URLhaus Database

You are currently viewing the URLhaus database entry for https://thewritingmachinecompany.com/Browallia/eQJ8wRZ9uorbfNaPkCtd/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1992729
URL: https://thewritingmachinecompany.com/Browallia/eQJ8wRZ9uorbfNaPkCtd/?i=1
URL Status:Offline
Host: thewritingmachinecompany.com
Date added:2022-01-20 14:03:05 UTC
Last online:2022-03-16 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-20 14:05:38 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:1 month, 24 days, 11 hours, 20 minutes Bad (down since 2022-03-16 01:26:27 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-16n/aunknown e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855Virustotal results 0.00% 
2022-01-2114449189883.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5n/aHeodo
2022-01-219677535493.xlsxls 157742d33765bcf84671fcb841d4ac0f5a06a08c26fde8a84b5d90546ccf14fbn/a Heodo
2022-01-21772815905124.xlsxls b11d267860a7dfa12d415540e8d6b6e4b7813b2a4d633c966ce2c405a20b9a95n/a Heodo
2022-01-2107698202418674767.xlsxls a012d6c3ff9ac12c39dc7e32fb51008897bf8ec0ea7291f80801a2bcdf195cffn/aSilentBuilder
2022-01-210807556649752673084.xlsxls dd6ee5ee1db29010e56a2b1adf5fda9553efacf03236a806283e094bbe44e275n/a Heodo
2022-01-2123672911831701.xlsxls 29111d8e5e8306e76660db292e7232ab39e901955014eede21e912c931a09b5fn/aHeodo
2022-01-2186692528571.xlsxls fd83649a426e706a363449d7dcb503e4bf5b59cc3ab5d5a346e4ed308ec2e2f3n/aHeodo
2022-01-2194358050272240687.xlsxls 4f0d506bde4b58d49d13c50470ec44e3cb2d9b084afa1186e857445ea66faccfn/a Heodo
2022-01-216988953970784509.xlsxls 9eb1535c5aaefb0a3a2b583a4aad8ef65f55b805294dca339ab2f8e632ebffedn/a Heodo
2022-01-21929559391690411591.xlsxls 2a76a4f3259fcd851ca4b6600ce2f79b588a682c7dabcc1d1db8269b5021d7ddn/a Heodo
2022-01-2183974857263302.xlsxls 2cb043937c5838c3f91d3955127cc444ff420b74448d38395ab177b8369753d0n/a Heodo
2022-01-219068695975108.xlsxls 278e2b44764f4223799867c585d886b7fe57313055f5f82d983f7e13e1a49aedn/a Heodo
2022-01-210442138184950.xlsxls c853e3e650463ca03b11d37a51d45c21e90abb85fe410073c435eba0d168d28cn/a Heodo
2022-01-215520804106688.xlsxls 4520398e8aeabb1aed9cd4899a2ac014545d9ad9383959288cf2470f9c1c4731n/aHeodo
2022-01-216689639219544340.xlsxls ba08528de2cad75e6158ffaf06a36c06c94dece470398f273219460df80035een/a Heodo
2022-01-219563816244762.xlsxls e57baf9289180802e131633ce599fd55a0a67db3423c45d62f4a88fbf94a0874n/a Heodo
2022-01-2127383251950762.xlsxls 8bf7d7d4defb13d445be8e02c114fbe19561d60aefe633018efe1627b4cf3d24n/aSilentBuilder
2022-01-2148062395330106189.xlsxls cd97472d360862a86136445487d9dbb26ff6337cd1cc2817b3acf7afd49ed01cn/a Heodo
2022-01-2160287746416778605772.xlsxls 1f8c4b036377f2a61d53cb148ad29e36409e2248ccb66479eea7f3e5eac3cb78n/a Heodo
2022-01-204252017899.xlsxls f968e46bcba287794933061736a68fae19dc3e579e41e54fe2712d4a8b3ed5a0Virustotal results 24.14% Heodo
2022-01-2074246669589484409.xlsxls 2181997083632b17484474d7152e18c8a65175b823c871b164d15d2e20a8ae16Virustotal results 18.52%SilentBuilder
2022-01-2062263781074276725270.xlsxls 39123bd1932920eca6749593bee628c405f8bb88114d8647a5d9db8b5914f46cn/a Heodo
2022-01-2096970461620200366529.xlsxls c3782f393e6dca8cbded5a7bbb73789792cd1bf807f4f71cd863b12992beda95n/aHeodo
2022-01-2062711379420482282.xlsxls f0589b8808bb3a0c95faf63a4ce880ec2494cc4a88cd487d509bc8fc78b24123n/aHeodo
2022-01-200802715412022.xlsxls c48cd0ed918dfb1a8db5e5b91d904d99fea25b476cf4d9e004668e7ac5f91f1an/a Heodo
2022-01-207299228859469230560.xlsxls afc76f4aa05482102ea34e10b3d2397db55857510ce6ae3dcfe05e29cc92bde3n/a Heodo
