URLhaus Database

You are currently viewing the URLhaus database entry for http://miturugi.main.jp/wp-includes/v3uNd45II43Jd4qsucjS/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1993252
URL: http://miturugi.main.jp/wp-includes/v3uNd45II43Jd4qsucjS/?i=1
URL Status:Offline
Host: miturugi.main.jp
Date added:2022-01-20 17:19:05 UTC
Last online:2022-07-13 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-20 17:20:13 UTC to abuse{at}gmo[dot]jp)
Takedown time:5 months, 23 days, 11 hours, 8 minutes Bad (down since 2022-07-13 04:28:51 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-212663630798355815219.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5n/aHeodo
2022-01-2190400838891.xlsxls 157742d33765bcf84671fcb841d4ac0f5a06a08c26fde8a84b5d90546ccf14fbn/a Heodo
2022-01-211100191428.xlsxls 2f51046242d3bd4fc8a58e9ee765707e09c8efbc4bd58b302262b181e9960bf1n/a Heodo
2022-01-21179391020019.xlsxls 245057c2c16d698dc5399ecd43ca39f9e0b35885a19cc42cd2650eb8e17d0c00n/a Heodo
2022-01-21875053263577536045.xlsxls 7efacaa6dacfe6bf20d27faaf86184458461e64165c615cede70b42cf913f8aen/aSilentBuilder
2022-01-21262628545743935.xlsxls c60a6861fc63f90b9f872e0bc131fa85f6af0daef37063eadf6d10890acf3bc0n/a Heodo
2022-01-21989135397722578224.xlsxls fd83649a426e706a363449d7dcb503e4bf5b59cc3ab5d5a346e4ed308ec2e2f3n/aHeodo
2022-01-21811244596901.xlsxls 2c9af469fcb89bb2e93d1ac70ce0bec912b78d5c3cbadccc3040c18dd03f5e41n/a Heodo
2022-01-2194395648362426100.xlsxls db8baab6295830de9d3d9a59dc3b8c88a5de601deeaffaaa83bb6aa941e29b6cn/aHeodo
2022-01-2175980859964483217.xlsxls 3b3b0dae2cead6975627f3494dfa305812872101ea5d5c90feaef0508edf975dn/a Heodo
2022-01-215726751588.xlsxls d314b3d22bcf83bf1f0dfb95189d8101cf360bfb61041246129f3f95f8de2402n/a Heodo
2022-01-2166960952386385513.xlsxls fe0ea8701f0d1d1b08de951b55324c38441ca10539fdac0274a95e293448f8f3n/a Heodo
2022-01-215129630691971888468.xlsxls aaec559a9461b2ceb6da5a557186641e67370e83fddc9b23237f6f92c0e22fc3n/aSilentBuilder
2022-01-210002508064076054.xlsxls 053d625d162a5e1ad61603ca7d6dfd915cc175e991eaf3377a55b00853fabd07n/a Heodo
2022-01-21358907554285.xlsxls 69b593eea6e0daa0631dd50e821d30622e6117fbb7e591c5e4b734722d6b5c4an/a Heodo
2022-01-213634205319.xlsxls 901080be2ebddd84578b1c86870709fc36d04777bb2a6baa69234b7aab046a1an/aHeodo
2022-01-2118799057597144.xlsxls ccd9c6eef79a18615ba690a35d8a2f238ef0d6cf1e715536299b42f9e67357d6n/a Heodo
2022-01-215493060841043.xlsxls 191356b25cb1dd2f17049101e27706fa159e0851776a2239b87a75435b22f63bn/a Heodo
2022-01-21174376737711.xlsxls eca323ddf5c863072e76cef170025ffcb611946ac3656f641ff0d2a0b17aa382n/a Heodo
2022-01-215299001676658108894.xlsxls 5d8d1d8cee7bfa315d6091608aaad9d7d72ffe649d9dd9d4583369298b45160cn/a Heodo
2022-01-21241150069926180858.xlsxls 3accfd2337522a6c68a1018979e3ac6603237e13aff0b962ae093662129d8609n/a SilentBuilder
2022-01-211562308664.xlsxls b0ce19982138298c81025b7e3c00dd0a05b1adda0331bf6e3e871b8d86c43bb4n/a Heodo
2022-01-213229732395539.xlsxls 1b6134b3db142025a7ebff094a48928647019264965031e089063502561e7ca5n/a Heodo
2022-01-210831409401.xlsxls 358e8e25ef848f0530a1b2094f471f68415b1b8f84cf21e6f9f1dbb774759140n/a SilentBuilder
2022-01-2191303762476004800.xlsxls 01bab18ffb7052e8d67dc6447267ec775667a721592e609cf62dd08649d7a807n/a SilentBuilder
