URLhaus Database

You are currently viewing the URLhaus database entry for http://turningspeech.com/rm44r5z/usg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	159389
URL:	http://turningspeech.com/rm44r5z/usg/
URL Status:	Offline
Host:	turningspeech.com
Date added:	2019-03-14 14:33:02 UTC
Last online:	2019-12-15 15:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	unixronin
Abuse complaint sent (?):	Yes (2019-03-14 14:34:04 UTC to abuse{at}digitalocean[dot]com)
Takedown time:	9 months, 6 days, 0 hours, 39 minutes (down since 2019-12-15 15:13:10 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-11-30	n/a	html	e2be88fd3dc7349ec9c3cd296b5f4241061ee5462e7d04d5425359a27b2122d2	0.00%
2019-03-15	1vXv.exe	exe	3176ff05972f9d88ea6084fcfd9d8dd1a116b4feaf323f7dad84122d4f0bce05	18.46%	Heodo
2019-03-15	dazw.exe	exe	cd38a2925675abfedcf34ccee437c54e327711dfd2489250277ae9c71e7da4d1	n/a
2019-03-15	kaOYpm.exe	exe	e4891bdac699267cecb2f39f57eba3acd6205e1a2d382da696c8522050952ada	20.00%	Heodo
2019-03-15	8uZ.exe	exe	1c1124a73311db421519fdacaafdacbbb65f504c876edd4bd9030be86337f041	36.23%	Heodo
2019-03-15	PeK.exe	exe	33d96b8d7411af78eb453372e1167f9a16f034f4ec686bf56e0058ca099a4661	n/a	Heodo
2019-03-15	5MIIcj.exe	exe	357ae58a4848b1d8f210453bfd0289b15a8f06fa5e21ea5634d8d7b9a22ca3ba	28.79%	Heodo
2019-03-15	ZvOe1.exe	exe	59697821c5ef906bb937c1e8bb5c913f2ff4eeface3a8ab866301e0303a4e9a4	n/a	Heodo
2019-03-15	rgWPJ.exe	exe	3b38f2b24219abcf2fba7a0cb351d607aabe53b13f85ef5409f1d035da2679c6	n/a	Heodo
2019-03-15	eL.exe	exe	0b19ac576d3d90093bdf9b732d59db5ec772ad19e0f6fbec32ed41aa7dcc33f3	n/a	Heodo
2019-03-15	xj4.exe	exe	856d5af1fc70d30e4315867215f4f085b0c5d4c63d989e43ec20ad4b58fba69b	25.76%	Heodo
2019-03-15	coEGw.exe	exe	75a9e53c6df03b6570aab3044f7fca4bfc532e9b8cdde963337ce351c58df94d	n/a	Heodo
2019-03-15	g1LM.exe	exe	31fe699054df7671b3edad7b7005505a667b3682fe437330a676aeecb247c735	29.85%	Heodo
2019-03-15	71W.exe	exe	e3123e19730fb8956de0941c55043272cb6da28fa62c6536062ba2deb7fd8d81	27.54%	Heodo
2019-03-15	rEWD.exe	exe	5d512a8cf32ca4e011ce6af313d9be115aeb20fc4e80d48195f2216db9c03577	25.37%	Heodo
2019-03-15	Ob.exe	exe	745b3f844eeafe9a67162dc78f4d6320c233427941eb17b4e42956c285ea2e2e	27.54%	Heodo
2019-03-15	2JbP.exe	exe	2f887dd7e01e16269442428f5d6d0941b32c8c4d1cc58338a0c575b03ce162e7	n/a	Heodo
2019-03-15	sDN.exe	exe	d10f0495573867205bc8fcf2913a4cd47c4c92ca0381949978aedd8a91e7fc36	25.00%	Heodo
2019-03-15	u78I.exe	exe	1e44c1acda69523aabdb75b22c3c67a138f5343366c6241062e3ee5a44d9c158	24.62%	Heodo
2019-03-15	97h.exe	exe	359a236e7aacf6c4ef2ee11cf625b6f3cae148b31f6bc7b53c88ecdd13680483	n/a	Heodo
2019-03-15	BGmc.exe	exe	4baa06b4c3c75c623431989780a6d6d6023a2d0b1c20799f934d902e2e8be6d8	24.62%	Heodo
2019-03-15	wUpWW1.exe	exe	bd236d5179242c359dda63d838e47a917ab5cde2da9a48f3aa96f761adf601f5	24.62%	Heodo
2019-03-15	xyeQq.exe	exe	50efa3e7ffdb398e3af40b581b46a6190abeef3eca61ccc9c7df7bdef626b7aa	n/a	Heodo
