URLhaus Database

You are currently viewing the URLhaus database entry for http://macrospazio.it/oJl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:38724
URL:http://macrospazio.it/oJl/
URL Status:Offline
Host:macrospazio.it
Date added:2018-08-03 16:07:08 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Techhelplistcom
Abuse complaint sent (?): Yes (2018-08-03 16:20:45 UTC to abuse{at}incubatec[dot]com)
Tags:heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-08-0458376.exeexeddd1b8e1b36baa1ccda2a57b427c34f9996aa8e059db2f0dca388b7838fbb8a0Virustotal results 11 / 67 (16.42)Heodo
2018-08-0430801.exeexe9f68051d966f8efa2cf5228c2a3b5e66d4a6759a1ee35fb69320720712d42f37Virustotal results 13 / 67 (19.40)Heodo
2018-08-03057.exeexec784ca98d64224bfd76941ec4b65bf861c2383a0b7d0f7d87f77231c665ff856Virustotal results 16 / 68 (23.53)Heodo
2018-08-0380282104.exeexe96c0c8d02ea509317f07f63665d1485d8eebf05b06b977abb47c6bf34fc55f5bVirustotal results 17 / 67 (25.37)Heodo
2018-08-0362427.exeexe600756aece1ffece7124080963218ec97fa351b14df26351116135132a589840Virustotal results 18 / 68 (26.47)Heodo