URLhaus Database

You are currently viewing the URLhaus database entry for http://reborntechnology.co.uk/hVBLL/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:12266
URL: http://reborntechnology.co.uk/hVBLL/
URL Status:Offline
Host: reborntechnology.co.uk
Date added:2018-05-23 20:48:18 UTC
Last online:2018-09-08 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: c_APT_ure
Abuse complaint sent (?): Yes (2018-06-11 10:33:35 UTC to abuse{at}lunarnetwork[dot]net)
Tags:emotet link exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-05-258573.exeexe 89ebb4c770ffee82d1fb6eea005ba0239815d81fedeec52746063623dbcc5abeVirustotal results 30.77% 
2018-05-251658.exeexe b7fab8bd7cfc07cf11cbf012b9d926cc4953df301b4d5bf8df12106d9d748acan/a Heodo
2018-05-2567813.exeexe 47d5bbe07def0af5fadadd959daec1c909cfdd92167f81d78cd0240beb1e584cVirustotal results 16.92% 
2018-05-249831.exeexe db86583a4b5d6a1aae8020de6d4dfeaee0a352d53c8009c3e733c7638f75368dVirustotal results 20.90% Heodo
2018-05-2471008.exeexe dc4a0c46a17f49e86870cb015f22a6febdcf2e51e20b2b6b31a0393a568c079bVirustotal results 15.15% 
2018-05-2464916.exeexe dfae51c42a048ab6ca0a9e49c85d91c01d9580fb937f78bcd153a00f4ddb4830Virustotal results 22.73% Heodo
2018-05-2311563.exeexe 8cbd2183005052ee5b5549c8eb7edb5a3fbdf7487957186c43184b8217fd4bbaVirustotal results 26.15% Heodo