URLhaus Database

You are currently viewing the URLhaus database entry for https://getiftech.org/NY/Pin_files/m9bc8YRyL4BthuAji2o8UeO/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1993897
URL: https://getiftech.org/NY/Pin_files/m9bc8YRyL4BthuAji2o8UeO/?i=1
URL Status:Offline
Host: getiftech.org
Date added:2022-01-20 21:28:04 UTC
Last online:2022-02-12 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-02-11 05:11:09 UTC to abuse{at}cloudflare[dot]com)
Takedown time:1 month, 9 days, 0 hours, 47 minutes Bad (down since 2022-02-28 22:18:37 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-02-2065407695098611168.xlsunknown 31003e6ca99bb729570645fab42de970f80290cdcc8cf262acd5502490be069an/a 
2022-01-2107488348531448433.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5n/aHeodo
2022-01-2121834446256351.xlsxls e59173f043483afd41faf0edf28ff91047d48ddbcabe29efe43bbc7d238c9861n/a Heodo
2022-01-21611112865253.xlsxls b8fef9073b247386d53e1eba4723994cf6300b257f2b637cb1eccead6b68904cVirustotal results 40.68% Heodo
2022-01-218827007538102.xlsxls 7efacaa6dacfe6bf20d27faaf86184458461e64165c615cede70b42cf913f8aeVirustotal results 38.33%SilentBuilder
2022-01-2153525994592277658.xlsxls fc79dd33ef2208cbe871b54938ff2ad295a34cb9a720e4995853dfed5761db18n/a SilentBuilder
2022-01-2189917979654965736.xlsxls 29111d8e5e8306e76660db292e7232ab39e901955014eede21e912c931a09b5fn/aHeodo
2022-01-2144552935660354586100.xlsxls ab4456f73cd0d49bd6c2dc5553a33ff128bc765cb07cd47f8e0619d01735f966Virustotal results 22.03%Heodo
2022-01-2161563750028.xlsxls 2c9af469fcb89bb2e93d1ac70ce0bec912b78d5c3cbadccc3040c18dd03f5e41n/a Heodo
2022-01-21850076180545.xlsxls a3d7cb606d8f77987119021ad7d89fac7d02668d86ff90db65c87e54a15e73fbn/a Heodo
2022-01-2190792818458.xlsxls d314b3d22bcf83bf1f0dfb95189d8101cf360bfb61041246129f3f95f8de2402n/a Heodo
2022-01-21540745395070413.xlsxls 702e9fcc889535f1c31e1bad34de6e4456520ca0687f9240a318140924bed3cdn/a Heodo
2022-01-219121283904261520758.xlsxls 539a3855a176457a29262e61d738250050450a8a6adb2b1e9c8961a40a6cad57n/a Heodo
2022-01-216817133879555.xlsxls 9ad38c251b929edaf974d16b81d02e8b87ca16da14c4aa4eea44df09aa210c69Virustotal results 32.20%Heodo
2022-01-21667017553767724039.xlsxls fd0a745d8df31045d5044a9ad6c5efb7c678826f14a463a5cf2abf91cd0c1014n/a SilentBuilder
2022-01-2178122280011150.xlsxls 2847438e4b48ee5f630b8d0a3d5361bf4071aa308d8999a69cba995fa548add5n/aSilentBuilder
2022-01-214650487708650.xlsxls ccd9c6eef79a18615ba690a35d8a2f238ef0d6cf1e715536299b42f9e67357d6n/a Heodo
2022-01-21127534166889144.xlsxls baa950d432aeb1593d886ae1afff9dbc40b6be9828af26c7d3c72431f4fdafffn/aSilentBuilder
2022-01-2159013860165910304.xlsxls 2cb043937c5838c3f91d3955127cc444ff420b74448d38395ab177b8369753d0n/a Heodo
2022-01-2172554557462139.xlsxls 278e2b44764f4223799867c585d886b7fe57313055f5f82d983f7e13e1a49aedn/a Heodo
2022-01-21625245002764.xlsxls 3accfd2337522a6c68a1018979e3ac6603237e13aff0b962ae093662129d8609n/a SilentBuilder
2022-01-2173168854999377917.xlsxls c3deaaa5202a717b68951cf04c00e24200a91aeee0eceb58cc032a0471fbda36Virustotal results 22.03% Heodo
2022-01-2180173251305370729.xlsxls 1b6134b3db142025a7ebff094a48928647019264965031e089063502561e7ca5Virustotal results 22.03% Heodo
2022-01-21010138908911.xlsxls e57baf9289180802e131633ce599fd55a0a67db3423c45d62f4a88fbf94a0874n/a Heodo
2022-01-213663762949.xlsxls 46e07bbc26b054bd482b53d0528f74edc997f805951abdafb92a26dc38b7bf64n/a Heodo
2022-01-21939002714566072.xlsxls 9296f02a362c27b1e3a3b4119ede64ea52b6c0430fc70517e5146730c23c987dVirustotal results 22.41%Heodo
2022-01-214488207090769.xlsxls 561f1541d1ce60dd8a10c61c54f99d83e67ed86b0f645a6e564a99baa08f56b3Virustotal results 22.81% Heodo
2022-01-20166600535010380632.xlsxls 88c13197081731462e05ef64b1c9abbdc1b85e0e573437506270137fb7b735d8n/aHeodo
2022-01-20031373508720486000.xlsxls 2181997083632b17484474d7152e18c8a65175b823c871b164d15d2e20a8ae16n/aSilentBuilder
2022-01-20046564630595565429.xlsxls 39123bd1932920eca6749593bee628c405f8bb88114d8647a5d9db8b5914f46cn/a Heodo
2022-01-20121964056570.xlsxls c3782f393e6dca8cbded5a7bbb73789792cd1bf807f4f71cd863b12992beda95n/aHeodo
2022-01-20692704829855434927.xlsxls a72795a18fa2b90928f307e227b1f1a57590672870b3acc9e8cb0eb4d38bdbffn/a Heodo
2022-01-206957216864.xlsxls b069423ac3753a4878bd652c9c55362c541db7529bd0b294ddc47bb7c6475946n/a Heodo
2022-01-2036734762732.xlsxls 8a39d34f5c3133db2f6137b02545e312f05bbdabceda4bd830948380fa4c98c7n/a Heodo
2022-01-203154446669.xlsxls 3b63534dcaf71bdf8293d2a3ce3310a02d2eda37deac68d5ccbdc89cfbc8f408n/aHeodo
2022-01-203200719813022.xlsxls 817f4c96e056390228a3d9ce57239ad521627a3617b13e4043dc99c91569ffccn/a Heodo
2022-01-2004411436057075.xlsxls 8f7d79c3f9fe1dd44fd2a164a1dd8713fa37b21bcb1cc8dc6b94ee8d47bd2896n/a Heodo