URLhaus Database

You are currently viewing the URLhaus database entry for http://salamrejo-selopampang.temanggungkab.go.id/assets/fRKKEQ1fahWTZVebhLirgZTVz/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1993708
URL: http://salamrejo-selopampang.temanggungkab.go.id/assets/fRKKEQ1fahWTZVebhLirgZTVz/?i=1
URL Status:Offline
Host: salamrejo-selopampang.temanggungkab.go.id
Date added:2022-01-20 20:15:06 UTC
Last online:2022-02-06 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-20 20:16:11 UTC to noor[dot]ayyub{at}temanggungkab[dot]go[dot]id)
Takedown time:16 days, 16 hours, 47 minutes Bad (down since 2022-02-06 13:03:50 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-21711033555798345251.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5Virustotal results 36.67%Heodo
2022-01-2198515267637128950511.xlsxls 3ca3bcd5771a06938cc8e8c44cd2c85b794376401b469fad7e5d4b513449fa27n/a Heodo
2022-01-21720122119297914.xlsxls aba8e5024172cc0cd240eda2c379e91825cb922f0c5d56d82a560dcb15eef097n/a Heodo
2022-01-21159496460294806.xlsxls 5a6ae409ad46c453172d047a1b1d7685cbdcc317653d90c6a968509d1c2229b6n/a Heodo
2022-01-2194906710950.xlsxls b8fef9073b247386d53e1eba4723994cf6300b257f2b637cb1eccead6b68904cn/a Heodo
2022-01-218685678073.xlsxls fc79dd33ef2208cbe871b54938ff2ad295a34cb9a720e4995853dfed5761db18n/a SilentBuilder
2022-01-212002794580605543579.xlsxls d1f5ad731dbf6263cbcee95b142ffb0ebc190205ae58d4a4948bb3e5ad09e4bbn/a SilentBuilder
2022-01-2139626717997925558.xlsxls c3496d8e7d2ffbb343cb44911bd859ceb08cbac8eb09ebfc58ce6cb1208f2d8eVirustotal results 28.00% Heodo
2022-01-2112574448979211521.xlsxls 6027b0c0ed3191c277bd14f9bfca0e7110c5b306dba6bdc3e5bf123d0b31e6aen/a Heodo
2022-01-2166623146495927.xlsxls 13c3fec523cfe8ac14a7e78a8e2ca86dfd3b8bb8447eb7e733e7b1207de5bea6n/aHeodo
2022-01-2137308643862665007338.xlsxls 6232ba47b182fc60d16bf5b9d41f5dc614f2f348e83414c533df7ccbfb940885n/a Heodo
2022-01-218606170937274649047.xlsxls fe0ea8701f0d1d1b08de951b55324c38441ca10539fdac0274a95e293448f8f3n/a Heodo
2022-01-214243897815.xlsxls 539a3855a176457a29262e61d738250050450a8a6adb2b1e9c8961a40a6cad57n/a Heodo
2022-01-21154063626517.xlsxls 3b8dc8f1f75a66d545d45ee9f4160ea99cff4e8cc3f5b265ea27736a3eabf381n/a Heodo
2022-01-217575299076697231.xlsxls 2847438e4b48ee5f630b8d0a3d5361bf4071aa308d8999a69cba995fa548add5n/aSilentBuilder
2022-01-2124512715933.xlsxls 9eb1535c5aaefb0a3a2b583a4aad8ef65f55b805294dca339ab2f8e632ebffedn/a Heodo
2022-01-217130771523.xlsxls afb4a25125020d107aa065816ff0c80dfbc85d700a654a29b73aa8143c2e909fn/a Heodo
2022-01-2172893346196576.xlsxls 2cb043937c5838c3f91d3955127cc444ff420b74448d38395ab177b8369753d0Virustotal results 25.00% Heodo
2022-01-2165596457361.xlsxls 4c2ddd629e265246f75b3e606e6bc899afb3c82020fc9a8f440e7793d6fed047n/a Heodo
2022-01-21378631258966.xlsxls 3accfd2337522a6c68a1018979e3ac6603237e13aff0b962ae093662129d8609n/a SilentBuilder
2022-01-219944050881.xlsxls 4520398e8aeabb1aed9cd4899a2ac014545d9ad9383959288cf2470f9c1c4731n/aHeodo
2022-01-2136843330394.xlsxls 1b6134b3db142025a7ebff094a48928647019264965031e089063502561e7ca5n/a Heodo
2022-01-2120045983786570085620.xlsxls bf377a8c8ae5170949a1ea2d2f8fb6d63a24839276a2fd63bc2a4525f1839a59Virustotal results 24.56% Heodo
2022-01-21259233848811786.xlsxls 01bab18ffb7052e8d67dc6447267ec775667a721592e609cf62dd08649d7a807n/a SilentBuilder
2022-01-212737745723083337767.xlsxls cb72aea24f710a0d9b643de1e759ace18205bc20aa8aa7a91ecf20e556cad41fVirustotal results 22.03% Heodo
2022-01-2168572348776706697.xlsxls 2d259bd946fb388d1a7d75d28ba591aca3377e0ca8b49e0add414fe82b76f483Virustotal results 20.34%SilentBuilder
2022-01-208739414340.xlsxls 2181997083632b17484474d7152e18c8a65175b823c871b164d15d2e20a8ae16n/aSilentBuilder
2022-01-208397759393678.xlsxls 345965e8a8dc6b64c4fad5c48851aa3a2efb483d409eb259fb2ceaaec1f01dbcVirustotal results 22.41% Heodo
2022-01-2087309190021352324095.xlsxls 3e36c6f45c9f9361f6c28f811cd2048a727e022281815b02c021811cab7ed01en/a Heodo
2022-01-209154265286.xlsxls 7758c1ef7b05f4e4e7e283eda2aba34801589c1ed656610c149a5b1a1a0b7fc3Virustotal results 22.03% Heodo
2022-01-205311268763675.xlsxls cc087101e48ffeece56deba54e6da814a6d35e371396b07cc4e10b121aac9907n/aHeodo
2022-01-20754478315294734.xlsxls 48fee052f0fa5361ddc892d4768321a00e5c80adabc60654488ea8fc1ffa135fVirustotal results 22.41%Heodo
2022-01-20989086870081.xlsxls 0450c09d5fe3db81273bb016f057664f805ea0dde2c1c53ad512324c191ac2a5Virustotal results 21.05% Heodo
2022-01-208412548676498079.xlsxls 6f95d343a882d6e800379be638a48804dfc956537ffcc06361e1f57fa2938808Virustotal results 22.03%Heodo
2022-01-205412923794482364.xlsxls 51dc452edd7c975ac8f632ad888d6cada4233c19aa061416076abbdb2ac596b4n/aHeodo
2022-01-205115236488573898935.xlsxls ab4456f73cd0d49bd6c2dc5553a33ff128bc765cb07cd47f8e0619d01735f966n/aHeodo
2022-01-207079354680944.xlsxls e8499e295f03f08e5b88e949410d47da75c2088340bfc860fa5c9d1e1ec915e9n/a Heodo
2022-01-2044934195640.xlsxls 06be4ce3aeae146a062b983ce21dd42b08cba908a69958729e758bc41836735cVirustotal results 27.12%SilentBuilder
2022-01-2041551429601.xlsxls 5d6ba77bfd649ae36a50df3bd458879fce4c5fb04a2dfbfbd64c927d086e94cdn/aHeodo