URLhaus Database

You are currently viewing the URLhaus database entry for https://canvassea.com/qjxnz/wkpfvi9/ztya16/nOZFoW4FSP/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1992744
URL: https://canvassea.com/qjxnz/wkpfvi9/ztya16/nOZFoW4FSP/?i=1
URL Status:Offline
Host: canvassea.com
Date added:2022-01-20 14:07:04 UTC
Last online:2022-01-22 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-20 14:08:19 UTC to abuse{at}cloudflare[dot]com)
Takedown time:1 month, 25 days, 22 hours, 34 minutes Bad (down since 2022-03-17 12:42:28 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-2139777207091.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5Virustotal results 36.67%Heodo
2022-01-215537593906.xlsxls aba8e5024172cc0cd240eda2c379e91825cb922f0c5d56d82a560dcb15eef097n/a Heodo
2022-01-2176433046507.xlsxls e59173f043483afd41faf0edf28ff91047d48ddbcabe29efe43bbc7d238c9861n/a Heodo
2022-01-21806397574538.xlsxls 5a6ae409ad46c453172d047a1b1d7685cbdcc317653d90c6a968509d1c2229b6n/a Heodo
2022-01-2176690183582164169376.xlsxls f35abc3dbc3faa333da128234f2b7778969e1ea5f8ef088498cc8ecf325f8a9cn/a SilentBuilder
2022-01-213438469444008037836.xlsxls c60a6861fc63f90b9f872e0bc131fa85f6af0daef37063eadf6d10890acf3bc0n/a Heodo
2022-01-2109872942582.xlsxls d1f5ad731dbf6263cbcee95b142ffb0ebc190205ae58d4a4948bb3e5ad09e4bbn/a SilentBuilder
2022-01-219384664012063.xlsxls ab4456f73cd0d49bd6c2dc5553a33ff128bc765cb07cd47f8e0619d01735f966Virustotal results 22.03%Heodo
2022-01-21926531130065209496.xlsxls c3496d8e7d2ffbb343cb44911bd859ceb08cbac8eb09ebfc58ce6cb1208f2d8eVirustotal results 28.00% Heodo
2022-01-2161724567407020465566.xlsxls 6027b0c0ed3191c277bd14f9bfca0e7110c5b306dba6bdc3e5bf123d0b31e6aen/a Heodo
2022-01-211692810218666.xlsxls 13c3fec523cfe8ac14a7e78a8e2ca86dfd3b8bb8447eb7e733e7b1207de5bea6Virustotal results 33.33%Heodo
2022-01-215712826643.xlsxls 6232ba47b182fc60d16bf5b9d41f5dc614f2f348e83414c533df7ccbfb940885Virustotal results 38.98% Heodo
2022-01-21590165906178.xlsxls fe0ea8701f0d1d1b08de951b55324c38441ca10539fdac0274a95e293448f8f3Virustotal results 33.33% Heodo
2022-01-21556469669009881272.xlsxls 539a3855a176457a29262e61d738250050450a8a6adb2b1e9c8961a40a6cad57n/a Heodo
2022-01-21055347224491485594.xlsxls 053d625d162a5e1ad61603ca7d6dfd915cc175e991eaf3377a55b00853fabd07Virustotal results 30.00% Heodo
2022-01-214352739119883648.xlsxls 3b8dc8f1f75a66d545d45ee9f4160ea99cff4e8cc3f5b265ea27736a3eabf381n/a Heodo
2022-01-21401798038133941.xlsxls d26fa50d28f1d5fecfbd935c7c439e19ed0336097938d366f8d2cb3e8c039824Virustotal results 31.03% Heodo
2022-01-2115736205522768.xlsxls ccd9c6eef79a18615ba690a35d8a2f238ef0d6cf1e715536299b42f9e67357d6n/a Heodo
