URLhaus Database

You are currently viewing the URLhaus database entry for http://cliqueservico.com.br/wp-includes/UB_cl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	170383
URL:	http://cliqueservico.com.br/wp-includes/UB_cl/
URL Status:	Offline
Host:	cliqueservico.com.br
Date added:	2019-04-02 20:20:16 UTC
Last online:	2019-04-10 22:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-04-02 20:22:03 UTC to abuse{at}unifiedlayer[dot]com)
Takedown time:	8 days, 2 hours, 9 minutes (down since 2019-04-10 22:32:00 UTC)
Tags:	emotet epoch2 exe heodo Trickbot

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-04-04	1t_Y4w.exe	exe	9cf98f8c1dc7c09f596a5db43c2ccd48a4524b52abc8556747a94cc6b71361ce	28.79%	Heodo
2019-04-04	0RW_W.exe	exe	1bae2acdd6d0cf490d913575251cf3a899e5a75ede6a55d21dba1bf98e332fc7	28.36%	Heodo
2019-04-04	Ach_af7.exe	exe	9cd260095bdd10ff5d4601e5668f112dfe975ac9b456597a35d8d9968707c5cf	27.27%	Heodo
2019-04-04	Hy_t8r.exe	exe	902af4d2161c131f278d3fa32a5d428184ee7cba2e4cc72709cc7778f4b98356	19.12%
2019-04-04	A_2Ez.exe	exe	ed9a15316827b19acf55249f746896bf55e50490b31d1c550c5a160feb645811	29.17%
2019-04-04	J5h_Gw.exe	exe	1c9b0c1884af697afbaf94219fa96db7507a5f2e227c761d429bf6e93e054997	23.53%	Heodo
2019-04-04	Y_p.exe	exe	b181b94c1951f6ba95776905d89348032eba2c2bdab5d297fd6e572ae847a1b3	n/a	Heodo
2019-04-04	8A_Wn.exe	exe	498706ac7aaf4d4cfdbccdbfa53768d4467b7c02e766fcc374453b13cb26b720	28.99%	Heodo
2019-04-04	74_7.exe	exe	5012f55baf856d15329c09c144238c7d772a5a256f5af75725b2de6227720029	24.29%
2019-04-04	dD_5g.exe	exe	6b41d4813ce24b736777aa4b9988f008e79c3f0fb1530d4e7016efff36a62a1a	n/a	Heodo
2019-04-04	f_md.exe	exe	a2a2dc685f6aa012ec8367fee485e59a101c11b09d5cf8b357d50b45f44c37bd	21.21%	Heodo
2019-04-04	m_nn.exe	exe	def81b5bb8bffa9d5d8420ce94fb5fa0de750bda2ad9a1a6119a09cb3d4b5f95	n/a	Heodo
2019-04-04	ju9_Naa.exe	exe	b08ace3095fdfe677f3d537153a0897ce156d14765a524ccdf07cff3a5708bac	n/a	Heodo
2019-04-04	IL_WGG.exe	exe	e9a3829fd333d13627ffdf7e3b8a3dc04cc2a82ea4b9ec620c4e22f32acad712	n/a	Heodo
2019-04-04	D_E.exe	exe	648ad62ccc1c1caac96cfed3e54689b5f2a48216ffcec0e22f323b83c2536173	n/a	Heodo
2019-04-04	E0_L.exe	exe	fb22f709fba709dee40052f691ad88a80969d2eeea03257c9b7f00e21bbdcaab	n/a	Heodo
2019-04-04	LzF_LLT.exe	exe	7ebc5946d1d873b4bcafe680501f4161ff15226dbdae6ece2878d456b15854d5	n/a
2019-04-04	E_2.exe	exe	515f04cc1edf2125752032263efb6317065bc2a34d3ec030246e26b17e5cd1d0	n/a	Heodo
2019-04-04	v0H_A.exe	exe	0ba6132102baac6aeb27f6f52c94bfb37131e8b0628f28afc8318c8dbe28eadd	n/a	Heodo
2019-04-04	T_eIa.exe	exe	2c8b031fc13cf88042f17b8c1c5473a8f88c6b68dff6d7b10221c9d7d5ecbe17	n/a	Heodo
2019-04-04	1E_7ST.exe	exe	2c4b999b12c05864b4693714e28bda17960fdc19805b975cdd87fb4c27b6f52a	n/a	Heodo
2019-04-04	tYw_Icf.exe	exe	125116d6cb64c040fb7bc3d324ca9d64c1e54edc66f4a06ec4521115ac031c52	n/a	Heodo
2019-04-04	v_yR.exe	exe	859ad94a9315c179b545058422260cae3e76377f7c1b5b83d75da1e6a56b8679	n/a	Heodo
