URLhaus Database

You are currently viewing the URLhaus database entry for http://dusangerzicgera.com/img/5/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2118849
URL: http://dusangerzicgera.com/img/5/?i=1
URL Status:Offline
Host: dusangerzicgera.com
Date added:2022-03-29 11:30:05 UTC
Last online:2022-04-03 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-03-29 11:31:06 UTC to abuse{at}oriontelekom[dot]rs)
Takedown time:5 days, 4 hours, 52 minutes Bad (down since 2022-04-03 16:23:16 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-31BR-176323158823.xlsmxlsm 894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7Virustotal results 36.51% Heodo
2022-03-31ASB-8404247507833.xlsmxlsm 97f11e4cd509aefb731d8b1a4b299c8ab4096e270f05f52d8e0eb6d2366fa501Virustotal results 38.71% Heodo
2022-03-31WBA-5728181.xlsmxlsm d496d617d84291189c4e523cd4b174b705c401ea76c1782f79077eca4eef5512n/a Heodo
2022-03-31TSW-66071114823.xlsmxlsm 54bb2433c32ae91e6033d49276536fd303652e555e7d1cdf5e1aa0bf9f483d18n/a Heodo
2022-03-31HDV-69424117345.xlsmxlsm 23dd125c7c3f736b183b9ba66bdd5ee5565f575fbb6c8c593f78f6da0b84e621n/a Heodo
2022-03-31TT-094500933604732.xlsmxlsm 764d8e72174b0666952016caf95096e85219dba6554a8ce6db74b8244b3e7590Virustotal results 36.51% Heodo
2022-03-31COZ-71399271126280.xlsmxlsm 6f7875f81192db87ffea6b495f10f68edb22a26f0cbc22b47cc1fbaf1b160cddn/a Heodo
2022-03-31OYC-7683433.xlsmxlsm c91108a630fb89be6e53e693ea5240bc7be18d74be099b965d92647bd239c6bfn/a Heodo
2022-03-31AY-59444961817373.xlsmxlsm 08e924859a3a3f17c099cca75fbb3cfd7f8cd726fa2e89fb47ff02f9687143baVirustotal results 38.10% Heodo
2022-03-30NQP-317326704425028.xlsmxlsm ccf8147ef96ae47288019a25336c2935e73d2e06b8fe73823e3596fb1596ba8dVirustotal results 39.34% Heodo
2022-03-30XLY-9400414808574.xlsmxlsm 477477fc729f7eae198ac68c6d1a382c1f87d3e92f42c62a2c8fb367b38a658dn/a Heodo
2022-03-30NTK-629835126701.xlsmxlsm 168a9aa1b5fa37a354fd6ccba71dcd29cbcd503a578504c69feb38bd84a8a691n/a Heodo
2022-03-30MZG-5197271254835.xlsxls c83aefdafdc478ffff051002d1c7b4675c068648d57fca17f788d575ce297596Virustotal results 28.33%SilentBuilder
2022-03-30ED-2167545791.xlsxls 2fba5997186a1e4e2da7496bd7a1bca3eaf425971cc76dd7be878f3fd88add07n/a SilentBuilder
2022-03-30627094857039.xlsxls 47d56d48a9d1124c93c30fceca3e85139262e561196d7e483048f00952a1dfaeVirustotal results 28.81% SilentBuilder
2022-03-3025091405024865997432.xlsxls 786cdbbcab12d6076e895521a41dc5e5bd48fd09dbc85d4843a128c04dec73c2n/a SilentBuilder
2022-03-3025255730621498.xlsxls 8a6effb1430c591fa0e6e8ac6f84b1991bf8cc18f70a432ae63e6bda131914c6n/a Heodo
2022-03-3019528408368.xlsxls d2e33b2424a064fc066a9360931956be3294f12080163276ed94ef878e28eaden/a SilentBuilder
2022-03-305345014594481.xlsxls 7c15e18d1dba244cc6c87a0ffa3947175c8a36156c690b62ea571af5e36fa32cn/a SilentBuilder
2022-03-3039613867615443.xlsxls 9934178924b40022240e0d4370a3581adc818d382b29a190bd5a17ef2a46a4beVirustotal results 27.12%SilentBuilder
2022-03-30583235605099975.xlsxls 04cdfe9e58149596ddbb11b8d45ff045e84b52f185f1b7f02ae6713e3a4a8370Virustotal results 23.33%SilentBuilder
2022-03-30174944936695872.xlsxls 98e386de71afa5a9ac3a5d56b62ffad75215feb7d596a24550c4c961efe2caffVirustotal results 23.33% SilentBuilder
2022-03-30315668387064058.xlsxls 28c1994bc596421a111c75b795d98b2192edc5aa92b6d1e3adcefd40bd9d0bdfn/a SilentBuilder
2022-03-30626029816896.xlsxls 46eba30468fb0d6df304a0bbc71524e49d837528dd3b5a468668584b29a9a312n/a SilentBuilder
2022-03-30570668230452.xlsxls b4eaeacc2e88877f2ed945d286fb3e537a6aef17314fc0182e7467c4daae0141n/a SilentBuilder
2022-03-302343206108336257.xlsxls ee0751444c28714ba1f0d4228dbfcee7ee0d8fe35176d8ab8ad52fe2d0eca562n/a SilentBuilder
2022-03-30623255496752720.xlsxls 0ed4a61da5b83e2f6e1f179296534712391f653cad49956df89b1f9af2651d26n/a SilentBuilder
