URLhaus Database

You are currently viewing the URLhaus database entry for http://firemaplegames.com/6QszVr7G/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:118216
URL:http://firemaplegames.com/6QszVr7G/
URL Status:Offline
Host:firemaplegames.com
Date added:2019-02-06 07:44:04 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-06 07:46:07 UTC to abuse{at}bluehost[dot]com)
Takedown time:5 days, 11 hours, 28 minutes Bad
Tags:emotet epoch1 exe heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-08z0I6h9suZ8.exeexefee6e4dc6b624e508522f9cfdc5324cbe8a9178a15f456c60c00a3f6bf45c1b3Virustotal results 15 / 70 (21.43)Heodo
2019-02-08TdNDnGZacO.exeexe868d3c518a9d9eaa7cc65e84543ef4afe0cec462eaf735a06845a06aaafae59cVirustotal results 16 / 70 (22.86)
2019-02-08PxdtVueT5.exeexef1ed4c8d65282abe85069fd620ae0c3cf396b7626020728e110f7088c56617cen/a
2019-02-08LmsHM0cmz4c.exeexecefa8fb599bb5d98452a44941c890c78a05b3592d49368085b56b655b21b5940n/a
2019-02-0804qMbnGD4QHu.exeexe32961129f33182b4bf17dfb95a735b91224b53f809d0fa82961fcfb8164094f2Virustotal results 14 / 70 (20.00)
2019-02-08YUEhgw3A.exeexef5a4598a7ea94636131f1522807b37041e11aa9613900ef6d7f665e040d37f14Virustotal results 16 / 70 (22.86)
2019-02-081HyMqdAzPBk.exeexe04c4da7ed0469c7688559c5c6f51e0f7c2bb321b2b1b1c02574ee8e22512bd96Virustotal results 13 / 69 (18.84)Heodo
2019-02-085P7nReZLDZq.exeexee891117327744671002cf186a04c152747d693a7e10b92cdaf6e2f524aaaad65Virustotal results 14 / 70 (20.00)
2019-02-08WCgu0b35mVeg.exeexe857e26f16c1e436cf97b1e92803c963810e75bc567bd346044d28262183fc62en/aHeodo
2019-02-0733q3U8axv4Fm.exeexe74d0b72cc8be8b3351069bdd05d712cc1be64715742134973f534cd981cb3d75n/a
2019-02-07RChdcmdLI.exeexe3d801594041836d7d72764ed32939a812e6ac8d147858c1588a80e1fa1d45776Virustotal results 13 / 70 (18.57)
2019-02-07rWNA68ZOWJp.exeexe988683b59f90a6ffa72c9e0e74e4ca35908aaa771c20970dea3d35a3344c4719Virustotal results 13 / 70 (18.57)
2019-02-07CI4DnrS8AS.exeexe46add5ce43139c26ee09db2ad9beebd523af0e21431073b6a48ae4ddf17ddd42Virustotal results 15 / 70 (21.43)
2019-02-07Ng7UgEHy9d.exeexe3dbc3e881e4a07b378ac128fbbd303a653f4fddf611b29b7375d12381a309434Virustotal results 18 / 70 (25.71)
2019-02-07GRqAbSXezs.exeexee34e9e47076e85ed927db634fcc99216387cb2dd13a7f087ae4a733d2f7add43n/aHeodo
2019-02-07keHpLXccgOwa.exeexe088616d5e9544707e41c687c500457d62fbdc7339600cd01df949bbdb40384c0Virustotal results 16 / 71 (22.54)Heodo
2019-02-07WpMTjJNo.exeexe89dbeded504ec9b136d1cb2dc78b84fafba3d3d1da4eebf10c8ea9b5658f012bVirustotal results 12 / 71 (16.90)Heodo
2019-02-07exDwt85XQB.exeexe00395b28d66d68479e956e4f5692fa1eb62e167054b78ca285eebb225a3a87cfn/aHeodo
2019-02-07sNCrUzWZKok.exeexe2e17979397d0709860f4138d48ad500333cbfd1686cec896d769e68bb6a00b67Virustotal results 15 / 70 (21.43)Heodo
