URLhaus Database

You are currently viewing the URLhaus database entry for http://dijicom.net/error/HG1y7EgWrBA8fDYUIceqaL2pUqcj/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2120629
URL: http://dijicom.net/error/HG1y7EgWrBA8fDYUIceqaL2pUqcj/
URL Status:Offline
Host: dijicom.net
Date added:2022-03-29 22:08:03 UTC
Last online:2022-08-29 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-03-29 22:09:05 UTC to abuse{at}turktelekom[dot]com[dot]tr)
Takedown time:5 months, 2 days, 8 hours, 11 minutes Bad (down since 2022-08-29 06:20:26 UTC)
Tags:emotet link epoch4 heodo link redir-doc SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-31JHV-35662182.xlsmxlsm 47033d733745aada415882d83566cebcc301505ddbb55d72e84ee221332e812bVirustotal results 34.92% Heodo
2022-03-31UDR-8837674314468.xlsmxlsm 64d92f79a2d87571d428b7b19ef4f5c1680c24c8952a2f46b84f217cfba19766Virustotal results 39.68% Heodo
2022-03-31TD-9889425718.xlsmxlsm 10281dd74601704b43cbce7093951762bfb6cc0402f747ba01250b2ebc438c27Virustotal results 35.48% Heodo
2022-03-31AFD-873448227707.xlsmxlsm c201ae0ab0516a27d14400b4af28d4189bb2c6d8b589c4fadb025c26645f19bfVirustotal results 38.10% Heodo
2022-03-31XC-3167971169.xlsmxlsm a4c90f279a6b95cfa27debaf12cd09e6dd57fb1eb87803667a8b0527c7fc27cen/a Heodo
2022-03-31KW-91673133913286.xlsmxlsm c171d718d9aecb5ad1e27309660f8da7a568f9798e03d4c6683d7825b5a122c9n/a Heodo
2022-03-31SA-218209191495.xlsmxlsm 83a8039af1534f4fc93efcdb7e429c799f144ace1f33b37ca42a57ee7a559499n/a Heodo
2022-03-31TL-072640917172302.xlsmxlsm 894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7Virustotal results 36.51% Heodo
2022-03-31QO-478298763011971.xlsmxlsm 162637428037d1f8f3bd675b122e5b830107b9ea7352c8c765e97a3afbce1231Virustotal results 40.98% Heodo
2022-03-31CK-73698759044.xlsmxlsm 97f11e4cd509aefb731d8b1a4b299c8ab4096e270f05f52d8e0eb6d2366fa501Virustotal results 38.71% Heodo
2022-03-31PSN-301328239112.xlsmxlsm 100a059429276f981fa6268ee948f1403f73c2fdd01e41148fbea55e773bb1bcn/a Heodo
2022-03-30IQ-4935934.xlsmxlsm 4fadf9d0ce08783dd924f9ab1f1691dbdf07251396bb218f92cfef0279739a25Virustotal results 32.26% Heodo
2022-03-30ZI-215363850748819.xlsmxlsm 51be5ff843565b3e8fe56f303452e018d305cc846181d2d79d435509b2dc578cVirustotal results 35.00% Heodo
2022-03-30CIM-5517934.xlsmxlsm 7b790cb9f037644da2aa7daf038bef787f020bc8aad1932fb1e8c4c5ab3b4766Virustotal results 32.26% Heodo
2022-03-30OK-6479894.xlsxls 34c12fb797211966f38e1025e683ec8ecc00b70e39d5f463213f7b09eea896c4Virustotal results 28.33%SilentBuilder
2022-03-29n/ahtml dd30a53b2feccbac146ba03b24507c5f4aa9d625a79cd27f222c41019a9b3436n/a