URLhaus Database

You are currently viewing the URLhaus database entry for https://greedyparrot.in/ot4m/nb5o6XYmtTp1UM/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1993093
URL: https://greedyparrot.in/ot4m/nb5o6XYmtTp1UM/?i=1
URL Status:Offline
Host: greedyparrot.in
Date added:2022-01-20 16:13:04 UTC
Last online:2022-02-02 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-02-02 09:06:09 UTC to abuse{at}cloudflare[dot]com)
Takedown time:13 days, 3 hours, 0 minutes Bad (down since 2022-02-02 19:14:36 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-2167080264385369690.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5n/aHeodo
2022-01-21165337817881723.xlsxls aba8e5024172cc0cd240eda2c379e91825cb922f0c5d56d82a560dcb15eef097n/a Heodo
2022-01-215332318927878473.xlsxls 5a6ae409ad46c453172d047a1b1d7685cbdcc317653d90c6a968509d1c2229b6n/a Heodo
2022-01-212061011881273935.xlsxls 7efacaa6dacfe6bf20d27faaf86184458461e64165c615cede70b42cf913f8aeVirustotal results 38.33%SilentBuilder
2022-01-21481509633308027326.xlsxls fc79dd33ef2208cbe871b54938ff2ad295a34cb9a720e4995853dfed5761db18n/a SilentBuilder
2022-01-21076897886506.xlsxls d1f5ad731dbf6263cbcee95b142ffb0ebc190205ae58d4a4948bb3e5ad09e4bbn/a SilentBuilder
2022-01-212787782952233384549.xlsxls a3d7cb606d8f77987119021ad7d89fac7d02668d86ff90db65c87e54a15e73fbn/a Heodo
2022-01-210530866200.xlsxls 13c3fec523cfe8ac14a7e78a8e2ca86dfd3b8bb8447eb7e733e7b1207de5bea6n/aHeodo
2022-01-218162208319250.xlsxls 6232ba47b182fc60d16bf5b9d41f5dc614f2f348e83414c533df7ccbfb940885Virustotal results 38.98% Heodo
2022-01-212345440198656489.xlsxls 702e9fcc889535f1c31e1bad34de6e4456520ca0687f9240a318140924bed3cdn/a Heodo
2022-01-217966352787334468455.xlsxls 539a3855a176457a29262e61d738250050450a8a6adb2b1e9c8961a40a6cad57n/a Heodo
2022-01-2114215804645.xlsxls 3b8dc8f1f75a66d545d45ee9f4160ea99cff4e8cc3f5b265ea27736a3eabf381n/a Heodo
2022-01-21799532503349956235.xlsxls d26fa50d28f1d5fecfbd935c7c439e19ed0336097938d366f8d2cb3e8c039824n/a Heodo
2022-01-21467265339154846.xlsxls 9eb1535c5aaefb0a3a2b583a4aad8ef65f55b805294dca339ab2f8e632ebffedn/a Heodo
2022-01-2152110941809934075816.xlsxls afb4a25125020d107aa065816ff0c80dfbc85d700a654a29b73aa8143c2e909fn/a Heodo
2022-01-21539041209488999.xlsxls 2cb043937c5838c3f91d3955127cc444ff420b74448d38395ab177b8369753d0n/a Heodo
2022-01-2175395062047395179.xlsxls 278e2b44764f4223799867c585d886b7fe57313055f5f82d983f7e13e1a49aedn/a Heodo
2022-01-218542532178098.xlsxls c853e3e650463ca03b11d37a51d45c21e90abb85fe410073c435eba0d168d28cn/a Heodo
2022-01-2103073665871555.xlsxls c3deaaa5202a717b68951cf04c00e24200a91aeee0eceb58cc032a0471fbda36n/a Heodo
2022-01-21041535267521193964.xlsxls e57baf9289180802e131633ce599fd55a0a67db3423c45d62f4a88fbf94a0874n/a Heodo
2022-01-21365754508012366029.xlsxls 46e07bbc26b054bd482b53d0528f74edc997f805951abdafb92a26dc38b7bf64n/a Heodo
2022-01-219761029885554176.xlsxls 9296f02a362c27b1e3a3b4119ede64ea52b6c0430fc70517e5146730c23c987dVirustotal results 22.41%Heodo
2022-01-219033544226464341489.xlsxls 561f1541d1ce60dd8a10c61c54f99d83e67ed86b0f645a6e564a99baa08f56b3n/a Heodo
2022-01-208282780760032.xlsxls 88c13197081731462e05ef64b1c9abbdc1b85e0e573437506270137fb7b735d8Virustotal results 22.03%Heodo
