b5a6bf8f3e0c5abda0e540c5eab3af803953e22754b0ef1Virustotal results 20.34%Heodo
2022-01-205948559616988993492.xlsxls cb8ff98fc8e177a504db540af317736d47851af89e06bc763e4e81bb254099adVirustotal results 38.98%Heodo
2022-01-200670625612.xlsxls 934cbb40fb991a65966c7890bb328974e9779cfac8370eda488b5c72e7b255feVirustotal results 18.64%Heodo
2022-01-2043701569844.xlsxls 9d5d0556d9deed253f2b65fc3564578f14916269d9c53359fc4110c8ab1219bbVirustotal results 18.64% Heodo
2022-01-2080641728955.xlsxls 0698e4cdfec1039a2b2d747509ddfd542ae88e94f9c8703f5ba4e2e3d00c9df0Virustotal results 18.64% Heodo
2022-01-209775603519499021.xlsxls 1b93b330cf79f9315450b4f8221f2166d03b7ce2a9834f599149d2ce26403bbcVirustotal results 17.24% Heodo
2022-01-206809332819701104278.xlsxls 34315a97decc512b1ee8e3f26e5f2ff6ea20bf03d6e8524b970df14e18ecfcb7n/aHeodo
2022-01-2054848857813704390897.xlsxls 4b90a0d2855800baf3485d8e0c38ec0e5aea83050ceeb38061af07eca0d16febn/aHeodo
2022-01-202388843826762423824.xlsxls b8e79d6d4ce2e23e9b126c3397150be331952bae520caad6039e7dfd048c83f3Virustotal results 17.24% Heodo
2022-01-20076829218848.xlsxls 84c92f18c28b6d4cfd1eca0f1d1b56f3fb170eefdb014243dff51833c50c5758n/a Heodo