URLhaus Database

You are currently viewing the URLhaus database entry for http://912graphics.com/cgi-bin/D_L/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	187557
URL:	http://912graphics.com/cgi-bin/D_L/
URL Status:	Offline
Host:	912graphics.com
Date added:	2019-04-29 22:48:19 UTC
Last online:	2019-05-08 21:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-04-29 22:50:10 UTC to abuse{at}unifiedlayer[dot]com)
Takedown time:	8 days, 22 hours, 44 minutes (down since 2019-05-08 21:35:07 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-05-01	1r7n_8877946.exe	exe	dc35e88bd93d9a45023ffdd08fe3b867db5a93088a857b155807c5849840f546	27.14%	Heodo
2019-05-01	cdbnf_77188.exe	exe	9aadce4f7de8584e42dad1058d8306c497fa997e7b33aecb738e193289c8983b	25.35%	Heodo
2019-05-01	joa909n8_242.exe	exe	323967a0466216ba81afa736ebb34173f3d2a24e91e4d6d28a3cd53e234c21de	33.33%	Heodo
2019-05-01	zho_3867305534.exe	exe	2e7eae369116761735414a466e45c1a2b255795e14c098fedeef2db04489c0cc	22.54%	Heodo
2019-05-01	8bunzsj_72413062.exe	exe	3a8cc2406b25d9a14ca521a891fd6137a477c2ed72fcbcbae429b680965804cf	20.83%	Heodo
2019-05-01	1klkgdldnz_2504125.exe	exe	55ef9ddff5ee938594dcd2f78498e9caa58c6fd7edd5087e81f7f80453f12fbf	20.83%	Heodo
2019-05-01	bfj_470565573.exe	exe	d150a9165a4b511f6b4b828f2a8c5cb1f3481740c8e25e8289ba9b117a0b225a	21.13%	Heodo
2019-05-01	rzerle_2.exe	exe	939d1079b5e68046bc483b73ea2b607f183c356f1c4f8c0e97bc067678e656af	20.83%	Heodo
2019-05-01	1i7b31p8j_3.exe	exe	4c7ce5aa5ba12b2b6b8a2f0596657100170b4348b16a864ad300ec90f7f74349	21.43%	Heodo
2019-05-01	G_L6d.exe	exe	3e8d02c59d81342d13f69b0e0ae1e0972e49e3ae2f5fcd7c920f185db5b20a91	23.61%	Heodo
2019-05-01	gQ_cWk.exe	exe	dcec41043e9866580ae5d29a1ae7a992a29a8b06d6f552a414478d53007ebd6c	23.94%	Heodo
2019-05-01	Yc_2.exe	exe	e998cbbc21badc970c1c530e1841a2ba384dc59689b9abfff2ea033be99fae30	23.94%	Heodo
2019-05-01	xQi_GKK.exe	exe	87005ace32816cc97648700aff06385ce4eb7213e1524b5277243818786cdb4c	n/a	Heodo
2019-05-01	qF_taR.exe	exe	73b68bbf952e6e281bc7798abccc508f01377dfb6c88356c771485c0b50d41d7	28.57%	Heodo
2019-05-01	CCr_iMM.exe	exe	a038940c725ae65c713d61f36f9e939b2d407d0fa46d7f85e77003770a280263	32.39%	Heodo
2019-05-01	V_0N0.exe	exe	77218a0c66a00ab033d89060de3605b0fa309f01ed7038980494a249eb0b886f	33.33%	Heodo
2019-05-01	XD1_J.exe	exe	687f28d8fa2f0058f4e87f260a06ef84e983bca27efd12dd660dd3fcbf599eed	n/a	Heodo
2019-05-01	GT7_m.exe	exe	8fed4e6662af05d39b16376999c8f5f2c2bc802f2699e8a197adc89c64b6abe6	n/a	Heodo
2019-05-01	v70_s.exe	exe	b603a86b754527ed24c4618e9fc9459e42cc5ced95bad7b68d782e508477dcfb	30.43%	Heodo
2019-05-01	If_I03.exe	exe	7d8b2427a737cd1a3c1b9489684bead8902b72f3a1fe614ce273a81b4fab7045	30.00%	Heodo
2019-05-01	q_qIF.exe	exe	beff581a3dcf2d2abbc92a9131251507036fc017dfdf3bc5d74b0f8b9e96570e	30.99%	Heodo