2022-01-2083717935836973.xlsxls b0e176129f7c1c4ae1d31d420d8ecacaceb6c4682002848a769d98e4b0f21399n/a Heodo
2022-01-20859412557914807.xlsxls 345965e8a8dc6b64c4fad5c48851aa3a2efb483d409eb259fb2ceaaec1f01dbcVirustotal results 22.41% Heodo
2022-01-202573694338485560057.xlsxls 536582463c4d7bc11c931e61b72316d539e0b4ed677451ec3ab8942f6a02a040Virustotal results 20.34%Heodo
2022-01-20803057029677.xlsxls 514af468cf8a54d3ba4fd08208de3119721d9a9b5e4d2c96373add4d3dd7688dn/a Heodo
2022-01-203586969302.xlsxls 7758c1ef7b05f4e4e7e283eda2aba34801589c1ed656610c149a5b1a1a0b7fc3Virustotal results 22.03% Heodo
2022-01-20302003963141.xlsxls cc087101e48ffeece56deba54e6da814a6d35e371396b07cc4e10b121aac9907n/aHeodo
2022-01-206520129597181.xlsxls 48fee052f0fa5361ddc892d4768321a00e5c80adabc60654488ea8fc1ffa135fVirustotal results 22.41%Heodo
2022-01-204755679912.xlsxls 26abe8e8297849c2a5721808548030b0abb405538a62e4a4d7bc0bf2a6279476n/a SilentBuilder
2022-01-209065739483.xlsxls 6f95d343a882d6e800379be638a48804dfc956537ffcc06361e1f57fa2938808Virustotal results 22.03%Heodo
2022-01-20118300056417.xlsxls ab4456f73cd0d49bd6c2dc5553a33ff128bc765cb07cd47f8e0619d01735f966Virustotal results 22.03%Heodo
2022-01-20188391493528205.xlsxls e33811b4dab432d10d50a8357ec88ab255590ac412e6a386ae3cee55c40df20en/a Heodo
2022-01-2086432415501699998.xlsxls e8499e295f03f08e5b88e949410d47da75c2088340bfc860fa5c9d1e1ec915e9Virustotal results 41.67% Heodo
2022-01-2061185199737339.xlsxls 43a573dc9dd0dc79dcf228467e8e6820f4a4f8bf344660ea43eb11bb7b3c93f7Virustotal results 21.43%Heodo
2022-01-2042213793214933023.xlsxls da9d3b84063bde0697546e7a9b3e2ab5f8283698dfb032f76018f28b367146f4Virustotal results 38.98%Heodo
2022-01-20590297416544.xlsxls 402b387ff9eaca12395e5ea30d7252c77d49ce1d1478784bdb329641136043ean/aHeodo
2022-01-20279796770463203864.xlsxls 518a575dd29fa59a36c26d6e3805495f6482eba8a375f084d332e9f1ea5e5d71Virustotal results 40.68% Heodo
2022-01-20659453469418780.xlsxls a2f32b5bfd78eeee7b3d4d44b4da8c8aeb98ab866a7998e2adaabc80cd1247a4n/aHeodo
2022-01-204213979101568867.xlsxls c962232ce7c3c2cff3baa81deffa085cab3750504b71d870c81685ca3283dd08n/a Heodo
2022-01-2083134825407942941219.xlsxls 3d702c221263341fa14edf51b4d239cc665e2db56c4d1a7c5dbaa80065f182ecVirustotal results 43.33%Heodo
2022-01-202420266559698152237.xlsxls d507a6a85d0f208c8662e6cde4d1bd419daefd9b5644146e4a51546fa37131abVirustotal results 24.14% Heodo
2022-01-2057104027078664868074.xlsxls d16d836fa1d7bcd99b7a2b65ca2d4deb2a54b552ecac9141c735e793c23a2a3fn/a Heodo
2022-01-208332725416.xlsxls a38227249265731f1e9195e22b2ba517aade08d43d5a67117592cf0a5f8c3b9bVirustotal results 24.14% Heodo
2022-01-20086405883225629.xlsxls 92f65a0fe643c1d601633944790e1263b9dc30881b77636627c624581aac4acbn/a Heodo
2022-01-2085177428719.xlsxls bcfa7cbaded9c6144689692a9ea193431c16e7bf18e7ab361ef65fce375d93ben/aSilentBuilder
2022-01-20620493258627847356.xlsxls f364484e6d3e00f20019e36759be54c6c36fab26ca0d5dbe5819354754423a1cVirustotal results 22.41% Heodo
2022-01-2006667277789874.xlsxls b24ab935f6d7ae64a036e919f70a63590db56ebd6dea1660d89827851be32e93Virustotal results 20.69% Heodo
2022-01-2007894627818704.xlsxls a3182153bbc02b08e54fa468a6a470ede9822cc612dfd6c8f523b9cb5cd4984en/aHeodo