URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	www.zigorat.us
Domain registrar:	NameSilo
Domain registration date:	2021-04-25 21:50:51 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Control D HaGeZi :	Not blocked
Firstseen:	2022-06-08 19:26:03 UTC
Total malware sites :	1
A record(s) observed :	1

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2022-06-08 19:26:05	38.117.65.66	dns1.netlayers.net	Not listed	AS174 COGENT-174	US	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-06-08 19:26:05	http://www.zigorat.us/wp-admin/gUEMmDvnl/	Offline	dll emotet epoch5 heodo	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2022-06-10 17:38:54	a2f69b2b22ee1c03f92b13e9d462025b02afcb8825953344378ae91ae29eba37	dll		Heodo
2022-06-10 17:25:04	a446a3be031926c1508794c794d14521017aa20e5fd3ee3de9ec0d88e459f0d3	dll		Heodo
2022-06-10 17:18:51	06d70ef90351928209645159347b66657faeed58b953260dc029f9b3027f9de0	dll		Heodo
2022-06-10 16:54:34	ed8577ad18f474943dbef7b74ae2e4bd67712f115555e03fd1e195cca2a685c5	dll		Heodo
2022-06-10 16:33:41	f767aa894eb0bb5ddf042534ec3391d0db29bc9752c6477cb46bba51af2decf6	dll		Heodo
2022-06-10 16:16:51	19bd205674b9e7d229b4be81e2061eda001dfd995b62b1e265b9803047a1a2b8	dll		Heodo
2022-06-10 16:11:38	1602a2d10cee5c135853398df5ab8e6c2727f619c38d458218c3ff7df5d90918	dll		Heodo
2022-06-10 15:51:14	e529006a5ba54c95f3bc631521664453008bb08ef93ea1bef9a5769c8aca06b4	dll		Heodo
2022-06-10 15:32:23	e9bf2d1388da13621aaa6f60b6c7fa4f4032e8bac50ed878aa1dc08bb0ecec55	dll		Heodo
2022-06-10 15:20:26	ce70a564d0e34537b1aff412e1345c4a38cbcad26b759bc64f75216469d5204b	dll		Heodo
2022-06-10 14:56:06	46858847ce20bb5dcbb3fa1589c9918bf69e92412410016e98a49ce90e9d4bd2	dll		Heodo
2022-06-10 14:43:18	0d798bbeaa7f8520731693427999de216e1b7bdd172eb916503568d5f61f75b6	dll		Heodo
2022-06-10 14:19:17	a049be7b4e8cb3304d1673396959e79fd3c865936651ba035a4ddc2db09cf297	dll		Heodo
2022-06-10 14:11:01	82df63b1f5e62e140e0f431a5cb53ecb111569b0ef1216fa81eb7e507017d457	dll		Heodo
2022-06-10 13:46:58	2bacf4c701f79b22dc202abcf5b79a5c19a0467f7a446a17a0a7f8aa20372269	dll		Heodo
2022-06-10 13:36:46	9c4bd4550f7470027dc602f72e4c7aff7995a979108a034e53334ecb7be8f295	dll		Heodo
2022-06-10 13:25:21	a6420d7324c083c15febd8af8b6e148165bc83b0411003e0afcdbd6f5c4d4dd7	dll		Heodo
2022-06-10 12:56:22	a3cce6d72fe6d61f6bd7538c8a7b7f49d4b48a282d0ee0c31a04aa226f852915	dll		Heodo
2022-06-10 12:48:10	7da0a064f5e161b6e079597ed50241564184b19802774ee0d368a95aaa3d90e9	dll		Heodo
2022-06-10 12:33:52	eeeadbee2f4fd093d01e92e3f1f2edcf9d0a48932d40148f340440ecd5229b88	dll		Heodo
