URLhaus Database

You are currently viewing the URLhaus database entry for http://www.snkre.com/wp-content/GTTwhHiWuVOfKuCfuKjTVAggJppLB/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1993722
URL: http://www.snkre.com/wp-content/GTTwhHiWuVOfKuCfuKjTVAggJppLB/?i=1
URL Status:Offline
Host: www.snkre.com
Date added:2022-01-20 20:20:05 UTC
Last online:2022-01-24 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-24 08:16:08 UTC to abuse{at}cloudflare[dot]com)
Takedown time:4 days, 15 hours, 19 minutes Bad (down since 2022-01-25 11:42:29 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-216296153046767.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5n/aHeodo
2022-01-210810769915984272459.xlsxls e59173f043483afd41faf0edf28ff91047d48ddbcabe29efe43bbc7d238c9861n/a Heodo
2022-01-21357389132392829602.xlsxls b8fef9073b247386d53e1eba4723994cf6300b257f2b637cb1eccead6b68904cVirustotal results 40.68% Heodo
2022-01-21809956054099.xlsxls f35abc3dbc3faa333da128234f2b7778969e1ea5f8ef088498cc8ecf325f8a9cn/a SilentBuilder
2022-01-2178527046818352.xlsxls fc79dd33ef2208cbe871b54938ff2ad295a34cb9a720e4995853dfed5761db18n/a SilentBuilder
2022-01-214651273855.xlsxls 29111d8e5e8306e76660db292e7232ab39e901955014eede21e912c931a09b5fn/aHeodo
2022-01-213477810121.xlsxls d1f5ad731dbf6263cbcee95b142ffb0ebc190205ae58d4a4948bb3e5ad09e4bbn/a SilentBuilder
2022-01-2165247951181284.xlsxls 2c9af469fcb89bb2e93d1ac70ce0bec912b78d5c3cbadccc3040c18dd03f5e41n/a Heodo
2022-01-2159546259044887.xlsxls a3d7cb606d8f77987119021ad7d89fac7d02668d86ff90db65c87e54a15e73fbn/a Heodo
2022-01-21149759387206292911.xlsxls e06d794800a6c8e29eaee2ec0e2ccd9f60b00c7d6c9b4a80ce605a4c156f9982n/aHeodo
2022-01-215212942324969593.xlsxls 71b3ba908e6fad97ab7e14ce79d7e0c313fba439d916a3b20a8ec2040e30ed87n/a Heodo
2022-01-2108123032566910999805.xlsxls fe0ea8701f0d1d1b08de951b55324c38441ca10539fdac0274a95e293448f8f3n/a Heodo
2022-01-2119912431507316955.xlsxls 539a3855a176457a29262e61d738250050450a8a6adb2b1e9c8961a40a6cad57n/a Heodo
2022-01-211239825754308.xlsxls 9ad38c251b929edaf974d16b81d02e8b87ca16da14c4aa4eea44df09aa210c69n/aHeodo
2022-01-21980065617654636.xlsxls 3b8dc8f1f75a66d545d45ee9f4160ea99cff4e8cc3f5b265ea27736a3eabf381n/a Heodo
2022-01-2131753894708995820437.xlsxls d26fa50d28f1d5fecfbd935c7c439e19ed0336097938d366f8d2cb3e8c039824Virustotal results 31.03% Heodo
2022-01-217321331017.xlsxls ccd9c6eef79a18615ba690a35d8a2f238ef0d6cf1e715536299b42f9e67357d6n/a Heodo
2022-01-21731174560605785644.xlsxls baa950d432aeb1593d886ae1afff9dbc40b6be9828af26c7d3c72431f4fdafffn/aSilentBuilder
2022-01-211249066249265.xlsxls 4c2ddd629e265246f75b3e606e6bc899afb3c82020fc9a8f440e7793d6fed047n/a Heodo
