URLhaus Database

You are currently viewing the URLhaus database entry for http://bayboratek.com/28032019yedek/fd_2/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	169771
URL:	http://bayboratek.com/28032019yedek/fd_2/
URL Status:	Offline
Host:	bayboratek.com
Date added:	2019-04-01 19:19:02 UTC
Last online:	2019-04-02 16:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-04-01 19:20:05 UTC to abuse{at}hostigger[dot]com)
Takedown time:	21 hours, 19 minutes (down since 2019-04-02 16:39:30 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-04-02	4q_ec.exe	exe	6de2c44b0cf5cadfdf989bfc99b69f7e283330cdc86bf7e1908b11d161cfaad0	n/a	Heodo
2019-04-02	9_hl.exe	exe	160e87589015a0d6ac4c1e3ee2ffaa63d498bd3c41b1d678a6acd484f4e1ae9f	n/a	Heodo
2019-04-02	HC_odq.exe	exe	6e19980ebae7d6d040135a6feb751eb91b382508c3636cc05454b5512af0cae7	n/a	Heodo
2019-04-02	uZ_3Z8.exe	exe	669f27873d7d894d23aee0452d15fd12c07335faf3c12c1c885ae49f0509edb6	n/a	Heodo
2019-04-02	3As_B.exe	exe	6407b8a7cb20e122fd4c5e03b64d8f95883027fdb5da7dde75ff7cd98b84a565	n/a	Heodo
2019-04-02	l_Q.exe	exe	f12d447cbb6affcaf04e956dc0f6846fb58f6f68df41d5e9ebd7292659ed81b0	n/a	Heodo
2019-04-02	Y_Ll8.exe	exe	e3c337f985337a02f6f4a7b45db700b7d0bc72c9f9ca63716afaa4e76f0364e7	n/a	Heodo
2019-04-02	x_Ai.exe	exe	41f3f7cbbcd17c4eee28616e14e8b906d0f737a1a915b0deca18742cc03f2ea3	16.67%	Heodo
2019-04-02	DsO_7.exe	exe	8e4b20dbd8147758d1f49805df58a2fb59b816c2f50f21785ba4812ea52fba3a	n/a	Heodo
2019-04-02	N_7s.exe	exe	19c8a74192c130e8b99b70ce73fdbe1030fe6b121c6f83d779df598aac760de9	n/a
2019-04-02	ttm_YP.exe	exe	9af362768f9590811e859f451774812a8393bf18555cbe5d5b54d696d26c9465	n/a	Heodo
2019-04-02	V_rKZ.exe	exe	f3b9b6b4a367c1b729b474300d50d5de379bbf1bbcb09c3b27a255e3c34166b8	n/a	Heodo
2019-04-02	wki_C.exe	exe	d1ca2d28e59787f2fe89c374977cc0bd01e0f131422814211e45bec3f467ceab	n/a	Heodo
2019-04-02	X_jf.exe	exe	ab0933f63bc7f4e2c732e11a0726c53e6ae74297e1d14f1d771cccfe565c6cd5	39.39%	Heodo
2019-04-02	KgK_0No.exe	exe	8ce564ba3eb68a2efe2705172b5e1797a6e92251cf8f3f07d73c6e022b557323	n/a	Heodo
2019-04-02	IV_k.exe	exe	d7bafa23094a78f80289e227c49a9fb8fafd2c0d517baf5f33ea65e90f195b16	39.39%	Heodo
2019-04-02	b_s.exe	exe	ec7ba64cfe53a2e656fa0dc0921927b868fdfc61df6c8cd211377bba3c1d1bff	n/a	Heodo
2019-04-02	2o_kg.exe	exe	d71f191a28c2fee43590f019907764884447c6c7f1bbca2ecece3ba981b61bbd	n/a	Heodo
2019-04-02	V_AXH.exe	exe	cd482777ed67bcb237206a5c62a91b2e0f0794a92dc81850b26798e5ade789ea	n/a	Heodo
2019-04-02	QS3_clI.exe	exe	b8404c17d5c8025369ffd45c801f3fbc82118f9dd9eec8f65c093926bade4626	n/a	Heodo
2019-04-02	m_dqt.exe	exe	3cf6fcf86e58f19c0cb068ae4235bae12183cc5a92ab2a0ec71ee3e323495d4d	n/a	Heodo
2019-04-02	hbG_y1.exe	exe	410e7966c9c2ffc20341491cb90289c13a9ab5573f92759b86914bc76dcf9738	n/a	Heodo
2019-04-02	RW3_Tz.exe	exe	c3ef1af8aaac718aead7387edb7ae0ac3c27f2756e3ca42dfaaf3472920655ca	n/a	Heodo
