URLhaus Database

You are currently viewing the URLhaus database entry for http://duosmart.se/log/E0aRtV0qiCJF/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2120178
URL: http://duosmart.se/log/E0aRtV0qiCJF/?i=1
URL Status:Offline
Host: duosmart.se
Date added:2022-03-29 18:05:05 UTC
Last online:2023-01-21 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-03-29 18:06:06 UTC to info{at}admax[dot]se)
Takedown time:9 months, 27 days, 16 hours, 8 minutes Bad (down since 2023-01-21 10:14:44 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-31ADX-760179163873262.xlsmxlsm 97f11e4cd509aefb731d8b1a4b299c8ab4096e270f05f52d8e0eb6d2366fa501Virustotal results 38.71% Heodo
2022-03-31MJT-15469036502.xlsmxlsm 5fe0d5c74d36af2db670ba08c72837740a66a82a2e8f0b206468474195578366n/a Heodo
2022-03-31WS-94749933480.xlsmxlsm 100a059429276f981fa6268ee948f1403f73c2fdd01e41148fbea55e773bb1bcn/a Heodo
2022-03-31MV-4608184.xlsmxlsm b5df411a9037fcd4dc6b3e92145aae14064c20edf7476a543c778bdb8af22600Virustotal results 36.51% Heodo
2022-03-31RD-03593617591.xlsmxlsm 575cdc6658b85600efd2d3c07f461b8adaeb0b181dfacfd318c0806e4915c95bn/a Heodo
2022-03-31YCP-2567061784486.xlsmxlsm 41a73a914406df97e2944f7742f48272bab7d25486c9c2a5084a7f158fdb2aafn/a Heodo
2022-03-31IBB-837761078.xlsmxlsm 00ea616ce33ef49268a2d6046f588bb73c80b7a90ae6e5e5067938d72e858564n/a Heodo
2022-03-31EE-207783359375.xlsmxlsm 162637428037d1f8f3bd675b122e5b830107b9ea7352c8c765e97a3afbce1231n/a Heodo
2022-03-31JRO-68830411389.xlsmxlsm a1057f814e603d7b7ff7b711305cac0ef15e48b78499802d411424a19ee235f8Virustotal results 34.92% Heodo
2022-03-30MPO-5052964015653.xlsmxlsm f6d9028f6903f57570a969a97a510120fa11d93ce778cfeac61862c36d6b6bd2Virustotal results 38.98% Heodo
2022-03-30OSY-5639547937184.xlsmxlsm 39bbb570609ea300f9d959dcf23f2161043c6dedc230f97e7eab2388db651831Virustotal results 37.10% Heodo
2022-03-30SB-351547281425.xlsmxlsm b8a9c6cb2992b99ed3cc0c82c5cc63dc9a4a3c509e8c67399d2d7c864ed83c03Virustotal results 38.33% Heodo
2022-03-30DW-1852046113.xlsxls c83aefdafdc478ffff051002d1c7b4675c068648d57fca17f788d575ce297596Virustotal results 28.33%SilentBuilder
2022-03-30533217339209.xlsxls fab59013420b775b3fd0ec46d35267784ccda6fd2c7b8479f2fa578cdc8d45ddn/a SilentBuilder
2022-03-3033451990622.xlsxls 0d2f6209d514a862d07974e11e6722888d1e7d63c2dfdb6777f734929b6e5aaan/aSilentBuilder
2022-03-3010996661662.xlsxls 33b4122a72a4831544324253f4b3c1b30528dec85657369e26b214838e6cbd1aVirustotal results 29.82%Heodo
2022-03-3010542207030.xlsxls 04285ad3aa3f05d1303a8524aea0092af76b0d1762a39d3692cde2b1dec47d87Virustotal results 26.67%SilentBuilder
2022-03-30408456262842.xlsxls 9413cad13f6984ead99ed414e0569446e58817727b472a9ffea3097eb76d2e10Virustotal results 28.33% SilentBuilder
2022-03-308355494543133.xlsxls b2565c24c9c72461d71c25df5d6ea291c53cd27725217f8c6585653cbdf72648Virustotal results 25.00%Heodo
2022-03-303214365068.xlsxls ef3d086b10d8ff1a6b4e0e8d2b12a320f6c5c03623b0cb931acf667cdc77a6b3Virustotal results 23.33% SilentBuilder
2022-03-30261794393874914.xlsxls b77ecd5a267d2c31bae67daf05f8319cd9545fee260ea343ae5b9ed7de7835b6Virustotal results 23.73% SilentBuilder