2022-01-202732280340.xlsxls 3b63534dcaf71bdf8293d2a3ce3310a02d2eda37deac68d5ccbdc89cfbc8f408n/aHeodo
2022-01-20661697664657183.xlsxls 0450c09d5fe3db81273bb016f057664f805ea0dde2c1c53ad512324c191ac2a5n/a Heodo
2022-01-202725291513.xlsxls 8a07b30e84df7c4db85691e055e4f39fb78621392b7a282b3b64d13a675e14b1n/a Heodo
2022-01-20632485600173.xlsxls 67d5e8d2c3fcf5a17f0c7aad1b6f8963102dd00bdb62a3179605c3cdf659ab3cn/a Heodo
2022-01-207738242475820318.xlsxls ab4456f73cd0d49bd6c2dc5553a33ff128bc765cb07cd47f8e0619d01735f966Virustotal results 22.41%Heodo
2022-01-201605324840.xlsxls 2dc878cbd56aa3817a893c118a8257f705517f72326c6d5424d2b498fcb0c54bn/aHeodo
2022-01-206855925886884139225.xlsxls b0255e42b75c0e2899d56ee898a141bb6f4f63c23e6fad05fbe0f4fe08534d4dVirustotal results 20.34%SilentBuilder
2022-01-20189089723629358.xlsxls a190188705427ebcbf8a3e6d76be0f7548da7d03c5095aef08fef6ffa5f20affn/a Heodo
2022-01-20015149259753.xlsxls 88c52c4d1940f16219506b7c10ded1fa314e5f05e0aa03cf441a7dee30f41aa6Virustotal results 22.41%Heodo
2022-01-2014844340717796678.xlsxls c1ee05cc88f49b09c9ca3620a75b0f1ca127afa63af57cc6c989d1023f30177bn/a Heodo
2022-01-20170819249756267.xlsxls dac93a5dfa21730566aa2899863ef7b65a992bc7934d64f771038391cbd39529n/a Heodo
2022-01-200345579165.xlsxls ad511015e8c542a03954c1be8721ddcce85dbe997f7b2048bc6e1b35823c5ffcn/aHeodo
2022-01-20524189521807.xlsxls 1db2ec499c11b096c4a468a878a9e6bb791183ca2156eb2e8c233fd7b172b607Virustotal results 45.76%Heodo
2022-01-2088034997278472.xlsxls c962232ce7c3c2cff3baa81deffa085cab3750504b71d870c81685ca3283dd08n/a Heodo
2022-01-20015054011173029286.xlsxls 48645d321856636203f209613f50ae87684d0e12bae3421baf88c25657717abbVirustotal results 27.59%Heodo
2022-01-20740203396056.xlsxls 093eb9276d5df2490f9dc0dd324349648f030d92ca6d4ab24d386d1d0eaea799n/a SilentBuilder
2022-01-20219641768075.xlsxls 1f01ec0b5b4994cf520472586290d49c00653df2e80922613541046d7ee04367n/aHeodo
2022-01-20575316089462960372.xlsxls 88f602cd8f6b66886acb349720da52c3f5fdb367fe8a72f76812af27347cf32eVirustotal results 22.03%Heodo
2022-01-202264480381615.xlsxls e19b762e560008e23a2bd5ff0e0ed710b52c528edfe995fbecb484af29f68b7bn/a SilentBuilder
2022-01-202800262929.xlsxls 92f65a0fe643c1d601633944790e1263b9dc30881b77636627c624581aac4acbn/a Heodo
2022-01-205212938592724467.xlsxls bcfa7cbaded9c6144689692a9ea193431c16e7bf18e7ab361ef65fce375d93ben/aSilentBuilder
2022-01-2086478383618005451376.xlsxls 77a20d50ae3ae14a41e424ec176e7d28a9fee2fde14429b5aa256a50bfabbf5cn/a Heodo
2022-01-2038582327301.xlsxls 3bc531482cc543cfaf67ec3c0d55382b129889d770be69196b05221058020958n/a Heodo
2022-01-2048289079034007.xlsxls f8df5c1460204b9a00c575ec537837a007f7e09f3c16b2525e119476eb8f9316n/a Heodo
2022-01-200137330048442.xlsxls c964bd44cc4dfa14cdab694d620128715a62156b83e9aeb8496b88228937afbaVirustotal results 20.69% Heodo
2022-01-203660112529201388.xlsxls 6bbb5397ac0522358d1f79729993bb746eed8844ad3a4ebae8f4baafb29a1285n/a Heodo
2022-01-20394339900342.xlsxls 2bc45370dd6eed0f3059fe82bd82d8aeca954819c9ad8ea823d36a8e01c7e92cn/aHeodo
2022-01-206982890457248376608.xlsxls ec7b717fed554ec4124d956ab43c4ec1f2c66cc692ed85b9956bdaf9c4914085Virustotal results 41.38%SilentBuilder
2022-01-2067015588703323918.xlsxls 0a20a1b82fd605aaca4441f2be6c35ce6d486d0a55de5efda00150db78b3e6d4Virustotal results 38.98%Heodo
2022-01-2076891816862.xlsxls 60c25a5867273c0dd739df5c10f6807d4fbfeb7db9b8ffeb4aac58a2da169010Virustotal results 18.64%Heodo
2022-01-2098805931491795158721.xlsxls 5c8cb7136b7f89772e79c0a2f6ead69434dbd7cd66ed030ca620de279c9b20a2Virustotal results 18.64%Heodo