URLhaus Database

You are currently viewing the URLhaus database entry for http://eportfolio-bizcom.msci.dusit.ac.th/e_port/nCAvYGij36vA8Dl0Wo6p/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2120070
URL: http://eportfolio-bizcom.msci.dusit.ac.th/e_port/nCAvYGij36vA8Dl0Wo6p/
URL Status:Offline
Host: eportfolio-bizcom.msci.dusit.ac.th
Date added:2022-03-29 16:38:08 UTC
Last online:2022-04-07 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-03-29 16:39:05 UTC to helpdesk{at}apnic[dot]net)
Takedown time:8 days, 16 hours, 44 minutes Bad (down since 2022-04-07 09:23:55 UTC)
Tags:emotet link epoch4 heodo link redir-doc SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-31DCK-358619693.xlsmxlsm 894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7Virustotal results 36.51% Heodo
2022-03-31SGT-7388555364.xlsmxlsm 162637428037d1f8f3bd675b122e5b830107b9ea7352c8c765e97a3afbce1231Virustotal results 40.98% Heodo
2022-03-31MWY-2938598582.xlsmxlsm a1057f814e603d7b7ff7b711305cac0ef15e48b78499802d411424a19ee235f8Virustotal results 40.98% Heodo
2022-03-31SVD-7527114481.xlsmxlsm 566c3447fd5a1b7f7f0c942d484a0185bcd747d47f9c487452dcbfed1979bd52Virustotal results 33.33% Heodo
2022-03-31ED-71935876.xlsmxlsm 96fac13010c22cdd9510ed06c70ed29257b59aa3fc3be17a9515bdcf3596aa51Virustotal results 41.94% Heodo
2022-03-31RIZ-455598107248321.xlsmxlsm 5398ede44f8abb980cb617b23ffd5bfb408113787f654b7a399e95025aded8ceVirustotal results 40.32% Heodo
2022-03-31VKZ-41924810.xlsmxlsm a43da1637de01a06d72a9d09981de5132b8bd971844704ee9fc7c5e07450a49dn/a Heodo
2022-03-31ETT-228048101.xlsmxlsm 6f7875f81192db87ffea6b495f10f68edb22a26f0cbc22b47cc1fbaf1b160cddn/a Heodo
2022-03-31YV-820434165234093.xlsmxlsm f93f882fe4bac2b1210512c64a2985c99282b49a95a2aaa3bfcf6865d6dd0056Virustotal results 38.10% Heodo
2022-03-31WZ-91633761.xlsmxlsm 08e924859a3a3f17c099cca75fbb3cfd7f8cd726fa2e89fb47ff02f9687143baVirustotal results 38.10% Heodo
2022-03-30GJR-9692791.xlsmxlsm 2b1f1f87033e83e264f05939f180b63165e067861f9c6f1253aedc9c9e1efb6en/a Heodo
2022-03-30HIM-94502749820.xlsmxlsm 39bbb570609ea300f9d959dcf23f2161043c6dedc230f97e7eab2388db651831Virustotal results 37.10% Heodo
2022-03-30FH-64742958899.xlsmxlsm b8a9c6cb2992b99ed3cc0c82c5cc63dc9a4a3c509e8c67399d2d7c864ed83c03Virustotal results 38.33% Heodo
2022-03-30FSL-433636334976488.xlsxls 88eb7648bf7a3c5eb3fbb953cd7b5df5165ffd0cd0249928a6e314f8958ebaf4n/a SilentBuilder
2022-03-30FX-9616829721809.xlsxls d743d15057637cf8074f2c125e85dec324808dae8860051c978dcda48f641d86Virustotal results 28.81% Heodo
2022-03-29n/ahtml ff4da627b9f8a323805ab6b75d91a8dda2a80148f6687192cc021966d01ddaa6n/a