2022-06-10 12:14:44	c6eb059b54596808017c9e89e626ab887c304626c65965cdf3a1c10f2bfbd623	dll		Heodo
2022-06-10 12:00:51	0ce747161c424cf5876a090e654c4eb29dea670d8b900fc1cc37d4923d9f49a1	dll		Heodo
2022-06-10 11:34:31	0cd967e7193dab3347fd87e3ba2b00a829c93a82e4caba1e8d2c0bb612137fdf	dll		Heodo
2022-06-10 11:22:17	47b658b11ea8ce22068fc0d81ed8b9112c81817eeeedc07d98e72b45c2f15ba4	dll		Heodo
2022-06-10 10:53:06	ee8d3ff7d29dff15fb912dd980efa272172908b1384b75a634bd0f23ba16d9f5	dll		Heodo
2022-06-10 10:32:08	a5496aead9e068ee62d03c2f65f6bf56037995caed426bd8290b2e06dd511d78	dll		Heodo
2022-06-10 10:14:00	7dcf332fb6131d4d27c745a209871edda02780759c8c662407b0e0463719efdc	dll		Heodo
2022-06-10 09:45:22	b3c0314cc73fe0dfc2c1877cae2250ef6fdefbc89d404ddb591d8cab49d78ee8	dll		Heodo
2022-06-10 09:38:43	ee16a3ae4e078bf0c8a32f6cb1e61f90db36e6b8eb8fad5c4bc90e9c434027bc	dll		Heodo
2022-06-10 09:21:42	ca805b39ff353fa125cbb923df4ac530fcbe9a4c12879a173711feb0e2a11516	dll		Heodo
2022-06-10 08:53:46	9584ae609f287ec2aa4299a6648671d566f5c988e95baf8fc1fab1941a35875e	dll		Heodo
2022-06-10 08:25:18	3d34f5acf81d262b969df8d7a7642b0ac88cbba944487475bc17f78af0341a60	dll		Heodo
2022-06-10 08:02:36	04b771a76c35838e66b8ed1d6a7fa9a4fb5ec041a70d778139e699e2e2ff0635	dll		Heodo
2022-06-10 07:55:39	c8aeed590fa67ac4a7498a777181970e59edced21fe6f10291386153d237db80	dll		Heodo
2022-06-10 07:37:02	ed93671091f202ca0043a683eef1f307410afe82ea87ba734cff9c1386519ee8	dll		Heodo
2022-06-10 07:08:12	440a8b861a1ffdd5760d4e98b17756dcc1a016cff39c2092ac5e5f471b6cdae7	dll		Heodo
2022-06-10 06:49:20	41d9741acfd773eb40e6ec6ecc49d232c116e1411ec51a9e29b6ecb66691b141	dll		Heodo
2022-06-10 06:41:23	04cf621573af5aa863caf1c532bc3c77de9fdc43e2b5aa161d4f0e083cc68ad4	dll		Heodo
2022-06-10 06:08:37	649f752e8db8d5aad47078e527b48ad91fdcf2ce00a82ab02baf47a888ea19ee	dll		Heodo
2022-06-10 05:49:36	851bddde87fd7539b1a095781f7c9434a4046c27abdaae7cf1d2628552cf6ca6	dll		Heodo
2022-06-10 05:38:06	986f032368f22ab1975f2acb97ac4109877038b6e6c82b50eda2b16fed7ace0d	dll		Heodo
2022-06-10 05:15:59	3de5d6e205a5ac069cf39254e1aee69cdea3f4af73e6bd5f164d28b56c619aa7	dll		Heodo
2022-06-10 04:56:17	3e982d5ee527109dde79e8cc0aef59be085cb3ab33a1ea7f2cec33cfc393ee31	dll		Heodo
2022-06-10 04:39:38	f96345cb804cb6acb279c247cb5930d2542a16c9f8672a44a8e73625b66f8193	dll		Heodo
2022-06-10 04:22:47	6c4211c38e80afbcb32faed4e3176cff20baf5213262ea74832a7bbe766b52f3	dll		Heodo
2022-06-10 03:59:34	e84b2007a177e14aaa46d9f41cdbc6abeb2686b3442b30c3047fe103ba4a61c5	dll		Heodo
2022-06-10 03:52:38	df7beb74cac0ca946bc3cb15a10885089a94272a3774a0bd2a8d9de6d2495a5b	dll		Heodo
