URLhaus Database

You are currently viewing the URLhaus database entry for http://ftp.compribe.com/wp-admin/jyjdF7TXqtlf0Bte15OVB8ljQwTmd7/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2120601
URL: http://ftp.compribe.com/wp-admin/jyjdF7TXqtlf0Bte15OVB8ljQwTmd7/
URL Status:Offline
Host: ftp.compribe.com
Date added:2022-03-29 21:40:09 UTC
Last online:2022-04-03 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-03-29 21:41:06 UTC to abuse{at}lws[dot]fr)
Takedown time:4 days, 4 hours, 33 minutes Bad (down since 2022-04-03 02:14:47 UTC)
Tags:emotet link epoch4 heodo link redir-doc SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-31FFV-009858276958.xlsmxlsm 894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7Virustotal results 36.51% Heodo
2022-03-31QNK-4893937753305.xlsmxlsm 162637428037d1f8f3bd675b122e5b830107b9ea7352c8c765e97a3afbce1231Virustotal results 40.98% Heodo
2022-03-31BFZ-776220275422.xlsmxlsm 5fe0d5c74d36af2db670ba08c72837740a66a82a2e8f0b206468474195578366n/a Heodo
2022-03-31VX-60803104918.xlsmxlsm 9098c46a233798193c0587711f5a9be2a4aa97567db08504452748dde516053an/a Heodo
2022-03-31IN-258469864987126.xlsmxlsm 41f790fa1e0f18e897bdad1de2c9452310c964ab0c50e831d9c1150af849edf4Virustotal results 41.67% Heodo
2022-03-31RW-398648398.xlsmxlsm bb415157a1b9bbe60b44a718eaed436370f6a07df786986c3adde6f5f22c12feVirustotal results 39.68% Heodo
2022-03-31WZR-8775579209321.xlsmxlsm 98a592dec22b8ac672dee0217d195c4a9880a55a26110f225c13f3fe6916495cn/a Heodo
2022-03-31AV-58559327669.xlsmxlsm 61ad9b2b8c9707a14412bf30d2e17c11d75dd548e841d9b4eb6299ca1e0456d5n/aHeodo
2022-03-31DQJ-279187376.xlsmxlsm 70c7353a1e172d428b42bed59b7ddb9a6d1b60c368ec7ae5eb64c0eeed368080Virustotal results 43.55% Heodo
2022-03-31BZP-571633081027.xlsmxlsm f93f882fe4bac2b1210512c64a2985c99282b49a95a2aaa3bfcf6865d6dd0056n/a Heodo
2022-03-30XU-867525515.xlsmxlsm ccf8147ef96ae47288019a25336c2935e73d2e06b8fe73823e3596fb1596ba8dVirustotal results 39.34% Heodo
2022-03-30OBE-456275149848051.xlsmxlsm 533372e6130ad44ced6eae30ab3af8be4ae172cc7585719b61074bb861f2dbben/a Heodo
2022-03-30LI-25873132685190.xlsmxlsm 93629f0e94046fc0c1c1a2779a8e58d101136842695fc4ad3addbde6c7757dcdn/a Heodo
2022-03-30JOO-18776855.xlsxls 46218e7a1f860f4758adfd19dc3b12e27771a613ca00f687ccbe48a0c275f83en/aHeodo
2022-03-30XMF-354840561910.xlsxls bc8049d90da2c6ed214cd043d2d754a1f8fc802010a6367d5cac254aa1853a67Virustotal results 26.67%SilentBuilder
2022-03-29n/ahtml 8000a41e8100565ba99abb69b62b010e287515cfaeeb31a03e9e3e16341ee80en/a