2022-03-309643017063561937081.xlsxls cbf1687da6189a1eca4d7d7809eda7f78d1b6d887feabed610ab342ff2b39b84n/a SilentBuilder
2022-03-3021012010962.xlsxls 05bd11c534ccbcecb257194ae6e0424eb2de9623336ea812dcf0e033a873463cn/a SilentBuilder
2022-03-307301813871.xlsxls d165b715b1c473df33c059be50a8eec754b9dc819ed59230ab9c74e352584753n/a SilentBuilder
2022-03-3053020770718.xlsxls 9446c54eb7a685ed2b0425e43e20af5e527530c1fe26ed9bfc6764c24dc44c8fn/a SilentBuilder
2022-03-30799186305039096.xlsxls 09b33bdbc8b29f706f7f6bbe365af459e40c03e59af52ec9b3c2b0616848229dn/a SilentBuilder
2022-03-30926073015762.xlsxls d112303bc3e986da69e4eb915fecfc2077ee2f6738c4a5e79d9875707076483an/a SilentBuilder
2022-03-304840527111810.xlsxls 5e42f72b6f48384d2369d13cce199bc20da44c757705ba69765152d0d1d02f96n/a SilentBuilder
2022-03-3053883586158.xlsxls 17ecc742902925465369b5dc8bb6c8c87d9e16a1cdde0c38c3b4264f73029cd6n/a SilentBuilder
2022-03-3082563578806981934.xlsxls 905937ee43f2fc5221d18f42e0e1b2514bd1059016ddac70a5fe00c2092cf34an/a SilentBuilder
2022-03-308454196626182054.xlsxls 385fc2720a678cc5b53d3d58caa225e7fa24e29c86ff6acecb609afb7659caa4n/a SilentBuilder
2022-03-3014587678108861265920.xlsxls c12be159aaffc14d6672e97c280868c12ceadd8a60e48769ddefa0d64313e18aVirustotal results 25.00% SilentBuilder
2022-03-30292261077895.xlsxls 4ced4e7896ad968c7374db631ce235f68656c943a181d06c72f027f9e319d292n/a SilentBuilder
2022-03-3074490047941064645.xlsxls 9e011d77b179dc3075654faa2f570ff83e31cb879ef14891e49805831790a329Virustotal results 25.00% SilentBuilder
2022-03-3001496336397229.xlsxls 6280ad828511d4eb90c7c03d7f193d8f55f363f130e0c4aacc7481220313b846n/a SilentBuilder
2022-03-30241366023565.xlsxls a1c1f7785047048e4479c915a444f098c878a44e2a4496cfb20d84d6c2b17f8bn/a SilentBuilder
2022-03-309996604837794615.xlsxls 78b5d0693886a588ad59b63c17e3ccbc19b6d3145ab7f67641e4c80b952cc85an/a SilentBuilder
2022-03-30393897825031048413.xlsxls 8bf74e3bd0c2bd417840c78d7de56486295b5ffdf9f9e358a3c4348b5147037dn/a Heodo
2022-03-3089424819746.xlsxls 6e59acf9d3a2753b58d6e85224cd82fa45cd9e7e392cc4bc18d0577ae539036cn/a SilentBuilder
2022-03-2927553748385.xlsxls bbfd1a6119f3e1a55e92ffce783efd08f462e72b34095a96c3590100fce48077n/a Heodo
2022-03-29277913772579705.xlsxls 4db12a7472a2427ea88cb16a24494b46824688abd29824abffa27f9366e46f30n/a SilentBuilder
2022-03-2972276364125661209.xlsxls fa71482fa174e9b6b3a1a1b356349d522ae45132349656afae93182a187ba493Virustotal results 21.67%SilentBuilder
2022-03-299562729819051.xlsxls a8f23c56a399460b343da3455440d72e3dcea2813ccbfff49f70439a719685aeVirustotal results 23.33%SilentBuilder
2022-03-292117843035552074.xlsxls 295e56484dfbaf568bf0515988c02344e0b4e7112b48f6a7e20424da35e3506bn/a SilentBuilder
2022-03-2969832578177661587.xlsxls 11e85a3bcab8d5d4f43929a8cf0783d612f20f10f38a0d84e702f110e149e565Virustotal results 23.33% SilentBuilder
2022-03-29403016728387283514.xlsxls 4a1f67eac68a30b3e0d924a827eb976aebd1eca8f0cfdb68ca7d4adeb3d86abdn/a SilentBuilder
2022-03-298393701554.xlsxls 493bf34f203dbca37129c0fbd48f0105525295aa4d533467654b49a0634f1169n/a SilentBuilder
2022-03-29793950924935.xlsxls be5f0c1efd69557a30c3247195e4c392bb9785b0a3c5f8baf7de2e9a4fad1badVirustotal results 21.67% SilentBuilder