2022-06-10 03:40:08	b14d38fd9132f8af6803fe1f1f6d318a7f942739a16789de796210836dd7399a	dll		Heodo
2022-06-10 03:17:26	6e4e563569aa344d9d2b626a78dcb4f84404e126df43c243b09c02ec8ee8b0b9	dll		Heodo
2022-06-10 03:06:23	d3a8d99427da1779adbef16fe2172dc8bf2c188f0aa05044f7485af81fa9e731	dll		Heodo
2022-06-10 02:42:55	4c1c8dc3217ae372573393da37555ac56442203ff12da244c6d553e047408ddb	dll		Heodo
2022-06-10 02:21:32	1ed6153cd952a62f870f729066c5e5003a75a55fe5a18ee2eac7ed834da1cddc	dll		Heodo
2022-06-10 02:09:04	16d043a62bb2fa74c6894b6e67fea683a5b21f1e356b9ee7840b9a4abbd23942	dll		Heodo
2022-06-10 01:50:36	43877a68b97321245d6bcbe29304450b7b32e947cbdf8694c7f96c176307cc6e	dll		Heodo
2022-06-10 01:27:26	627e12c07e406fd4c66319fe485315886d20830b027601b1b744da863b30c7da	dll		Heodo
2022-06-10 01:08:21	65b301995c47e949b9e6e00e72613a658cec8614bdd19c29719f0170a9c8d46f	dll		Heodo
2022-06-10 00:52:36	39cc92bcde8e6cba0cc3841db05876f1dbc3910ae191c124dca20c8ee5659ce5	dll		Heodo
2022-06-10 00:41:42	b03b3abf7a3306b0fa1a3d1141728b9197066ba4159ab633500b969086acac6d	dll		Heodo
2022-06-10 00:18:39	5590f48d5a56613af375c59d408ab784d38505fd969009ae4bba53fef5043c56	dll		Heodo
2022-06-10 00:08:44	b884c54ff54ec8f7f69fc98d27cbb43cbf4be1214561bbaff46966ab5ba08da6	dll		Heodo
2022-06-09 23:58:16	66aa1fc9cffd56c7ae1a3441a3720850c944c60944aea5a3a56a83b2c00826bc	dll		Heodo
2022-06-09 23:38:04	f359d1e362dca40b19c48fba18735ef3c92320c6cbe2d759a31c862d6fdc2e55	dll		Heodo
2022-06-09 23:17:29	baef167189bf1784208aaa93d1de8c89987b9eff4044988a71ce871550fb5906	dll		Heodo
2022-06-09 22:54:24	226b022841236fc91395e726c265c396bf83b7c6dfcc55455276440621287b88	dll		Heodo
2022-06-09 22:37:56	421f3669ca1729d12c33c4dcab0658bf87f4861b99be2422a240092a8ba40539	dll		Heodo
2022-06-09 22:32:47	4ab3010f09cc4e0d0172fd08329f23ae433baaba85dea17a29d329fcbd660b13	dll		Heodo
2022-06-09 22:05:14	fc1ab80cb8f28f0fd86965e4c12af7c8c8efeea913571abc5be2912f633d8cb2	dll		Heodo
2022-06-09 21:47:42	25fcc9c1882cdae54b329c6744ce3fada7db9f21339fc0ceda9c6c02bcff1958	dll		Heodo
2022-06-09 21:30:32	5805f84984a5768dea7f22d211804f2a6fe1af40be1a53d7369af7ba31b3cc4c	dll		Heodo
2022-06-09 21:14:10	3dba1ef15e061cc866c34136ca3d87dbbaf0e8426f777b60a93c38a8a72e57e0	dll		Heodo
2022-06-09 20:52:35	7bcb5d53cd80ef9dbb5a5fd24b5d0efb2b308e8db903dfed3b1614ac995e7e95	dll		Heodo
2022-06-09 20:37:32	08d21078a98543a2cb7d91ae705e463d2171a100c70431d581bdec90491adec3	dll		Heodo
2022-06-09 20:23:49	fb75a54675a5d09a36f36feeaf9f72090185e218185d9bf8419d5590d5850c00	dll		Heodo
