URLhaus Database

You are currently viewing the URLhaus database entry for http://easiercommunications.com/wp-content/609geT2uIEfW9KnIwjX/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2120379
URL: http://easiercommunications.com/wp-content/609geT2uIEfW9KnIwjX/
URL Status:Offline
Host: easiercommunications.com
Date added:2022-03-29 18:48:05 UTC
Last online:2022-06-03 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-03-29 18:49:07 UTC to abuse{at}hostgator[dot]com)
Takedown time:2 months, 5 days, 19 hours, 13 minutes Bad (down since 2022-06-03 14:02:32 UTC)
Tags:emotet link epoch4 heodo link redir-doc SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-31YH-2258272828.xlsmxlsm 0e92cfd04405b8b597562761080285f19807c04c48c7278fe7632271ded41c3dVirustotal results 40.00% Heodo
2022-03-31PE-26468253910.xlsmxlsm 764dc9c37da82215bfa8dce451fc0946c901984084015a98478a65bd670835c2n/a Heodo
2022-03-31PYF-9757482133968.xlsmxlsm 894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7Virustotal results 36.51% Heodo
2022-03-31XXS-27240628216.xlsmxlsm bc2b30e9969aa7dc11544b73955d47d12ec3d2febe998b5cef4b57c89dde7215n/a Heodo
2022-03-31XRB-931053010321.xlsmxlsm 4d68481027dc3987acbc7b6e5a8e958cfdcee70287facb9764a512bcf99b1798n/a Heodo
2022-03-31BVF-99330868457.xlsmxlsm 2e8dfaff0039f7b69af5f699d0efff85cca1b5dbe2a50082b7ccc49503545053Virustotal results 40.32% Heodo
2022-03-31IEP-359154880275.xlsmxlsm 23dd125c7c3f736b183b9ba66bdd5ee5565f575fbb6c8c593f78f6da0b84e621n/a Heodo
2022-03-31DJ-38900975.xlsmxlsm 4bf2a2327ebd2d1421b849168375d718ca7eedfca6a369b4d947836eba831db3Virustotal results 38.10% Heodo
2022-03-31SZ-0580073468.xlsmxlsm 61ad9b2b8c9707a14412bf30d2e17c11d75dd548e841d9b4eb6299ca1e0456d5n/aHeodo
2022-03-31CN-524660435609.xlsmxlsm 0c71f0ce426be3dfeacb36cfb08349362327fa6041d1669a1d2ef8b1110bfab3Virustotal results 36.51% Heodo
2022-03-31MBW-65384112.xlsmxlsm 93e06d8850641586fe31c662da490f8ff442f4f86021f50799e1174dcace1f72n/a Heodo
2022-03-30YM-740735604.xlsmxlsm 82d6d535c5748ff75ce83fe2ae2829986ec6eddb9cf2d9b7e71f1ade3fd92c57Virustotal results 39.68% Heodo
2022-03-30HP-43017708880.xlsmxlsm 39bbb570609ea300f9d959dcf23f2161043c6dedc230f97e7eab2388db651831Virustotal results 37.10% Heodo
2022-03-30YEB-58805442536.xlsmxlsm b8a9c6cb2992b99ed3cc0c82c5cc63dc9a4a3c509e8c67399d2d7c864ed83c03Virustotal results 38.33% Heodo
2022-03-30BD-5177532.xlsxls 2fb5d6b4684b1f180fd682f92fc346420c16376d64b8b8ec6b0564247000dc58n/a SilentBuilder
2022-03-30BDC-9452104.xlsxls 31ad327541ee0627096151e901dee22241e584b78b52c17eee5a1c40a6f25490n/a SilentBuilder
2022-03-29n/ahtml b46886573516b58b1f2682b912eb91111f3b058a50ca29adf36028ebce5a4839n/a