URLhaus Database

You are currently viewing the URLhaus database entry for http://bispark-led.com/wp-includes/TLT4dtjkAXNJibbcRp7r1Sc28MMloq/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1994462
URL: http://bispark-led.com/wp-includes/TLT4dtjkAXNJibbcRp7r1Sc28MMloq/?i=1
URL Status:Offline
Host: bispark-led.com
Date added:2022-01-21 02:14:04 UTC
Last online:2022-01-22 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-21 02:15:23 UTC to abuse{at}cloudflare[dot]com)
Takedown time:1 day, 23 hours, 37 minutes Poor (down since 2022-01-23 01:52:24 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-21371462319062.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5n/aHeodo
2022-01-2191920959128660466032.xlsxls b11d267860a7dfa12d415540e8d6b6e4b7813b2a4d633c966ce2c405a20b9a95n/a Heodo
2022-01-21952994958294.xlsxls 2f51046242d3bd4fc8a58e9ee765707e09c8efbc4bd58b302262b181e9960bf1Virustotal results 40.00% Heodo
2022-01-2195061283793228.xlsxls 245057c2c16d698dc5399ecd43ca39f9e0b35885a19cc42cd2650eb8e17d0c00n/a Heodo
2022-01-2136095247488642023.xlsxls ce8ed57f03c2c3733b81f29e38332753051c9d5917d62760190dbc6b9dcebf45n/aSilentBuilder
2022-01-213064879998.xlsxls 39123bd1932920eca6749593bee628c405f8bb88114d8647a5d9db8b5914f46cVirustotal results 22.41% Heodo
2022-01-2102950015254080.xlsxls 595457287262641f193afae7ac66120029ef90f2ba59b310fce3d9335b1cf304Virustotal results 30.51% Heodo
2022-01-2145869068836343.xlsxls 03f8ab0e08386a7dcad36af464f60e8e879787d760562de70588313f7668f83cn/a SilentBuilder
2022-01-2175660718994844001614.xlsxls db8baab6295830de9d3d9a59dc3b8c88a5de601deeaffaaa83bb6aa941e29b6cVirustotal results 33.33%Heodo
2022-01-214453648552156691410.xlsxls ad583c4b877a37dbf913c275e1bce335b8e73817d61039a2a510e28f325d3e6cVirustotal results 31.67%Heodo
2022-01-2156752271133819265907.xlsxls dac57112411305935ad4318c4ff4f495b8b39f84f001b64d83ea3ae69a994b02n/a Heodo
2022-01-219668799645101.xlsxls 76b99443173be2dec302236f022b468a8f7314de6c460df50dfa9459fed95ba5n/a Heodo
2022-01-21377966837041.xlsxls aaec559a9461b2ceb6da5a557186641e67370e83fddc9b23237f6f92c0e22fc3n/aSilentBuilder
2022-01-213773268928609.xlsxls 9ec21209d6b8b473f19ca78ea762fbaa3a555169ec4462aac5ee5bb1682a27efn/a Heodo
2022-01-21838916609324.xlsxls da47d26dcb0d02a3c820527649f3ca7bc273567280aa0522f90f7e2ca6f42ca0n/a Heodo
2022-01-21233370939913253067.xlsxls 21e23ea56b3d3198bc790c23569c989367c1907f23680e1760b7e76250e87549n/a Heodo
2022-01-21758222472129712525.xlsxls 5ceff31125b1d5b68a48d4ce817ba3b487201c0c24e2efe3ad2e14400edccd42n/a Heodo
2022-01-21220791721048752.xlsxls 82dd39849f520450c56ac21901abda18f16d08294e0c9569e659ed9133781c7cn/a SilentBuilder
2022-01-2104274201756335165.xlsxls 87d7c540caf6f98ffaa9b0d7ed99c6d2e7181fb977871ea4aca6cd408fcd1fd1n/a Heodo