URLhaus Database

You are currently viewing the URLhaus database entry for http://rogerfleck.com/heldt.adv.br/tt0Dgg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	184619
URL:	http://rogerfleck.com/heldt.adv.br/tt0Dgg/
URL Status:	Offline
Host:	rogerfleck.com
Date added:	2019-04-25 11:54:07 UTC
Last online:	2019-05-03 15:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-04-25 11:56:06 UTC to abuse{at}ovh[dot]net)
Takedown time:	8 days, 3 hours, 29 minutes (down since 2019-05-03 15:25:50 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-04-27	LVOHpvmPB.exe	exe	2fa43d5a8e9bb96d69713b066bd517b25ccc515af546cdb758d89a402fc20abc	26.39%	Heodo
2019-04-27	Jn2lRmfWN2.exe	exe	38d7cecf425f8f940aeb1f72ca3b123a0a950b399a90c8e70110af6040b838b4	26.76%	Heodo
2019-04-27	kITDo307qkz.exe	exe	cef50215b5b1eb0f2f09c2f300b0d7039111b87c87bd67cad2b7ffd2b90fdfd1	26.76%	Heodo
2019-04-27	zZVHw6At2.exe	exe	a7c91e0d4f0c5838b2b4f294204c1c1c48f672b1a869071b44b9ad4d0ae0b9bb	23.61%	Heodo
2019-04-27	iiNGuMOMG0g.exe	exe	1bfdf300c26e314c7aa630371b64d8a7378258d8737d08a191211afe5a7acb70	22.22%	Heodo
2019-04-27	RabjmauX.exe	exe	4ae22d3856b5376d34289f249994242c0b27a58a25195a1218b96b2d1aac6be9	22.22%	Heodo
2019-04-27	we5hYNZ947Yv.exe	exe	bcdbe7f8f3cc9d8a55366be3dc170efe4adc2efe04e1a86cf9a6c6fb9d64776c	21.43%	Heodo
2019-04-27	RIHKNbqnRp.exe	exe	5119b17404e697382b5af3fbafba3d66fd99fbf208e217942c2bb9e1340e1e6e	22.54%	Heodo
2019-04-27	osFdDaRH.exe	exe	689ae7d8c1f47cf3883c16915b9ff8363d9d68d4f779d1ca4f63f81e1a23b5ae	21.13%	Heodo
2019-04-27	NlmpAnqMxcu.exe	exe	0d21f83ed139b523d3c2b44fb56a3565f6ea1bec3e8f40ac99ab9425a11f03fe	21.13%	Heodo
2019-04-27	Aq9Z04X009v.exe	exe	67d1296415d8b1157265e684477e409335e7b5f1a776fdb510ea77123a4f93e5	21.13%	Heodo
2019-04-27	TFTecRIBs1.exe	exe	3452724c51a24ed0e2c8cf877f5fe4b6f46ad863b3f06de577b017ac5eee4323	30.14%	Heodo
2019-04-27	bm91zf6tfpx.exe	exe	f6daec8195fb5092b3d38e2123bee97f6e764a9412819d348434b59fd4cb3d0b	20.83%	Heodo
2019-04-27	mg4MsKA7rEV.exe	exe	05d28441ac03f0de2edcfd19b68802027b52930601fe435de0b9994cbb65f5d7	19.18%	Heodo
2019-04-26	nOciougV.exe	exe	374bd2ce47bdf7742af31f755fcfa7059f15c66023118ff4b519791b9458e52e	19.72%	Heodo
2019-04-26	0o6pttKk3RT.exe	exe	8aa4c0e4ef6bb10824ae8fdaca122872bf81a7eaa6fb43a360c71e831dfd6240	21.13%	Heodo
2019-04-26	wzSeBiFm.exe	exe	86223cc30bfaf7ba14b8fcd3e347f8ff21fab8f9d0cb03c178670dc92827c719	n/a	Heodo
2019-04-26	CMIYdSdQFXtK.exe	exe	5bb39f1268d403925e918e12c0661dfdecb425a51c37c1f959bd26aa353c40ec	18.31%	Heodo
2019-04-26	oLjKCG8i34Jr.exe	exe	2a9eae95765a8e691304705b908795af450b05c1473b462df0ff81c47ce36890	18.31%	Heodo
2019-04-26	vPDn6VRB.exe	exe	632844bf822f80fdf546ca878214b8788a79889859345a53d685acddb8fd5ac9	18.31%	Heodo
2019-04-26	olUjTz7yzMsV.exe	exe	97581595c960fffb9a56007a69166518e27efa921d372ad3f0a7340693b646d6	18.06%	Heodo
2019-04-26	0ZgLsJ287Q1C.exe	exe	3be595f6e5378bdb1ba5dba1f12cd838c327090f084d645ccc03506bed03d5dc	16.90%	Heodo
2019-04-26	GFW9I7Ihzju.exe	exe	0dc2d7674df41a60622df91ffb8352a4a1127d5283d73466e16634e28f7c6ddd	16.67%	Heodo
2019-04-26	OGtOMqHQJ.exe	exe	94dd79e2f86573c8433a2683be44794593cc7ce0d693acf7f49b56e42595a809	21.74%	Heodo