2019-05-01	nIS_4h.exe	exe	83cb93d45e6a690aa0ba8cfe27d269f3190e037d768686467b5cbde3c4e0654d	31.43%	Heodo
2019-05-01	FX_K.exe	exe	fa0f2cfdecef9296c42861b4cba847147ff64b798b68beddc06d54e4567be1a2	32.86%	Heodo
2019-05-01	f_oS.exe	exe	1870b386fc5b7bf2b89f407325806c9ededa3285aaf50bee1e17043577d780a3	31.88%	Heodo
2019-05-01	kYc_Y.exe	exe	356a994530076924eda30e72ec8f2920dbd3789af889f4ade17cfc0f9bcd3e64	29.17%	Heodo
2019-05-01	T_Yfz.exe	exe	de107ca5e1e4d91ad2ef67ebabb6cb90564aa87727b99daf3d2ea8f5fa73d50c	29.17%	Heodo
2019-05-01	96_O.exe	exe	ce9ac3c35886bc7fb2a10e66b5774796ccfbc9189b6c7b5b95c46c78d1af2eeb	30.99%	Heodo
2019-05-01	Z_t.exe	exe	65ce9c180eeb4250f8d9b31fbc5920e41293885c4685e7b5b2fc156843daa4a4	30.00%	Heodo
2019-05-01	B_Cp.exe	exe	39339326e9dfdf25361dee2e855aaf59fb05924b77cdbacddbf054c9fa913974	29.17%	Heodo
2019-05-01	gW_bZ.exe	exe	d91bcf221b81358ba35d3568ce712b0a04d843cc063f18a39688ab931e27b14d	29.58%	Heodo
2019-05-01	HC_Z.exe	exe	df5545808ddb7f46791cdeab63bfa6a2c73d8d6e5747482533424112ff221f38	29.58%	Heodo
2019-05-01	VH_0q.exe	exe	3ea4965420d65454d538d431233310f1df708fcc6693cc98728028391e98e4bd	30.00%	Heodo
2019-05-01	O58_yS.exe	exe	59eda582cb8bbd47d09163c94d115cea673c092f2715755e8346c18fb1e943b5	n/a	Heodo
2019-04-30	wIG_Y.exe	exe	ecf6976d932d8d424dffd417253cb4fe5267408893a34ea48185f11a27f7e7a6	31.43%	Heodo
2019-04-30	M_nqo.exe	exe	b8d057dbe582248e95548aa61e4757ee02e9daf46e96a69e10621bb96811db42	30.56%	Heodo
2019-04-30	Zy_kbp.exe	exe	d38d8c74552d6db51a27c5c0df85b16cbbab7784742a94af10c84464fc554b5f	30.99%	Heodo
2019-04-30	O_BoO.exe	exe	5090ab278745ae2dd3600b0d0ba10615459b15ca42ed3729d4021763a156f0a5	30.99%	Heodo
2019-04-30	he_X4.exe	exe	90b7a15e2a038a25c6358302e915aa07afb9d7714461c1b0ece9558022fd7470	30.99%	Heodo
2019-04-30	5_b.exe	exe	c4f775852cffaec4fef118af01cdd1caabcb4d62bda3872f531cac272cc5fb7b	n/a	Heodo
2019-04-30	H_vJX.exe	exe	cb6c6c98884b14334f1906f69177237e47f6d663c004fdd3e70d48aece5b4123	30.43%	Heodo
2019-04-30	mO_fP.exe	exe	b5d3305b18299b29745d8d2c8734e0950339ad37d1e67daaa9daae7bb68ea110	31.88%	Heodo
2019-04-30	H_YwT.exe	exe	7bd5b586563108e773639d37af395aac567d05eb9d0f35a3b1aff6765fa56c69	30.56%	Heodo
2019-04-30	YZk_f.exe	exe	fcceb720375713b7deb5ac132738df602248592ba1e815b69f5809c64dbf0d82	28.57%	Heodo
2019-04-30	d_dA5.exe	exe	6c7b368680a455456e6c99bf360f48daddd2394943214abf176eaeb82c675bae	28.17%	Heodo
2019-04-30	6AD_kz.exe	exe	738b4ab73ab2902f196647dc8c35e28c3a79d5d5565415472e35bf8c22442dc4	27.78%	Heodo
2019-04-30	u_3.exe	exe	da52ea1c37f129dcba73cc664c44c5be76f7b0cac49964221247f448ed562dec	23.94%	Heodo
2019-04-30	W_Vdd.exe	exe	260f747bc3f0025cb14903cbe538224db3cd6ac4627d4ea189d8adb5dc3d0694	29.58%	Heodo
2019-04-29	l_q61.exe	exe	0716bb291de89ef66ca0b2992f1b5b852e2757d4ba37d2c31cd86d0804c1340f	27.78%	Heodo