2022-01-219385926560749328514.xlsxls baa950d432aeb1593d886ae1afff9dbc40b6be9828af26c7d3c72431f4fdafffn/aSilentBuilder
2022-01-213850482001.xlsxls 4c2ddd629e265246f75b3e606e6bc899afb3c82020fc9a8f440e7793d6fed047n/a Heodo
2022-01-21222979076832483532.xlsxls c853e3e650463ca03b11d37a51d45c21e90abb85fe410073c435eba0d168d28cVirustotal results 28.33% Heodo
2022-01-2108451990234336.xlsxls 132c3baa8263b51b4a2847b2cd87c504be97ca43a01155b688d12d538c8ba7ccn/a Heodo
2022-01-219044272085.xlsxls c3deaaa5202a717b68951cf04c00e24200a91aeee0eceb58cc032a0471fbda36n/a Heodo
2022-01-2104162070912338175790.xlsxls bf377a8c8ae5170949a1ea2d2f8fb6d63a24839276a2fd63bc2a4525f1839a59n/a Heodo
2022-01-2121337236972470.xlsxls 01bab18ffb7052e8d67dc6447267ec775667a721592e609cf62dd08649d7a807n/a SilentBuilder
2022-01-21763660283841382644.xlsxls 9296f02a362c27b1e3a3b4119ede64ea52b6c0430fc70517e5146730c23c987dVirustotal results 22.41%Heodo
2022-01-2166425520164091199.xlsxls 561f1541d1ce60dd8a10c61c54f99d83e67ed86b0f645a6e564a99baa08f56b3Virustotal results 22.81% Heodo
2022-01-209113791684717387.xlsxls 2d259bd946fb388d1a7d75d28ba591aca3377e0ca8b49e0add414fe82b76f483n/aSilentBuilder
2022-01-204302351270174809946.xlsxls b0e176129f7c1c4ae1d31d420d8ecacaceb6c4682002848a769d98e4b0f21399n/a Heodo
2022-01-203271013901880089524.xlsxls 345965e8a8dc6b64c4fad5c48851aa3a2efb483d409eb259fb2ceaaec1f01dbcVirustotal results 22.41% Heodo
2022-01-20215213237329180784.xlsxls 5d36041450aacaf14696b91009e0d0724695c47586467dfad802076b3dd6adden/a Heodo
2022-01-201693835312320.xlsxls 536582463c4d7bc11c931e61b72316d539e0b4ed677451ec3ab8942f6a02a040Virustotal results 20.34%Heodo
2022-01-20139133218023.xlsxls 7758c1ef7b05f4e4e7e283eda2aba34801589c1ed656610c149a5b1a1a0b7fc3Virustotal results 22.03% Heodo
2022-01-2090518066701.xlsxls 48fee052f0fa5361ddc892d4768321a00e5c80adabc60654488ea8fc1ffa135fVirustotal results 22.03%Heodo
2022-01-208607631810995.xlsxls 26abe8e8297849c2a5721808548030b0abb405538a62e4a4d7bc0bf2a6279476n/a SilentBuilder
2022-01-2067587584474.xlsxls e099be7b0c6f692f34ca73c32d72d85e9f0465fcf630dc6d929ff4280496c27bVirustotal results 21.05%Heodo
2022-01-20689802675892704.xlsxls 6f95d343a882d6e800379be638a48804dfc956537ffcc06361e1f57fa2938808n/aHeodo
2022-01-20860029840957.xlsxls e33811b4dab432d10d50a8357ec88ab255590ac412e6a386ae3cee55c40df20en/a Heodo
2022-01-200180992529202.xlsxls 5d372591b1e8b3107e0e57ec3a38f1d2bfd43afef5f04bee85334f46f57d71bdVirustotal results 44.83%Heodo
2022-01-20987557060735.xlsxls b1ee7aa00b7884ed02a3f5ddc07419b6e8dd6e7382269d8cc5511f06431d5eafVirustotal results 28.81%Heodo
2022-01-201895446265.xlsxls 4102ee23d580a34ad9a1790ea81e7d9739cae27b843165e0daa30b9450585db4Virustotal results 23.73% Heodo