2022-03-30495075866783.xlsxls 84e8a5c9e678935ebb0022e67a2160105d3f416ac8ff9118d76b0183acc1e233n/a SilentBuilder
2022-03-3074301111385778151424.xlsxls 76ed69153d3bac77298a51cc96c08cdcc5df5ee5b55d2cea606449d82bb3efbcVirustotal results 23.33% SilentBuilder
2022-03-308807749581892.xlsxls c56d2d89a7b4e8e3be75d64d8e926afa91d8fc7c9cdbf50933d3b079c58423d5n/a SilentBuilder
2022-03-3041213161557849239.xlsxls 9470de0e2f7390950431394a131d53280eb6780f5f101f2271d7a262486fa816n/a SilentBuilder
2022-03-305823678171344620546.xlsxls 0064a9e50d81734b02d6e46a0c7438caaac87d97c3a8d2e252d116c08094820bn/a SilentBuilder
2022-03-309278244464939.xlsxls bf39fbaddcce85b3e17ec69bd93ee1f801dedc4db33f7f966176290d1e5a7c1fn/a SilentBuilder
2022-03-30041240470420957568.xlsxls b53e7fd809f9e654c0d9d6d4f0aa797529daadc82b205bcecc3b564b45892ac4n/a SilentBuilder
2022-03-303822489236147.xlsxls 4c775dc66dd1e7eefeb86433444c9bbc877514e792cb453c194199333d0aba86Virustotal results 23.33% SilentBuilder
2022-03-3058398735251.xlsxls 8d68a2348c7a8e5c21b19f4602a4073af8c4f004aca606dc0bcc1639524e9c65n/a SilentBuilder
2022-03-30848922461866837.xlsxls f37c6c8662785514f852d04f94ac6b2217b3c5244e84dae528f13c5b8b95daecn/a SilentBuilder
2022-03-306428752492638898199.xlsxls 50c3d5a37ccc9d63435cb5ed56e8a758234f55c42f3d8a90c12fdde81ae649bfVirustotal results 22.03% SilentBuilder
2022-03-307762886030510.xlsxls 115102a8cd87cce66147485f4ec78296fc8b4a2bc75f372c4bc3496b812fd7ddVirustotal results 23.33% SilentBuilder
2022-03-291099293823276156629.xlsxls 1b7b4de07674b0a896830c649a51473d0c17f4ea18ec4c30001b9886c6af41ddn/aSilentBuilder
2022-03-29250069965205.xlsxls cf32dd8b34af56ba98e8e60de33e463349578b7c5f034c6b5394c1de65d8b3bbn/a SilentBuilder
2022-03-2981997018468.xlsxls d2c2f994b521bda48acab4fdb007d4fd5b14e1d30efd50a47348c9021992ff50n/a Heodo
2022-03-29570841611388269.xlsxls 508514677ca98463993df2e4b8cecf85b5e766d36899f33d3a2b6f4d1694acd0n/aSilentBuilder
2022-03-2937905810409499.xlsxls 6d7f03a15d7e07cfbc738ccb0b064abc31733873e7ddc662815454136a5fbc42Virustotal results 23.33%SilentBuilder
2022-03-2973968596482365.xlsxls 07610eca3a554bbc3279af58afb13d4da4234771cc60b020fac93605a9a8a429Virustotal results 23.33% SilentBuilder
2022-03-2913288350193637925987.xlsxls 912ef80d96550207598474c59820892d1bf52be76ac1c04f833228027a222f0cn/a SilentBuilder
2022-03-2944727121958425802.xlsxls 6121550710d668a4b80ca4f056d91829e4a793dc1a04fd52c9ebd937b02fb685n/aSilentBuilder
2022-03-29184154734982.xlsxls 785f830ec42e6e6de3f29b1037818fa35ba3bf5bdcc06cff94a3bc582927086cVirustotal results 21.67% SilentBuilder
2022-03-2959400034869084526.xlsxls 4268dc47de4d11bc5cc3876e399602c2904c5903a08e1150763c0534a38a1ffaVirustotal results 23.33% SilentBuilder
2022-03-293635235071187557232.xlsxls 9575e2971e7e9d0105384f20c77f085a66fe3e95903619289c697f24ab411e42Virustotal results 21.67% SilentBuilder
2022-03-296288798494.xlsxls e02116cc9438f4fe65649bcadabd2f0427d734b85bd77f212e841f2a9c477c61Virustotal results 28.33% Heodo
2022-03-296790215939438016.xlsxls a909791cbe01905c835db3b85c057da505b76e2fa962c0d73ef2af6c817119e2n/a Heodo
2022-03-2981698045310214936.xlsxls 82092f684a3c9aece91280c7167b5806133c622341efd1461734cdc00c2eb49fVirustotal results 27.12%Heodo
2022-03-299284369996406309347.xlsxls 7d9553c30d784462e6103b4c78d80979901f5efebc289a5957924b6aa573a8ceVirustotal results 26.67% SilentBuilder
2022-03-291776821870512679799.xlsxls 2ca432245e7f6a6da92cfd206e8ce83c850e547dd9e4ad200802ef66f4beb5aen/a Heodo
2022-03-299010771248497060636.xlsxls 135c9b87b29ac48e7217e75ff57f2a5c3b51abb3231a86c7549dbe994760c8c7n/aSilentBuilder
2022-03-2947980246690955579795.xlsxls 6cfd86adfe720a6432fb65748f6d9c8607f6c15fe412f73e1efd964268152bbaVirustotal results 28.95%SilentBuilder