URLhaus Database

You are currently viewing the URLhaus database entry for https://globartmag.com/doubleclick/0mhNze/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2123265
URL: https://globartmag.com/doubleclick/0mhNze/
URL Status:Offline
Host: globartmag.com
Date added:2022-03-30 21:20:12 UTC
Last online:2022-06-04 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-06-02 01:45:09 UTC to abuse{at}cloudflare[dot]com)
Takedown time:2 months, 17 days, 12 hours, 38 minutes Bad (down since 2022-06-16 10:00:03 UTC)
Tags:emotet link epoch4 heodo link xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-31QK-355198697565.xlsmxlsm 894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7Virustotal results 36.51% Heodo
2022-03-31JI-18886454.xlsmxlsm 53ef2d3a553342c46f5d3011cb07634e1f02b36dae99808e47dd459dd384e388n/a Heodo
2022-03-31OXO-80477014805377.xlsmxlsm 5fe0d5c74d36af2db670ba08c72837740a66a82a2e8f0b206468474195578366n/a Heodo
2022-03-31TKW-788572485.xlsmxlsm 4d68481027dc3987acbc7b6e5a8e958cfdcee70287facb9764a512bcf99b1798n/a Heodo
2022-03-31RE-3854406050947.xlsmxlsm edd28488c8636119e163af7086917eafb1c780a7783050c39acd05e47d55e0f4Virustotal results 36.67% Heodo
2022-03-31XBZ-0016308731936.xlsmxlsm 08e924859a3a3f17c099cca75fbb3cfd7f8cd726fa2e89fb47ff02f9687143ban/a Heodo
2022-03-30JA-144400157.xlsmxlsm 477477fc729f7eae198ac68c6d1a382c1f87d3e92f42c62a2c8fb367b38a658dn/a Heodo
2022-03-30WIO-27557144434242.xlsmxlsm 168a9aa1b5fa37a354fd6ccba71dcd29cbcd503a578504c69feb38bd84a8a691Virustotal results 30.65% Heodo
2022-03-30OV-718992875993.xlsxls 1b8a7e759a6f46d2ba292db849da6336302910d63d9a01be5b074af9a67ec87eVirustotal results 28.33%Heodo