2019-04-04	1p_Qc.exe	exe	4ccc528d3b534589ed7e3c5b90a7390583a04d04a0763bc464ea9d24169e2667	n/a	Heodo
2019-04-04	f_yFX.exe	exe	d9c013b53cbe010d383b3d8c9b0f158eca9356040de30f2a2586d3bbf4c134bb	n/a
2019-04-04	BOL_R.exe	exe	0da45c86148f71274952df06f4881f10fba9c9630dc51aae039cc92f6aa574e2	31.43%	Heodo
2019-04-04	ik_a.exe	exe	4babe0ec41e15cf5cfd5c2adc45b542a83b3f1684eac5dae7a30c86f19fe1936	n/a	Heodo
2019-04-04	s9U_l.exe	exe	d0adf8403599eb908a8cc259225a2c7fba53ab00b2a2218c57fd11f18954c087	n/a	Heodo
2019-04-04	Wjg_Yc.exe	exe	9e17ac6638b451f5c24f131f1e253fb5f151d354f3aca7d459bce773d6246a6b	n/a	Heodo
2019-04-04	M_R.exe	exe	d01907025b4481f6cd71a27bcc585b5f0678a6bcda98a003a419ac07a050cb59	n/a	Heodo
2019-04-04	vo0_9.exe	exe	ed0026a6157a1504b93f22611d58bea1e37824bb0f3b0ef114184cb5d8b4996f	n/a	Heodo
2019-04-04	L7H_4y.exe	exe	37697722c861b56ae460e89d0c533d35f46661e749b734ae49dc03fd8e268e64	n/a	Heodo
2019-04-04	XM_1sW.exe	exe	6742a0c7bd590dc11e7ca48f4b32492edcbfeea3c0669020262462209298151b	n/a	Heodo
2019-04-04	UA_2t.exe	exe	4e4954b42b1a2a530360fde1d82146ed6409b71911d41a5c8fbf3d6f5e10d6e2	n/a	Heodo
2019-04-04	o_vOo.exe	exe	465bc11b62acf0932c1dff5d8b12c2dd046efaaf0165f7715b1032e0721ed793	n/a	Heodo
2019-04-04	A_rCu.exe	exe	c1df61dea2953d75304191baf998edcfe0474c2deec49506ab3136a537a49fbd	27.27%	Heodo
2019-04-04	8J_9Y4.exe	exe	c6e06f438312482f53e6212dda7549a5e63fe4e626c3b64bb7350bb8bad673fb	n/a	Heodo
2019-04-04	w_lqX.exe	exe	5e95d8293474d755412544937ffae5c99e7d2073fc6f3504912a454f2840fe7a	30.43%	Heodo
2019-04-04	8B_71c.exe	exe	a186a24cdd085c6b4f3bb2136f1c11a3ca7475fa08e91703723797ba8cf7778b	n/a	Heodo
2019-04-04	QQz_JD1.exe	exe	354066184f09a5acb9865ffa5e0ffe56c6b6b67e9f42c87f4d0d4156e89dbfdc	n/a	Heodo
2019-04-04	r_uY.exe	exe	ec03a613d03532a6d23569442f7621f771138052e58556045fa807beb0632b49	n/a	Heodo
2019-04-04	8_D.exe	exe	b5066acbe133acb1b9dc686ce0ae05049d01a52d60c5ba1044930a2c7a6d6a65	30.77%	Heodo
2019-04-04	X_8.exe	exe	771580e238a6b45297eabb591c0b84d38cb91922ccbbf380581b58b8928f0912	n/a	Heodo
2019-04-04	i_s8H.exe	exe	c7e7ada0422e6a4f49c534721d71bce224c67062558c52f4593a69fbf7f8702b	30.30%	Heodo
2019-04-04	V_I.exe	exe	113aa67eb785baec23079210f7977e723478670c5b915bf6f7b3dc6fbd4905bb	30.30%	Heodo
2019-04-04	7_u.exe	exe	f7b9cd2ce687ef3900f8c2ab8255dc4a3e9507efca2409db2c615ffb377fb07f	n/a	Heodo
2019-04-04	UPS_rhq.exe	exe	e9c81e536a128fd38f805d9fc65fa29b5d939dda6df61e9666674b3486f391c5	n/a	Heodo
2019-04-03	A2j_4.exe	exe	ad7881964679256ace45f058b6d25e30956992e29af5871e966c49494ef1eb24	n/a	Heodo
2019-04-03	GUu_VT.exe	exe	18b3a60c41640a23563d55c0715a9ff705a99d38ca50d4a8c73acd062e9a3293	n/a	Heodo
2019-04-03	8_G.exe	exe	5897d810a2dea21670933988c81e2ffc751ef116b2eedc2b1c3631e8ff6019ed	n/a	Heodo
2019-04-03	g2_RKt.exe	exe	78732d62b14725712bac3880edae7899fefa1e29601ff27e412fe2fe6734922e	n/a	Heodo
2019-04-03	C0_K.exe	exe	e2a0eebe4998cda68b01c97fd25904e2dfbc2552129e8f2054de5fe0787ab521	n/a	Heodo
2019-04-03	1_UTs.exe	exe	5f3f9bf98fa30f6f82eef2258ff185169271f7f172ea04d64f52fa95f0811bd9	n/a	TrickBot