2019-02-075rqcGsT0BvGh.exeexeaa64e15b912fe52162bdfa1d065e79dba23be68df0b60b41240245ef31c1518aVirustotal results 16 / 69 (23.19)Heodo
2019-02-07kMtZf6qgTPI.exeexecaed4bc1e33e02ba0351b6462c060eb1cf6b066ad54f330eda001d45c6d0729eVirustotal results 15 / 66 (22.73)Heodo
2019-02-07fy3c7AyLFoZ9.exeexe1f505bb359ac5e52764c55098f931130d21a497d17875bb8f91f92a247dc653bVirustotal results 16 / 70 (22.86)Heodo
2019-02-07KKGy66fmFc.exeexe02f64d80d63704ae5a0eaac4a2a47bb334ba9a1fc84c2ffab7b79a7fafcb5d2cVirustotal results 14 / 69 (20.29)Heodo
2019-02-07eLwBqTCClAM.exeexe9e69b7744d23b7d00b2952f6149650f163c5f623a342ac0e84d63f1c6222c6feVirustotal results 16 / 70 (22.86)Heodo
2019-02-07bykpDlmwQn.exeexea8c0428d05782e9040769db289b730cc77f6476c5fa7a5f25b8aceabef7e319eVirustotal results 18 / 71 (25.35)Heodo
2019-02-0755Q6BaPi.exeexe01e6b8bf2241b3565a72cfb29987a69bdd9625165b80e127745eb05841637aaaVirustotal results 17 / 70 (24.29)Heodo
2019-02-07sBJZb8dvWF.exeexee88dcb6c0c309ee5efbc9bf97929c6a3410f952193beea5654c7dec7012ac298Virustotal results 18 / 70 (25.71)Heodo
2019-02-07tp24tQzi.exeexe574dcf2e2b0ad6f88734430ba0f36de7143b60639699a06de6004ee2e899ad9cVirustotal results 19 / 70 (27.14)Heodo
2019-02-07weVdxmVf.exeexee807d3f61a6cc3a89c011d9dbebfeb995594a43da12e680ca4a76ed898345ea0Virustotal results 19 / 71 (26.76)Heodo
2019-02-07PmGCyMIotn.exeexe58ef17336ade19ae6592daeb61a098a7ea804bdd39ed71b0b5fb4b3419ed12c3Virustotal results 18 / 70 (25.71)Heodo
2019-02-07xkRM9GydqoJ.exeexee0aee41ff23fce3d174cb83af69d23c7b8acf542229d0c24d7001e1b4b58eabbVirustotal results 19 / 70 (27.14)Heodo
2019-02-07xUsOUIpW9.exeexe791d24c4347a6e9dc66f3ca4421f3546527eb4b6900fa77ffafea10470d09a85Virustotal results 18 / 70 (25.71)Heodo
2019-02-07U3UvJvs3xwC.exeexeb285bf25377459838077e695d0b7ee83ad0e0f28e40888ce115c9ffab0163edcVirustotal results 18 / 68 (26.47)Heodo
2019-02-07yNCw8K3nGIo.exeexec1a3c6d152de93581b64760b6a9a15a9a55baa2f675152ea734259baa1b73d89n/aHeodo
2019-02-0757kG8qUASoD5.exeexedfedf5dbfe12506638064539970296e23602104762e1f414444bd9d8f204c5c7n/aHeodo
2019-02-07yRecXkpuN.exeexe1541264a2cc39b934a8e929b7b3d61912eba77a36a0a2162f3eb0910bd104651n/aHeodo
2019-02-065NmhA8hE.exeexe5692b653292845684745a098ac4c36a18289c07888cce8b44086ce5e321df2f5Virustotal results 20 / 70 (28.57)
2019-02-06q58fi4Mczu.exeexe0d4177b3616d93464ba2f0a20849e9e79e5e190789ea17a74b9c6d787a92561cVirustotal results 15 / 71 (21.13)Heodo
2019-02-06HHpjdXrb.exeexe77b1cf2bd25ba5ecd3a76ccefd06c9ee2483d2f9eb2e2d28154162a3674be5afn/aHeodo
2019-02-06WrHd83poFKJL.exeexe5acfb260d51c7169625d731cf651ae08015b67a867cd289b3a90b0adf1bec1fbn/aHeodo
2019-02-06ThlTZ44k.exeexe41999befe893bc63ca6e4ed1d6a43f72fecdc2461e4e27449ad5a91b6c463744Virustotal results 22 / 70 (31.43)Heodo
2019-02-06CwZVtqqpPmAq.exeexeda2e2a373dcdb8e0e0b626f265b4a07b583c78189205465a1019ec8dc5e4ad5bVirustotal results 22 / 70 (31.43)Heodo