URLhaus Database

You are currently viewing the URLhaus database entry for http://happy-thinking.com/wnNq10cKo/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:118506
URL:http://happy-thinking.com/wnNq10cKo/
URL Status:Offline
Host:happy-thinking.com
Date added:2019-02-06 16:01:13 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2019-02-06 16:02:05 UTC to abuse{at}vultr[dot]com)
Takedown time:1 day, 0 hours, 23 minutes Poor
Tags:emotet epoch1 exe heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-07RhX2xccrd.exeexecaed4bc1e33e02ba0351b6462c060eb1cf6b066ad54f330eda001d45c6d0729eVirustotal results 15 / 66 (22.73)Heodo
2019-02-07HDiYEAgGfX0m.exeexe1f505bb359ac5e52764c55098f931130d21a497d17875bb8f91f92a247dc653bVirustotal results 16 / 70 (22.86)Heodo
2019-02-07aKRB6rJ2fss.exeexe02f64d80d63704ae5a0eaac4a2a47bb334ba9a1fc84c2ffab7b79a7fafcb5d2cVirustotal results 14 / 69 (20.29)Heodo
2019-02-07xpGaXLbmr.exeexe9e69b7744d23b7d00b2952f6149650f163c5f623a342ac0e84d63f1c6222c6feVirustotal results 16 / 70 (22.86)Heodo
2019-02-07n66caiMl.exeexea8c0428d05782e9040769db289b730cc77f6476c5fa7a5f25b8aceabef7e319eVirustotal results 18 / 71 (25.35)Heodo
2019-02-07M2yy0kmY.exeexe01e6b8bf2241b3565a72cfb29987a69bdd9625165b80e127745eb05841637aaaVirustotal results 17 / 70 (24.29)Heodo
2019-02-07PpqkErfqSb.exeexee0aee41ff23fce3d174cb83af69d23c7b8acf542229d0c24d7001e1b4b58eabbVirustotal results 19 / 70 (27.14)Heodo
2019-02-07olIxKw2JG.exeexe791d24c4347a6e9dc66f3ca4421f3546527eb4b6900fa77ffafea10470d09a85Virustotal results 18 / 70 (25.71)Heodo
2019-02-07yz3WuHQx.exeexeb285bf25377459838077e695d0b7ee83ad0e0f28e40888ce115c9ffab0163edcVirustotal results 18 / 68 (26.47)Heodo
2019-02-07OEHJkuRFBg.exeexec1a3c6d152de93581b64760b6a9a15a9a55baa2f675152ea734259baa1b73d89n/aHeodo
2019-02-07oMtgpX4gQ.exeexedfedf5dbfe12506638064539970296e23602104762e1f414444bd9d8f204c5c7n/aHeodo
2019-02-07V5s708Ppwg.exeexe1541264a2cc39b934a8e929b7b3d61912eba77a36a0a2162f3eb0910bd104651n/aHeodo
2019-02-064V7m9I9cFM.exeexe5692b653292845684745a098ac4c36a18289c07888cce8b44086ce5e321df2f5Virustotal results 20 / 70 (28.57)
2019-02-06MkxPxE5YN.exeexe0d4177b3616d93464ba2f0a20849e9e79e5e190789ea17a74b9c6d787a92561cVirustotal results 22 / 70 (31.43)Heodo