URLhaus Database

You are currently viewing the URLhaus database entry for http://lattsat.com/wp-content/j_2W/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	175445
URL:	http://lattsat.com/wp-content/j_2W/
URL Status:	Offline
Host:	lattsat.com
Date added:	2019-04-11 10:14:04 UTC
Last online:	2019-04-17 13:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-04-11 10:16:03 UTC to arsaeed{at}comsats[dot]net[dot]pk)
Takedown time:	6 days, 3 hours, 24 minutes (down since 2019-04-17 13:40:12 UTC)
Tags:	emotet epoch2 heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-04-12	4_I.exe	exe	425c301edea2502bef8c8f0aead837bc6e4452c376ad20e83c143204e4cdd4e3	29.17%	Heodo
2019-04-12	FT_Sj.exe	exe	24fd0a934d147dedbcd423bde854e99537f5cd3e57dc74140341511b6d7ad76e	31.34%	Heodo
2019-04-12	m_X.exe	exe	2d3f84a7e9953030171b442de8da76f3f1704f9c88331f9032d227ba5d752a30	30.30%	Heodo
2019-04-12	QsW_8DZ.exe	exe	ba99494d8081f6d0c0214682894a5ca06fd66b36e403063de1165d2b495a888c	27.27%	Heodo
2019-04-12	T_v.exe	exe	1b6ec27192c194272240dacfdd95779f3a99a462873b1be429e477c8b1be6af4	28.36%	Heodo
2019-04-12	Sa_LcA.exe	exe	d326be444609f229cde9c7a7636ca6f8de884eb63ab4a8742f0060fc57541e43	33.33%	Heodo
2019-04-12	7Q_Zu.exe	exe	5b11d2e3fa5be94754e90e06701af00fa2457e137fc8486867fd382cbc202bc0	32.84%	Heodo
2019-04-12	8F_1.exe	exe	541e590028d769e4cccc599a60ce8ba9f8890e35d3c9cc165c6cf5a268b9a461	31.34%	Heodo
2019-04-12	b1n_Pv.exe	exe	5e4c7cb98b8cc0776e5a046696c504a7620e97db3e939b58dd300936faf49e45	30.88%	Heodo
2019-04-12	Oir_Na.exe	exe	03746dda7dfa03d1181d8ad6d08aec9d5c51d519a2495436befa4b19ee16b664	31.82%
2019-04-12	707_zc6.exe	exe	8c010398e05a3da8993fec9db378dff1f8c485fa12a118f007dd697c7392a037	31.34%	Heodo
2019-04-12	S8M_ami.exe	exe	9591f8b909521ea45ca14264d3f954c0b995ee094d0af8f9e56ef3746f34a439	28.99%	Heodo
2019-04-12	5rE_1Xq.exe	exe	6544616fa35e9c27ddc6c8182ccc900da879ab55444a196bfa3c6a0faae9827f	25.76%
2019-04-12	4A_z.exe	exe	849990c1576a1eb7b4eae4deebcabaa1e247d2d5199758d7235e0d7a199b5dea	27.69%	Heodo
2019-04-12	ZZE_M.exe	exe	1071dfcc1a3db60ea9a9098b1a2c71f505db5a23d8af39417cafa9f8ee674dbc	n/a	Heodo
2019-04-12	tAD_h.exe	exe	164d7e4ea13034d1eb1d82f83cf305a824d06924e1ed82273ddc745ba0e3873c	26.15%	Heodo
2019-04-12	a_X.exe	exe	cf9680862fe2fd55fb6599de4e50b6a64187802a9a5c076ac431e75514e2aebe	26.09%	Heodo
2019-04-12	KR_v9Q.exe	exe	62c53b7253f7424450e98a5602b75f456fab65c32ce69f42804fb33128d477cd	n/a	Heodo
2019-04-12	YnD_oI.exe	exe	5383442ae675559357c87a8fcb51186754abea77ab399e4eda1a0df735342580	25.00%	Heodo
