URLhaus Database

You are currently viewing the URLhaus database entry for http://dusangerzicgera.com/img/5/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2118848
URL: http://dusangerzicgera.com/img/5/
URL Status:Offline
Host: dusangerzicgera.com
Date added:2022-03-29 11:30:05 UTC
Last online:2022-04-03 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-03-29 11:31:06 UTC to abuse{at}oriontelekom[dot]rs)
Takedown time:5 days, 4 hours, 42 minutes Bad (down since 2022-04-03 16:13:43 UTC)
Tags:emotet link epoch4 heodo link redir-doc SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-31NPQ-736165333167996.xlsmxlsm 894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7Virustotal results 36.51% Heodo
2022-03-31LM-969021346.xlsmxlsm b0fa5dda99558a54917cc9a5f6269d440cd8b30ed825f72c837d6e4044d9f628Virustotal results 42.62% Heodo
2022-03-31ASB-8404247507833.xlsmxlsm 97f11e4cd509aefb731d8b1a4b299c8ab4096e270f05f52d8e0eb6d2366fa501Virustotal results 38.71% Heodo
2022-03-31OP-2735494215.xlsmxlsm 4d68481027dc3987acbc7b6e5a8e958cfdcee70287facb9764a512bcf99b1798n/a Heodo
2022-03-31ZUV-336623302665362.xlsmxlsm 7b790cb9f037644da2aa7daf038bef787f020bc8aad1932fb1e8c4c5ab3b4766Virustotal results 38.71% Heodo
2022-03-31FV-497137936.xlsmxlsm e399c7ba00f6cea854ddfb81858d73c67e3d75346c46167ae971d15632427812Virustotal results 36.67% Heodo
2022-03-31FRV-855111702401885.xlsmxlsm 2617b3b15f0d97a163be4c1cf6df03a45313c05bf0f36c3c2b37e56732608493n/a Heodo
2022-03-31COZ-71399271126280.xlsmxlsm 6f7875f81192db87ffea6b495f10f68edb22a26f0cbc22b47cc1fbaf1b160cddn/a Heodo
2022-03-31NW-52899074499.xlsmxlsm 0c71f0ce426be3dfeacb36cfb08349362327fa6041d1669a1d2ef8b1110bfab3Virustotal results 36.51% Heodo
2022-03-31LY-38940359884.xlsmxlsm 5c682f8054f1b9bb175d9a5784b8fd5bc06364ddf2b802d9aa5fa0abe6cb3a33n/a Heodo
2022-03-30QBI-02038765595.xlsmxlsm 9a0b2121a81929d3ea98a8b4b0e20693192eabb5c4081e2ac411fe4ed06f9f7bn/a Heodo
2022-03-30YJ-32301537126613.xlsmxlsm 60198b10fd3c8daeeb186be258cdf74b24c18a364638c8b6c6370e0bf4a005e5Virustotal results 33.87% Heodo
2022-03-30NTK-629835126701.xlsmxlsm 168a9aa1b5fa37a354fd6ccba71dcd29cbcd503a578504c69feb38bd84a8a691Virustotal results 30.65% Heodo
2022-03-30PS-15796995193.xlsxls 6e01ff3d58fa651f18f924c8458cd62827fef98bc3e43893fb927f34b9ed02c1Virustotal results 28.33% SilentBuilder
2022-03-30ED-2167545791.xlsxls 2fba5997186a1e4e2da7496bd7a1bca3eaf425971cc76dd7be878f3fd88add07n/a SilentBuilder
2022-03-29n/ahtml aa1ef3afc165638b3ea6357693bb5dcc2913be16ae2dffc5364a3414b5f37250n/a