2019-04-02	zz5_V.exe	exe	747d4c3f74e4fad1d9721cd49d46a7bd510364c1ac76873def1dcd1a90140406	n/a	Heodo
2019-04-02	V5_A.exe	exe	1f3401364a3273a64662666d0d381e8d82592c6bde297d0ff5039036cb98b987	n/a	Heodo
2019-04-02	ob_Vv.exe	exe	345b0127ea13892be6f90f3c2cc7c9837f16600465621d6564c8146c78d12bb3	n/a	Heodo
2019-04-02	Hz_D6d.exe	exe	3235f0965322893f274654c9e751f89d9f6cb7e45faa7348ba59191464a37b96	n/a	Heodo
2019-04-02	7W_vT.exe	exe	ac098096c38c2d0d9ed7aea8e4eca9edcba64ca7a6c3649355d5379091b12ae8	n/a	Heodo
2019-04-02	H_jaj.exe	exe	e503c8eb7ab6d2e763044b59f124d8e4ffd0182f16d9706cd5b55a85b90839ea	n/a	Heodo
2019-04-02	I_7Ls.exe	exe	188302dd1eaedaa338c7f6abea557262a11f8e9a0b6eec5b4e3c96f7d6908459	n/a
2019-04-02	7OM_wt.exe	exe	996c8002be6d53488f135d0af82363503cb775a62b141a90c014c69b7e8f9225	n/a	Heodo
2019-04-02	8_M.exe	exe	a59afb7a988fced562f200e4aba7926382e3b9ae9438293cc125c0812c2708f5	n/a	Heodo
2019-04-02	n_D.exe	exe	ee219e40f0dfbc9053b0a6259711bbd307a1169eba452b4630d37dda89bb40bf	n/a	Heodo
2019-04-02	1M_G.exe	exe	af9057d518bdd7ae301d65cb9284a2956aefb379d0db0d39d8e552d80e16d34d	n/a	Heodo
2019-04-02	An_O.exe	exe	ed52edcfba4d3a668a5338ba60ba7944cfc5c9f579f2c604a286fee9e4cbc634	n/a	Heodo
2019-04-02	nW_r.exe	exe	c84e5b566b72f4e094c2f24efb27c320ccdf0d0c49eb1096d20a11d5a42b1a63	n/a	Heodo
2019-04-02	xQ_yCk.exe	exe	14f41e2318c51bb9607852b7ee795de5cbcdb00ec036416fdab6453dbdec5ea0	n/a	Heodo
2019-04-02	s1_mP.exe	exe	2af32f16ecced221fa0505e1e00c1ea6b5f0afa8cb1c156564317926f1e6ff47	n/a	Heodo
2019-04-02	v5_5Mm.exe	exe	5fbafceb0f16bb27bae54deaefc032ff8c4c793bfda63ca2c25110f75ad27cdd	n/a	Heodo
2019-04-01	Yc_I.exe	exe	47cee950639a32f182845da6e04bc60c6a87516384ef3ec863bb44c03a30a75f	n/a	Heodo
2019-04-01	Na_yX.exe	exe	173b66d1ea23f8d06e3f5442080a2e86202516940bdba6dd6d90ee9741589184	n/a	Heodo
2019-04-01	U_Rj.exe	exe	7d325a2ed42e676a24c83bdcef1801b6aa8e3cf429da3a092ff0f678dda0f4ef	n/a	Heodo
2019-04-01	Fp_4V.exe	exe	168831f33de63e7dc14625ff9ac0a176bdd551ee274c288e141e1cba723407fd	28.36%	Heodo
2019-04-01	2_w.exe	exe	faf4db119713e604120f39c71ee08ad6f7c724d77f3192107dc7ecb4f14a091f	n/a	Heodo
2019-04-01	c_3qS.exe	exe	acba3b0793bd98b560ad8d8f3176b1d18c9250c26e2c6015473ba4dcde53379a	n/a	Heodo
2019-04-01	S8c_zJ.exe	exe	eabd41fa5ee446f9905d4610f2c8a96b7f15e693f11614b675d8c54c888129dd	35.21%
2019-04-01	4W_Z.exe	exe	1983de781d21e65bee939d558f1ecaf5a8fa39fe645a4094bf5afa9d66426635	46.27%	Heodo
2019-04-01	Z_hn.exe	exe	cf044e640cc3a3bb1f5a61705222ade28e69c8c1a99740e98330ba81f8294cad	n/a	Heodo
2019-04-01	r_z.exe	exe	34fbe1010d603a31354efeed70eab67f8bbb6fafc7753d948fd288266aeeb7f4	n/a
2019-04-01	GiV_9.exe	exe	ec8ee6e99a27fdff33e9eb27794917862915dfd53d320338e0f4aebb14a309be	n/a	Heodo
2019-04-01	w_u.exe	exe	c8fdf7ce4ed363ae984e339072a78a041222bc31b5fab2ea33836746fac23591	42.42%	Heodo