2019-04-12	d_Xd.exe	exe	97f42d4301cfcfb19a1cb2db752a15e33ed058218add9dcb27a50ae0938e925e	25.37%	Heodo
2019-04-12	V_x.exe	exe	4d489c9ca5492c8d0a227acd068a87d09b5138e15f609790637f90df0b1ae54f	26.76%	Heodo
2019-04-12	uO_oJ.exe	exe	4dd0be546adc42f4e3759c969a478928d939026d7fe75f6af76c623103f6d567	24.62%	Heodo
2019-04-12	mx6_NW.exe	exe	b12a68abb69358e95057d3d0e20e39001e53c762cff7fa9677027b32534837eb	n/a	Heodo
2019-04-12	w5q_g.exe	exe	e04ba14197a03f8bd13daa202aea1abebe6919d37d2f262c2be783f648f48d7b	n/a	Heodo
2019-04-12	z_R.exe	exe	9aae4f8ced53039132855595f286dfce0c0de836328fd9a54450368c2bf41066	30.30%	Heodo
2019-04-12	N_Vjd.exe	exe	617199dc689e4306f56d255ccae1fea7d34b6f8b59c189e1e587f09238cf3d9d	31.34%	Heodo
2019-04-12	VQ_9T.exe	exe	3d58cd46c4c1c0107212182e79d47cc673cb69f4930062a47aed67e8ab569305	28.36%	Heodo
2019-04-12	tKL_8.exe	exe	179ac6a40323c17dfce919ab62a0087ebbb45eef72cd6f553e8ac6c7a4c916e7	n/a	Heodo
2019-04-12	9_x.exe	exe	cbc368283e48f17f1ffadfc032af5754a625f1ef78f7c462ae832305e3eeb712	30.77%	Heodo
2019-04-12	Y_T.exe	exe	df92b20e6c7ba24e760b462f5d4347f50ef6ea4a0682a47806dd2474d779f07a	30.30%	Heodo
2019-04-12	i2_z8F.exe	exe	a2d9466c9fb5238b4220cae4f66b5b27980b8898266ddc510fa815a66d73a917	28.57%	Heodo
2019-04-11	Koy_zV.exe	exe	a6136fb7a9dac83c57fc65d1205cbc1259878783f6070216214c5e7945afa33f	29.58%	Heodo
2019-04-11	F_6.exe	exe	4f91f9b80eeb1b8ebc20ca72b65a30e513142eba990cccb720e93cc8cb17c90f	28.36%	Heodo
2019-04-11	ns_gV3.exe	exe	f3649a0ab0068c11b7d28916039f873fbd082709e46cebc2a20709471f86d0e7	n/a	Heodo
2019-04-11	FyY_w.exe	exe	01bd8997b64d5d1a00ff2af084c08793f12c9a6e70f071c411b1c86e6daaca25	26.39%	Heodo
2019-04-11	pr_fd.exe	exe	17e3a91e97e4a4ea983199136f11f4c0368eaa929e16fc45751a00bc0b3517e5	n/a	Heodo
2019-04-11	I_ya4.exe	exe	e589f89237672cb6a30d8bd7305283c2d1dcd466adac1551eff06c3e5caaa8ff	25.37%	Heodo
2019-04-11	C_9v.exe	exe	1febf4ebc138dd01f1a4e9e302ffaeb5207f8a3e7de9e790a8755b5d125d67b8	n/a	Heodo
2019-04-11	Wv_E.exe	exe	29746f5d709e39cabbbfb8ec99e64484eac31c67ae5d636e3a6800163a285a11	30.00%	Heodo
2019-04-11	5n_y.exe	exe	8fe1b648bb963640509516b6eebabe1b6cc52e501a947969c09f144daa50600a	16.18%
2019-04-11	pE_VW.exe	exe	18137d4455b629d8773c6d07063b7e5511fb29d886968426b0a4feaeca884d2e	26.87%
2019-04-11	6P_hw.exe	exe	2aef44b6a6c4930a800b94ad9bcac822e9f35336f05bcf7f3f674a893f825281	31.94%	Heodo
2019-04-11	YFa_Kce.exe	exe	c8853c1dac9968b936b915dea200de3917922f38fac823f21527bc964660d0b0	27.54%	Heodo
2019-04-11	S_PV.exe	exe	8ba86faea8164cef76893cbd3a2c111f17fb85fef2612510a3b004a8b25c0fd0	25.37%	Heodo