2022-01-2137627616186.xlsxls 278e2b44764f4223799867c585d886b7fe57313055f5f82d983f7e13e1a49aedn/a Heodo
2022-01-2194614232158561904.xlsxls 3accfd2337522a6c68a1018979e3ac6603237e13aff0b962ae093662129d8609n/a SilentBuilder
2022-01-2115422647270.xlsxls 4520398e8aeabb1aed9cd4899a2ac014545d9ad9383959288cf2470f9c1c4731n/aHeodo
2022-01-219249453042184.xlsxls 1b6134b3db142025a7ebff094a48928647019264965031e089063502561e7ca5Virustotal results 22.03% Heodo
2022-01-2170202790437349.xlsxls 46e07bbc26b054bd482b53d0528f74edc997f805951abdafb92a26dc38b7bf64n/a Heodo
2022-01-219061477838573.xlsxls 01bab18ffb7052e8d67dc6447267ec775667a721592e609cf62dd08649d7a807Virustotal results 22.03% SilentBuilder
2022-01-21790125269978.xlsxls 9296f02a362c27b1e3a3b4119ede64ea52b6c0430fc70517e5146730c23c987dVirustotal results 22.41%Heodo
2022-01-212250426293.xlsxls 2d259bd946fb388d1a7d75d28ba591aca3377e0ca8b49e0add414fe82b76f483n/aSilentBuilder
2022-01-209368785952.xlsxls 2181997083632b17484474d7152e18c8a65175b823c871b164d15d2e20a8ae16Virustotal results 22.03%SilentBuilder
2022-01-207608871658136.xlsxls b0e176129f7c1c4ae1d31d420d8ecacaceb6c4682002848a769d98e4b0f21399n/a Heodo
2022-01-2065997994500.xlsxls 5d36041450aacaf14696b91009e0d0724695c47586467dfad802076b3dd6adden/a Heodo
2022-01-2016226692118224718192.xlsxls 536582463c4d7bc11c931e61b72316d539e0b4ed677451ec3ab8942f6a02a040n/aHeodo
2022-01-2034320042080.xlsxls 3e36c6f45c9f9361f6c28f811cd2048a727e022281815b02c021811cab7ed01en/a Heodo
2022-01-2065549902764542014.xlsxls afc76f4aa05482102ea34e10b3d2397db55857510ce6ae3dcfe05e29cc92bde3n/a Heodo
2022-01-206804794221897712.xlsxls cc087101e48ffeece56deba54e6da814a6d35e371396b07cc4e10b121aac9907Virustotal results 22.03%Heodo
2022-01-20718579712717036295.xlsxls 48fee052f0fa5361ddc892d4768321a00e5c80adabc60654488ea8fc1ffa135fVirustotal results 22.03%Heodo
2022-01-2061794574404320408.xlsxls 26abe8e8297849c2a5721808548030b0abb405538a62e4a4d7bc0bf2a6279476n/a SilentBuilder
2022-01-203675908983371.xlsxls 6f95d343a882d6e800379be638a48804dfc956537ffcc06361e1f57fa2938808Virustotal results 22.03%Heodo
2022-01-20308033842961.xlsxls 51dc452edd7c975ac8f632ad888d6cada4233c19aa061416076abbdb2ac596b4n/aHeodo
2022-01-2060626666965062408206.xlsxls e33811b4dab432d10d50a8357ec88ab255590ac412e6a386ae3cee55c40df20en/a Heodo
2022-01-2064054236840506.xlsxls caa57a0d7208775ee50b80b88384a83804e8b132229162b88db9a3a57abb7acbn/aHeodo
2022-01-2084727355802.xlsxls 5d372591b1e8b3107e0e57ec3a38f1d2bfd43afef5f04bee85334f46f57d71bdn/aHeodo
2022-01-2054737695941407.xlsxls 5c8cb7136b7f89772e79c0a2f6ead69434dbd7cd66ed030ca620de279c9b20a2Virustotal results 18.64%Heodo