2019-04-03	EPA_iqA.exe	exe	76e8037aa04e8ecd81a0f8f943ffdcf62427638c94fdb8a91e8be7858af1094f	n/a	Heodo
2019-04-03	Z_7TJ.exe	exe	571dd2e896488429635b8b6ba839b94e7367775b8933e813e73fa363804dbbae	n/a	Heodo
2019-04-03	TO_i.exe	exe	94b614d94c56ef579676a8161cadf6b93dbbfd04e1ff00e5b73b58ce979121a5	n/a
2019-04-03	B_VR.exe	exe	3dbf0e22b4df9c48e993a0e16b5ac028ffab89ee133b6d707f16258cf28541ef	n/a
2019-04-03	v_H.exe	exe	4db1bfa158aef9bff689552dfd4b04f3c1a6015e395cac9acf97d4dc6b370d9d	n/a	Heodo
2019-04-03	z_z.exe	exe	4f6a8c8b2d1689737c34ac548d5d40fd6f7b35d9b81f683310051e520f6c9e95	n/a	Heodo
2019-04-03	qw_GKI.exe	exe	0228edab971eb9213d206bb501bf9bd03e1920af720897b59ef4adb98b956ab4	n/a	Heodo
2019-04-03	AeV_qxS.exe	exe	f6ecd300d3e313c682d6502f389640ee6418729a5ed45e3d1113f8b058f312e9	n/a	Heodo
2019-04-03	4hE_Cf9.exe	exe	383cb9749c9b49aecf1bad48576d1a20601cbe1ec25e18461c0406df9a117731	30.88%	Heodo
2019-04-03	oAq_6aN.exe	exe	fa0b10f9fd9a45180365f224decd2d69b6275f1f65c4478999aa3b7cad44ea3f	n/a
2019-04-03	3LP_v.exe	exe	20120abc0acca179891779c566ed33e317e679d0eebcffb369b11a5b65e3102a	n/a	Heodo
2019-04-03	T_ijH.exe	exe	14fd095cdee8010c61f1f65adab4e122903ecce6fb4753caa9281381e7be8040	n/a	Heodo
2019-04-03	R_OB.exe	exe	83ce2d575c87cd1c3cd534dc2b38d0525a530cbf4f79abaef7398ecba72c4a28	n/a	Heodo
2019-04-03	0mU_OLA.exe	exe	504d17b959eb025c3dca3645221cba5d5bd0169b5de0919cfba5a70c240337c1	n/a	Heodo
2019-04-03	GDE_e.exe	exe	0d6ba4291b66f2235df5017e91cd49accb1d15467dd3653a988e6ac4d79655d0	34.72%	Heodo
2019-04-03	Wi_qSq.exe	exe	df833cdea8c6becb4574631c1a9d4a814e7c75ceea0703f9109a7fdd8b7e1ec8	n/a	Heodo
2019-04-03	AOC_3UP.exe	exe	77f444a35b5535592b628b5257bb0906fb721eb5b99b2784454a29e8b2c95723	n/a	Heodo
2019-04-03	F_Uy.exe	exe	08494958b2e43cf1fa6d0d5e5ee1439c5912894e6de052d0ed997a6760b450f6	n/a	Heodo
2019-04-03	uFX_4.exe	exe	4e230e3fc375deb03495348e1f078119ab0ebc723e86ec3563b38de152c0ff82	n/a	Heodo
2019-04-03	I_AV.exe	exe	78ae36a33997fe2bff27f42209e6a229e38694fe3a2356817e8e06f24917dbe8	n/a	Heodo
2019-04-03	4_R.exe	exe	26fd1d5d142109a21df7c34b959d6f209d8ddbf2c787e6986d5cb4184eb0609c	n/a	Heodo
2019-04-03	LJ_I5p.exe	exe	bdef8ab24a469b17ab45dde23b8d015c3c6f8500d4a02c9392116a13ef7ef5a5	n/a	Heodo
2019-04-02	L_g.exe	exe	9d8c19d4e9665e8445f7ededc120dfa06d77ba7c668cbc5d7ec1d33ec7366826	15.28%	Heodo
2019-04-02	4_W.exe	exe	a7d3c2a88d4036e24329359d1081d6824982a287c38ec2a5113cb3b18b79c162	36.36%	TrickBot
2019-04-02	NVA_9.exe	exe	aa476c6b1ed253fd09529c016f38b977735126dc72b03625f46d1c3b94aed909	n/a	Heodo
2019-04-02	xc_U.exe	exe	a161a7f4533141f564fc03165b70f43aaec393b2a233727ac4344723bf9a3677	33.33%	Heodo
2019-04-02	kB_X2.exe	exe	92e048f19ea530c6bfb969bade966289aa5b571f6e723b1334156ef52ebcefa9	n/a	Heodo
2019-04-02	g_79.exe	exe	8ef7894b244dd27d9154cbb07056ea0c71b982a9d7b84174713705293d51934a	29.85%	Heodo
2019-04-02	9_at.exe	exe	6e25e97fcd7eb44b1f2faf3b3d6d9d3b0d0c1b597175b0af1bc82324914a6604	n/a	Heodo