2022-01-202729460858115379.xlsxls 3ce617ed4d5a78ba123d6463b4c0c6b8e7ea29f0800761e9559c8bf182f21afeVirustotal results 30.51%Heodo
2022-01-2081064179669.xlsxls 23dc54d35406a09e9c7ebc21aed24c81434f62784b5a94ff6b762b39008d3a05Virustotal results 17.24%Heodo
2022-01-2012286809859.xlsxls e2f274d79ed0c5888801e6ec32ac82d1a083ee48fa511968a3fc435c1b5034den/a Heodo
2022-01-20959724536480.xlsxls db6061f8252704ee6f243e9d5792be120e6743cd366b4ae8f3b56d12b00866ffn/a Heodo
2022-01-207056882376773523.xlsxls 039adcca4d205850117d5b2348ceec561c57868668ab822350ef94a9b9467842Virustotal results 41.67%Heodo
2022-01-2098947258555637402120.xlsxls a871770ef1ba329147828026ab5d7d1d0edf83ea93fca2bb2d0faada51cf48e1n/a Heodo
2022-01-206201199726.xlsxls de3619e7da8c2b8e8ac00a4de35718d5bc5b618410c3b8948c24ee2f3cbcd593Virustotal results 45.00% Heodo
2022-01-206447136579247936.xlsxls 1406e7176ae6fb7aba0fb00e8658291ffeb38c2c9d844bdb47a8131c697342a5n/a Heodo
2022-01-20673759799780977890.xlsxls 8367f873c806ac8d56f4ddb2f158e4d559c67dc1d7b66ac3221cd28a2c8079f9n/aHeodo
2022-01-2024783687759666.xlsxls 88f602cd8f6b66886acb349720da52c3f5fdb367fe8a72f76812af27347cf32eVirustotal results 22.03%Heodo
2022-01-209058032105865219312.xlsxls 06be4ce3aeae146a062b983ce21dd42b08cba908a69958729e758bc41836735cVirustotal results 27.12%SilentBuilder
2022-01-201328065788383424.xlsxls 687e234c7b54e2590520375221eec756b91e6e03b05bbb313e8765457906c707Virustotal results 41.67%Heodo
2022-01-2021423928666.xlsxls b7c12da037688c432bf94d80c88811b29b1a4d379a84ff3d6e6ac95eecf15680Virustotal results 25.86%Heodo
2022-01-20211195060150.xlsxls b3973d991b4f3e3870404c40bf59257bd40f4207f10dd5a6c34a8d4e29e0f7eaVirustotal results 24.14%SilentBuilder
2022-01-203589765768711749.xlsxls 7f47c50d92a3da634e5e5810bf1d27d35cd110242f9148c1506e2da375a056e8Virustotal results 41.67% Heodo
2022-01-20765048166744.xlsxls fa39e0b7c55be8b0a1237b7757dfb1428554fbca8ae6e2e3f118494033ae6819n/a Heodo
2022-01-20391016318424908.xlsxls c964bd44cc4dfa14cdab694d620128715a62156b83e9aeb8496b88228937afbaVirustotal results 20.69% Heodo
2022-01-200225847491306.xlsxls 6bbb5397ac0522358d1f79729993bb746eed8844ad3a4ebae8f4baafb29a1285n/a Heodo
2022-01-20323278145916014.xlsxls ee212ba040e6857e56a3e2e8be38c52d0501f8a315b6c9599c63aa1490cd5ac3Virustotal results 25.42%Heodo
2022-01-2027063895571736583.xlsxls bfb6705f630bdd22900dbc04de2805a63b70dd5b36a8985087a1d4be51308fd9n/a SilentBuilder
2022-01-20540595789603.xlsxls 0a20a1b82fd605aaca4441f2be6c35ce6d486d0a55de5efda00150db78b3e6d4Virustotal results 38.98%Heodo
2022-01-2016727590402095048.xlsxls 6d56c4a60ec2d451673ce2ce76e1fd89e23fa89a05c872736d78e15020cabe71Virustotal results 20.34% Heodo
2022-01-20468286732465990.xlsxls 5c8cb7136b7f89772e79c0a2f6ead69434dbd7cd66ed030ca620de279c9b20a2Virustotal results 18.64%Heodo