URLhaus Database

You are currently viewing the URLhaus database entry for https://www.thebermanlaw.group/wp-content/Y6V/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:182718
URL: https://www.thebermanlaw.group/wp-content/Y6V/
URL Status:Offline
Host: www.thebermanlaw.group
Date added:2019-04-23 06:49:13 UTC
Last online:2019-04-25 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-04-23 06:50:06 UTC to abuse{at}siteground[dot]com)
Takedown time:2 days, 1 hours, 58 minutes Poor (down since 2019-04-25 08:48:51 UTC)
Tags:emotet link epoch1 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-25oVWrEClN.exeexe 358685bd63f4e40864316f226a77e67fa99da1329feba49a6e2d99dd7b6a7a63Virustotal results 24.64% Heodo
2019-04-24Psgixf4ErK.exeexe fbc18ccb452277f9a80218f3a88846cebc41f5bbcecd22297df0fbd5e20e5f8aVirustotal results 24.29% Heodo
2019-04-24xFil8Eue.exeexe feb37138151dfe1245942002f507878b16bbcaacc62612fdd5188de6f27ac3fbVirustotal results 22.06% Heodo
2019-04-24Ken9U0cXee1.exeexe 323154c4cb75b02983bc4e076be06997644eb8852384aa8d92b48131bc085f00Virustotal results 23.88% Heodo
2019-04-242mMmXuDq12.exeexe e350efd69893b28033dfa6ba293f402c04281453c766022a266ae6be6fbe31aaVirustotal results 25.37%Heodo
2019-04-238cmmQtKE01.exeexe d192e212101c718c80a36a991d3e967f0e9934a6844ce4907b8b5846693e015aVirustotal results 22.86% Heodo
2019-04-23E79BPQI0zKTo.exeexe e24d216a48831d6aea667016faf1c5a0a2ddf47cf95e0a80623be0dfc3ada8a6Virustotal results 27.27% Heodo
2019-04-23OBAnrla2.exeexe 760ccb0edeeeafe0cae52334884c431ccd8a753b070cd4f6cb3d2dc2acac2404Virustotal results 24.24%Heodo
2019-04-23XxZy50vbN.exeexe f4df5458f10a2b6ff06370d74c4d4e0d49c7e1f37c23a975c1a70714e40ff471Virustotal results 49.28% Heodo
2019-04-23G62ig0VeoTNW.exeexe 83add8abcfaa2f492c95a471066ef63ed7f1271511475f7daedacea92327b4edVirustotal results 44.12% Heodo
2019-04-23WUHYLAdbNioJ.exeexe 9e960667e11d148901e9e2c6792027764ccf1daa531960dbfda20e26fe0dc2caVirustotal results 43.94% Heodo