2019-04-26	woE0vF0KwHqD.exe	exe	a5716ef1fea5a951a1b7a16d9b3808059d4c56334b859e8885b4f5a348b2470a	18.31%	Heodo
2019-04-26	wBOYdDEO9T.exe	exe	33b477d5427de122c94aa5d88eac5a00fce2020e3e7776502aa9e4ed55469aae	18.06%	Heodo
2019-04-26	gvkYZ6AbEkQ4.exe	exe	f7e9255f32ec9974101bfb1f2f0cf351996807fff1a42f22fc01002b3e9c30a4	19.44%	Heodo
2019-04-26	7b19vKvHS.exe	exe	80ed34e09521784a11673ed58df11a663e3ffa0325ec00afa1ef4978d4c6e1f1	16.67%	Heodo
2019-04-26	UjnlhRzK3.exe	exe	3d8e9131de7a87316cb22f63b4eee8ce4d4a0c8170ab4409875bd865e94ddd92	15.71%	Heodo
2019-04-26	6ZPV5mZ2.exe	exe	b9902e7316ea6556e33a0cf31415366b9c1b246bddf2ff393b59b5b2d1db5898	23.61%	Heodo
2019-04-26	gcFlhHtWLsJ.exe	exe	decfbd53f4d893e94b3fa6e6a0107e7d4c47e93381b5c08b939cc3ee4e97281e	33.33%	Heodo
2019-04-26	wZt5KOEvMB1p.exe	exe	4d5d632b335cd31ef92e49990491551cfe2c3bf3866dc37482ad9c8fe88d71c7	22.22%
2019-04-26	Guzph9aW.exe	exe	3c360fe6115e8ec0368090c2cc16328df572cebae0df76a03552745918ff82c9	22.22%	Heodo
2019-04-26	AetzFGZXRC.exe	exe	385a81c916b99640396c33934bfa3105b227a311caffaada087f5338a789a164	25.71%	Heodo
2019-04-26	HOFRBgIw1.exe	exe	58c5b1dcd030b637d1e219b9eb1dc0921f442c8bfdba99e8c8e991ce5d49f8bc	32.39%	Heodo
2019-04-26	1zlbahBm48A.exe	exe	50a6a4fa1e05f8cf0c115ce3139bdec854d50231bb875b9af2444d704e13619b	30.99%
2019-04-26	35TEGwXIVuB.exe	exe	e4a887f9d46f0e7280cffb13fc6b2d91bc1fa6cba69a5ecfd218524e03f2e299	23.61%	Heodo
2019-04-26	yftLEhEnx4K.exe	exe	5465b63d57e5e8006c3c5b88c1023c25a28c32b5372512795c9f5a0ac59205a5	23.94%	Heodo
2019-04-26	5VxYzk8daq3y.exe	exe	e80bb5893dd99510131b337a984568e16c55b65dfb63646e86fc7d41432e7957	n/a	Heodo
2019-04-26	E9YJVRf52q.exe	exe	96a7e4d6cf0692bb82d80fe0be0942bab8fb7643fb108b5820769cddacc54920	23.94%	Heodo
2019-04-26	DqWk0MvXRo.exe	exe	fa785e7d91d0576bf0ff7e8fb85389dcf9c50906b4862229a8846102fee6fc0d	22.22%	Heodo
2019-04-26	MFbenvrKAZ.exe	exe	917a758c3cf24024848a1d02f63aca588324b1036066104c6ebb4720d7dfa9bf	21.13%	Heodo
2019-04-26	7KBeXNNv.exe	exe	0e33d65259bd510273ed2410fc9498ff837ff17b735d68257a1196dc353c8b26	n/a	Heodo
2019-04-26	I5t5Fp9IMWX7.exe	exe	af013886eeb2007f529fc382684cf467a4df62d9cc6e494c3f9d186ed2b1d565	19.72%	Heodo
2019-04-26	DC7gjCEgg.exe	exe	dd5b5853a81893823d266f1db8122f9bf5272ca83e347cc8111fdb740d9c6174	n/a	Heodo
2019-04-26	wnAxQkwQ0k.exe	exe	d390912ef71b2d1c1fba1940b604983215d02da301eb1e6699f6c15809d0aec2	22.22%	Heodo
2019-04-26	44qOBWL2.exe	exe	cc859640783449e54f2a3fb0a2c4f981f59dabdf41f04f62c4fd93984f617717	19.72%	Heodo
2019-04-25	gIRRMQOI4A.exe	exe	3228416a3dcfda8a180c86af876fb81ba2829bf45cf460e5d0b0bcda0c6e93e6	18.06%	Heodo
2019-04-25	ltbTS0bEWveY.exe	exe	34244952fab971b6504507202a2703f20aa67af75a0ba910d406183e7347aa87	19.72%	Heodo
2019-04-25	UYjpUZhF5.exe	exe	0c944a202ff6ac81acb2eec7bf8af8948ce223432cf7fce163315fc62b6f0dd6	28.77%	Heodo
2019-04-25	Piaoyjqvs.exe	exe	214ad946d41c6f04035df42be621fd5d76112d9e14aaf933dc765609d46b572b	29.58%	Heodo
2019-04-25	aDZMSQHr.exe	exe	ac3f16c8e8f2f5b1efd32465d40a593d162a30a26cb5ea9a2e934f989a5a9aba	n/a	Heodo
2019-04-25	jAkikfVNN.exe	exe	9c38b0b64eb091eb10521ee5a602940020afa164615cc93898e771dff24c97ce	20.83%	Heodo
2019-04-25	hoDYY0MqXiLN.exe	exe	358685bd63f4e40864316f226a77e67fa99da1329feba49a6e2d99dd7b6a7a63	48.61%	Heodo