2022-01-21357043492840356297.xlsxls cd97472d360862a86136445487d9dbb26ff6337cd1cc2817b3acf7afd49ed01cn/a Heodo
2022-01-211365086449138753968.xlsxls 561f1541d1ce60dd8a10c61c54f99d83e67ed86b0f645a6e564a99baa08f56b3n/a Heodo
2022-01-20956859828729.xlsxls f968e46bcba287794933061736a68fae19dc3e579e41e54fe2712d4a8b3ed5a0Virustotal results 24.14% Heodo
2022-01-2055259389596662077.xlsxls 4ae5de8f34f1d8cf899bbe86265b6a4fc23672ac6471628a671f40404ef5302bn/a Heodo
2022-01-2055801127479.xlsxls 39123bd1932920eca6749593bee628c405f8bb88114d8647a5d9db8b5914f46cn/a Heodo
2022-01-20262050570132.xlsxls 1aa1e797bd106f28bc73e4a09bd4d3eb7a13943ef42f06bda76c41fbca54d0ben/aHeodo
2022-01-204867863659057454048.xlsxls a72795a18fa2b90928f307e227b1f1a57590672870b3acc9e8cb0eb4d38bdbffn/a Heodo
2022-01-205364639752428425251.xlsxls 7758c1ef7b05f4e4e7e283eda2aba34801589c1ed656610c149a5b1a1a0b7fc3Virustotal results 22.03% Heodo
2022-01-20620191996358.xlsxls 0aa692cc9abe6360ac72502a9f27fb0e3d401153dfe067524c82c56b7e5f8625n/aHeodo
2022-01-2071526630026766938732.xlsxls 0f42b20f799c9d1956f810952da2492e135ddaf0c1eb3afeb975a49ae8c784efn/aHeodo
2022-01-200416834208686080.xlsxls 26abe8e8297849c2a5721808548030b0abb405538a62e4a4d7bc0bf2a6279476n/a SilentBuilder
2022-01-2025293428158416.xlsxls e099be7b0c6f692f34ca73c32d72d85e9f0465fcf630dc6d929ff4280496c27bn/aHeodo
2022-01-2034414783862513.xlsxls 67d5e8d2c3fcf5a17f0c7aad1b6f8963102dd00bdb62a3179605c3cdf659ab3cn/a Heodo
2022-01-2038259821670.xlsxls 5ba1e7e7b37d9efbafaaa5049277348349998f11e6252edb0aa7fcc37bf94c99n/aHeodo
2022-01-208183560364455957257.xlsxls 2dc878cbd56aa3817a893c118a8257f705517f72326c6d5424d2b498fcb0c54bn/aHeodo
2022-01-20416375673192795.xlsxls b0255e42b75c0e2899d56ee898a141bb6f4f63c23e6fad05fbe0f4fe08534d4dVirustotal results 20.34%SilentBuilder
2022-01-2078080178727151307677.xlsxls b12e86184ea506fa554f7e29ee00586c73545c1af7f451eb98f49a2ba215b604Virustotal results 35.59% Heodo
2022-01-207889031067966183690.xlsxls 88c52c4d1940f16219506b7c10ded1fa314e5f05e0aa03cf441a7dee30f41aa6Virustotal results 22.41%Heodo
2022-01-20220004712312315.xlsxls 3ce617ed4d5a78ba123d6463b4c0c6b8e7ea29f0800761e9559c8bf182f21afeVirustotal results 30.51%Heodo
2022-01-2024906013805416.xlsxls dac93a5dfa21730566aa2899863ef7b65a992bc7934d64f771038391cbd39529n/a Heodo
2022-01-201790883100123182746.xlsxls a2f32b5bfd78eeee7b3d4d44b4da8c8aeb98ab866a7998e2adaabc80cd1247a4n/aHeodo
2022-01-203235481969.xlsxls 039adcca4d205850117d5b2348ceec561c57868668ab822350ef94a9b9467842Virustotal results 41.67%Heodo
2022-01-2099439467481106714.xlsxls a871770ef1ba329147828026ab5d7d1d0edf83ea93fca2bb2d0faada51cf48e1n/a Heodo
2022-01-206183806483236.xlsxls d0e970149a72b878303b425cbeb058aac6d74f1b94b2c3e150e40ea7da2e9072Virustotal results 22.22% Heodo
2022-01-20175993882959477567.xlsxls 931c80255eb9df794e3bcf120d96baaf081417df4dbfc06a843d3999c9da8df9Virustotal results 27.59% Heodo
2022-01-2006252158901604574.xlsxls 8367f873c806ac8d56f4ddb2f158e4d559c67dc1d7b66ac3221cd28a2c8079f9n/aHeodo
2022-01-20886345517882742.xlsxls c8135ea47a8ccaec467c69c25086fa239e1ed6a2c7ad2494e9baa6b024f7242fn/aHeodo
2022-01-20485059075167453.xlsxls da69822f904bfa19d91103dea07f20d35d09cf37a2c76f4d45317d26728de3edVirustotal results 28.81% Heodo
2022-01-206231831819.xlsxls 687e234c7b54e2590520375221eec756b91e6e03b05bbb313e8765457906c707Virustotal results 41.67%Heodo