2019-03-15	UmuGZZ.exe	exe	c1d4159650bffcf5210309ef9b9cb6188da372fae46cc1a447ae3b6a4de7bf13	22.73%	Heodo
2019-03-15	Nae.exe	exe	4eee4aa4630ae75793f4b6cb3f06d0045288ed7468d2925970bd687c61650cc7	24.24%	Heodo
2019-03-15	B3N.exe	exe	1c0c875fe89d9498bbb0f5017fa29cbbdeb0862ea5b459aa84e96e5cd04a4fdd	23.08%	Heodo
2019-03-15	57h0.exe	exe	c5df0bb3c0ea5d0d9b5d71f7e94b84af8778e694c7786a338089c80819c49b1b	25.00%	Heodo
2019-03-15	MaG.exe	exe	54b72327070ac5b2034cb14629a5dce4138763086872a637a1186226e5f5bdcf	26.56%	Heodo
2019-03-15	Cvvx.exe	exe	c717b0aa3df38736937ceb44765fb880c86c4c10bcc43339f9f6449c120c0a56	26.15%	Heodo
2019-03-14	u7iqt.exe	exe	2ec35f5ad5bdd5deee7d2e15fff7c54ed38b8682ef9a0444df4404da156b87a3	27.94%	Heodo
2019-03-14	GU9BAH.exe	exe	2ee08b758aa67e38b558bef2d97ed6456fdcd48e10322793e940a858de7590e6	21.54%	Heodo
2019-03-14	69g9C9.exe	exe	10a2e2df9177d431480a8f3fe0a4f9472dacded3f3ccdff42365f1d81cad0165	19.70%	Heodo
2019-03-14	jBG.exe	exe	afee6c167829796f05e19f511cd0c73795936c7eaf433b10ca85001070af0b34	n/a	Heodo
2019-03-14	LAL.exe	exe	9056d3e465fcc6f14163e1a5d90e61fbd5255b4af69dff290ef8142783a30bac	20.00%
2019-03-14	zXV5.exe	exe	1dade85a30542adb07e686182ef50a654a4961ea4645bdf5086397fee655a5e7	23.08%
2019-03-14	UpzM.exe	exe	002126fbba172e396555d57d34903ac572c12c70a9f55c09cd85334306d91fb2	23.08%	Heodo
2019-03-14	rX.exe	exe	10ea8ad5be30351e201a85fc408e0446a559f00e0d356c34550f0cc189341e1b	24.62%	Heodo
2019-03-14	xQ.exe	exe	eb5e02c68aa470f22900fe1051907a3674f6da6e9be7ebb9792f924056dd8386	n/a	Heodo
2019-03-14	Cgj.exe	exe	20397e555a216e08f40c2b5f5ea074fca77d61a0ab2807115ce5701d6d436ae3	23.08%	Heodo
2019-03-14	0oCw.exe	exe	bf301895350bac4b2e0ef38955637782b49d77e1eb12e06f6e3f4d781512f313	21.54%	Heodo
2019-03-14	20aEl.exe	exe	0daa1c2e8bf230ff66869bcc1f6a781a7809ea5e6ab8bcf736a3fb84cd64336e	21.88%	Heodo
2019-03-14	tDj9i.exe	exe	41a4b259b7eea97003af926184d91ae5bb243157c91758bd8240adad6fc5043f	21.54%	Heodo
2019-03-14	VrBF.exe	exe	a2269ea055a7ea6dfc5065b6f69854b9702d94d97af43f8c2c50342f9cf62195	21.21%	Heodo
2019-03-14	u2IG.exe	exe	681a087d376b51c3ad5a2b01e42797867f7846f80d5077c4dafab317c519a049	n/a	Heodo
2019-03-14	5JO.exe	exe	bf96688fdfe86355343cd8cf0fdab6e6563d23ad3bde584c4437e48d3c12434c	23.08%	Heodo
2019-03-14	Eteq.exe	exe	7db3dab503f55572b8b336076d7a17a57cdd27f7efce578f2e334161679cd9f0	23.44%	Heodo
2019-03-14	Qmj.exe	exe	a6440113028bcf03e1b3157bb94e46a0d91621ac802e39f12230dab0e5ef2297	23.94%	Heodo
2019-03-14	jg.exe	exe	78493aa7c5e4723ebeb6bc77804d23ccc5ea1d5129f39a03170f9e4ad6f703c2	20.31%	Heodo
2019-03-14	9xdN.exe	exe	dd548ecec987eb64c9bd20f31f7af016f080a8a4ce209549ac2780a35d973908	18.46%	Heodo
2019-03-14	D1rp.exe	exe	c27abdb16492b4c1a455a23f243d8b1f9803fc5e754d9474bf155ec96cd58e3c	n/a	Heodo
2019-03-14	3TPQ.exe	exe	313a39dff98376fe663cdc0a04c58ac68ff3f3990fede7760f21c8376365c9fd	19.70%	Heodo