URLhaus Database

You are currently viewing the URLhaus database entry for http://meintelfs.at/cgi-bin/m1UfIICGvipFMJ1XEsan3m/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1994212
URL: http://meintelfs.at/cgi-bin/m1UfIICGvipFMJ1XEsan3m/?i=1
URL Status:Offline
Host: meintelfs.at
Date added:2022-01-20 23:46:04 UTC
Last online:2022-01-21 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-20 23:47:27 UTC to abuse{at}hetzner[dot]com)
Takedown time:10 hours, 46 minutes Good (down since 2022-01-21 10:34:04 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-21285476459010075.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5Virustotal results 36.67%Heodo
2022-01-218932307805544054.xlsxls b443a467b699497e7eabc0c3bdf7bf6a86705a29944ec4ee8e249abb7d17828fn/a Heodo
2022-01-21288767929917373352.xlsxls 2f51046242d3bd4fc8a58e9ee765707e09c8efbc4bd58b302262b181e9960bf1n/a Heodo
2022-01-212930864022331101880.xlsxls a012d6c3ff9ac12c39dc7e32fb51008897bf8ec0ea7291f80801a2bcdf195cffVirustotal results 40.00%SilentBuilder
2022-01-217973985625034620209.xlsxls ce8ed57f03c2c3733b81f29e38332753051c9d5917d62760190dbc6b9dcebf45n/aSilentBuilder
2022-01-218761897878.xlsxls 08e9cfb42b052e00b6236416ac76a10be4787f0ec137401a92bce8fed5f84d48n/a Heodo
2022-01-2169954752095.xlsxls 17fd6dde30c8df304a856b8907a053772fe7300d8ca7f8164b72d0c5f5f51215n/a Heodo
2022-01-215244999375821285.xlsxls 7ecf0d5b556f400f2d98ef9f7e90373854ec0bda7732f5300223f9c600405235n/aHeodo
2022-01-212910624529684738.xlsxls db8baab6295830de9d3d9a59dc3b8c88a5de601deeaffaaa83bb6aa941e29b6cn/aHeodo
2022-01-21604415307844736.xlsxls ad583c4b877a37dbf913c275e1bce335b8e73817d61039a2a510e28f325d3e6cVirustotal results 31.67%Heodo
2022-01-217126641563271.xlsxls c1cf0024cf0ea94cafe10459912b6db4e4b66bb5b5a08fd061b4e72b227a63e4n/a Heodo
2022-01-2129146209001680.xlsxls f81b07415f482920feaf5352e72d1997c9a746dcde98208be75087efd6e4eab2n/a Heodo
2022-01-2133215130106714646183.xlsxls aaec559a9461b2ceb6da5a557186641e67370e83fddc9b23237f6f92c0e22fc3Virustotal results 33.93%SilentBuilder
2022-01-21981290816898158223.xlsxls 9ec21209d6b8b473f19ca78ea762fbaa3a555169ec4462aac5ee5bb1682a27efVirustotal results 31.67% Heodo
2022-01-21472197163923129425.xlsxls f8d6b99d4c2313eca81f477de5763048a8606e5e06adf6e6cd4dc0675f8b891dn/a Heodo
2022-01-21613780267232786.xlsxls 901080be2ebddd84578b1c86870709fc36d04777bb2a6baa69234b7aab046a1an/aHeodo
2022-01-2126460886365841269.xlsxls 4f0d506bde4b58d49d13c50470ec44e3cb2d9b084afa1186e857445ea66faccfn/a Heodo
2022-01-2194519571368.xlsxls 82dd39849f520450c56ac21901abda18f16d08294e0c9569e659ed9133781c7cn/a SilentBuilder
2022-01-21513998124423.xlsxls d209f6f33da26aefbc9f93e2bb3379d164efbc34f6ed2f38b4c8f19024098971n/a Heodo
2022-01-216677981043662355068.xlsxls 5ba1e7e7b37d9efbafaaa5049277348349998f11e6252edb0aa7fcc37bf94c99Virustotal results 20.34%Heodo
2022-01-214492418256.xlsxls 9fdb19b415f24dfd571c8289d1952dd827d1fb2a14e8776e495da67e5b38a176n/a Heodo
2022-01-2137447756051601297.xlsxls 17c8e59bb1ddb5280a54987b4ccdf4c98cfb72071d795eb10b5c50b7d32b9d8bn/aHeodo
2022-01-2109539077220252.xlsxls 8aa9a577a3bd2b2fb4b35339f5593a8a3f1c7635247b6fe78fbbb2983a8cdd4fn/a Heodo
2022-01-21965873694217687653.xlsxls 3d14cf1ac0e948d8d736d86a089783fc5dae612426213cbead14ec631ab46fddn/a Heodo
2022-01-21385392137222510702.xlsxls 3207aac6b983f0ef8828530480f6b8ab43e82076ceb30621052aa8a589787eecn/a 
2022-01-211041174826653984632.xlsxls 71ef7935e65760f4ec2fc7a2d24246ee5db75c28000b0a7303ec8ac0c9e98634Virustotal results 22.03% Heodo
2022-01-217882931203447299.xlsxls af86124d12773c861ad103419ab9f04ada33b95ff6919a1a9f9c4dfe2d49131fn/aHeodo
2022-01-20166942924562.xlsxls f968e46bcba287794933061736a68fae19dc3e579e41e54fe2712d4a8b3ed5a0Virustotal results 24.14% Heodo