URLhaus Database

You are currently viewing the URLhaus database entry for https://www.itecwh.com.ng/wp-admin/2_B/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:178461
URL: https://www.itecwh.com.ng/wp-admin/2_B/
URL Status:Offline
Host: www.itecwh.com.ng
Date added:2019-04-16 08:03:32 UTC
Last online:2019-09-23 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-04-16 08:04:03 UTC to abuse{at}24shells[dot]net)
Takedown time:5 months, 9 days, 23 hours, 32 minutes Bad (down since 2019-09-23 07:36:35 UTC)
Tags:emotet link epoch2 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-17Z_J.exeexe 45818e2b2b9c8889eef89db943a2c95ef6e891eb2366e9bb3b1e08a7b98cd8daVirustotal results 26.87% Heodo
2019-04-17y8_z7.exeexe 30a100ad63787a4ea3cb2fba89a9dcc10ebfcd8e54dfa6c223d448463c6352a0Virustotal results 30.00% Heodo
2019-04-17awU_Pn.exeexe c1a8a140a015b0e0d3d5b9e58c000ac5c65636f4b9fb3e449ce2e36fc6b78a15Virustotal results 28.77% Heodo
2019-04-170g_fwF.exeexe 08496cc999257f967a0174a1e24876753ca8ef069eba9a0480755389b6acce89Virustotal results 12.68% Heodo
2019-04-17m_M.exeexe efb711906ca582f5a6622e16c3abdee0e487121360087535ac67148fa3a739dcVirustotal results 32.84% Heodo
2019-04-178_4CG.exeexe 82d96afae2177930c36a336e8cf59bc17ade40e4dc5631be1d375db89e1faa5cVirustotal results 32.86% Heodo
2019-04-17p2b_TJ.exeexe 2430252f3c13ab866847db4905ff53380375d818085358a6f2d158f5ca6f9847Virustotal results 30.43% Heodo
2019-04-17RmO_h3Y.exeexe 51543676f1f5352b38fcffe1bc8dc9b3d76aea67ff67c300a473812f629d8978Virustotal results 33.85% Heodo
2019-04-178qt_uGC.exeexe 3674e39a283b7fe17333b9c8804e1522add554d53f1ccd7bf63d173b27022bd6Virustotal results 34.33% Heodo
2019-04-17w5_z.exeexe ff213086debe5927569d31b60d23fa8760cd4c1e9bd9ae16dd90baf8814ac52bVirustotal results 30.88% Heodo
2019-04-17Jqy_vdT.exeexe 14e5b08440e75c48bd1ff1486c8b36f32fb0cd4d21dbc138861a0b9af90aba7fVirustotal results 33.33% Heodo
2019-04-17F38_lv.exeexe 0fe4721f05bcae958a1e294f92832144acd17791a850507bd98572347968eb6eVirustotal results 36.62% 
2019-04-177_xTA.exeexe c68b45418c8ae8311aec1842d2f71fb492f75dbb36d22c93fb4c50fda52b2ae1n/a Heodo
2019-04-16A_c.exeexe c1fb0eceaab0ce12e69f4ad1d507fdeb4938c035c34569cf6853f3a5a01d72e5Virustotal results 11.94% Heodo
2019-04-16nt_QJE.exeexe 3049ff6746948499a199ddc7b62bbeaabe7480e6399c06701b8b973c73aa1082Virustotal results 30.99% Heodo
2019-04-16W_8g.exeexe 36c85aa96e1c5faccec2c07418a81137ce1b95abce60842b1219a9ede6a0463fn/a Heodo
2019-04-16Ah_Y.exeexe d311c24d74572a791025133751fe4128acece91f5a9853bcc5b02e97e8380efcVirustotal results 28.99% Heodo
2019-04-167dW_0r.exeexe 2d8637e6f982f124983d1e8f79406dd57be80104fb528681f0271cf85bc9e452Virustotal results 28.79% Heodo
2019-04-16v3g_lVZ.exeexe cbe2094125606d2c0b42609d4c676c449dd88e04d21bf14b9452b81a17d9bfb5n/a Heodo
2019-04-161N_Hc.exeexe 5a88abd439bfe2e1154e687a23e948c522a8001eb03625a13e5d49323cc37e6cVirustotal results 28.79% Heodo
2019-04-16F_c.exeexe 109e48b2870b4aad574a186bf09a5de5f669abf8fa45b928a7dcc8e2a33bdf56Virustotal results 26.87% Heodo
2019-04-16VpI_Wo.exeexe f5a6ea409174a190a1f26a6b629075016e0a0392afa017eb5f6e8c86ad28a55fVirustotal results 31.82% Heodo
2019-04-16nDp_BVO.exeexe c4c49c07fbe17034954cf16db089b3757c0b05517e15737bfbcb18d1c73a4582Virustotal results 26.87% Heodo
2019-04-16T_4.exeexe 1756dca29036040e15e172b8f0acd0b43034b0c2b36ebd9359643e2b1fc0fd81n/a Heodo
2019-04-168_hDc.exeexe 0a294eebb49d31ab6605e491d75b76a4fdcfb7f49d87b7032580c57cc08ef886Virustotal results 28.36% Heodo