2022-06-09 19:58:26	011f58e34e4b16e8bba6de5f0614c82a6e6085b090fde009c50436a3409ce0a3	dll		Heodo
2022-06-09 19:50:13	dd88587d0561d71624d4e94c446611591f76fc433a286a4938c54728e3f753fe	dll		Heodo
2022-06-09 19:33:51	d8184524433eaa90ebeb3701c5c68082acacc0baf4f470677198fd41d55431b4	dll		Heodo
2022-06-09 19:05:28	dea4e16635a8e57b07ee7cd536468a439765ac4a7a24cb7d0a1225815f6cb0c1	dll		Heodo
2022-06-09 19:00:00	b02a095a2c28fee42359310dfab7b9444a234456531e927e0e98dd8d016bf946	dll		Heodo
2022-06-09 18:39:08	ac9d9543a1e37572d9a7ccbdcffeca3f469f550eb2e5444b56ec194a0517273f	dll		Heodo
2022-06-09 18:22:51	9537662c8d84f49cbbf061e139f8bfc65f7dcc08c6850fbb2807755536159359	dll		Heodo
2022-06-09 18:08:11	c7a712aa00fd854de03a3dc9a2c52160cdd8603f5f9e34788153a5437b8a44ad	dll		Heodo
2022-06-09 17:40:38	9752ce35008c04a4328f8cfeb699d2c055059a03b27ace90540ea208f3ae12d4	dll		Heodo
2022-06-09 17:22:24	83064be247eae3a4fe696c8dcbe327f191a3b940956844a138c09cb1701ac547	dll		Heodo
2022-06-09 17:06:26	861ce8ad92295c95a4fcd13c5204415b0f1a3faaa84a79ddb146ed7f1fb44645	dll		Heodo
2022-06-09 16:56:35	58f6322629fd7ac6ea15b82e25210581b37351d143d9257ebfdba1d67f225271	dll		Heodo
2022-06-09 16:42:50	40dcc39325460fcc508c29a7ab79fe3cc102f83b26ce77f2e60e97f045308b68	dll		Heodo
2022-06-09 16:25:23	1ed03ee6ad9c27d68f39e221310f83f9d24c506fac973d4b6be2a309da5078d3	dll		Heodo
2022-06-09 15:59:53	dea6290f3299510afeaa17951221970682fdfed3e1a7e3fa426bf70ef20da7d5	dll		Heodo
2022-06-09 15:56:37	519a71ec291c755355d70f82b34d895e6d32a9ef37f9062a41a6cf46fc42c9a8	dll		Heodo
2022-06-09 15:31:48	86ac15ad5a1ac85f8e08837a6691b8cd646b3bde6a855762b7fef8b3c834688f	dll		Heodo
2022-06-09 15:17:43	44d84325d3811216d77fc115c0af4cce809a59a882410ee32a3d8a541f1b9a24	dll		Heodo
2022-06-09 15:03:09	4791f761c7af832d2dca98ef6bd070c8d2bcfb1618d09b57f238eb17a77cd264	dll		Heodo
2022-06-09 14:52:12	dde673530e95e9af1aab0d5ab3a63cb3b59272da86292c68f8cb9b08f9aec353	dll		Heodo
2022-06-09 14:27:20	914002c432e21e61898a267af5e7e51e6bd98e14dad9ee4eafd60084f066b0d5	dll		Heodo
2022-06-09 14:05:16	2f3d797cce669de820e4f0af8f09d4e71548c1b1d9bfdda27fac19e7655d41e0	dll		Heodo
2022-06-09 13:52:34	709d17c94a59cd1b3a229bdbed75adc70b0c454663833a22378ae66e955bacca	dll		Heodo
2022-06-09 13:18:28	053204089ba6a7dd8864be9c07d007cfca54d3acc67e606c964c1d01e3fd4b6d	dll		Heodo
2022-06-09 13:01:47	49e1a9f757a978ed1fda9f2f8d811dec4ae4985524e22f5eb120eb1441a8b1f8	dll		Heodo
2022-06-09 12:46:55	98d709dafdf53433896bfeb6468c59e3074445fb5b985c9c4c88d5dfd020f426	dll		Heodo
2022-06-09 12:21:22	255b7ab9859eaf17d0a0abd11d511b98ab95fdb476f0ccbaabfd46b5bdb5f692	dll		Heodo