URLhaus Database

You are currently viewing the URLhaus database entry for https://katrin-meinrenken.de/wp-content/plugins/wp-roilbask/includes/?cqgjPWUyrYdmlfki which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	1969760
URL:	https://katrin-meinrenken.de/wp-content/plugins/wp-roilbask/includes/?cqgjPWUyrYdmlfki
URL Status:	Offline
Host:	katrin-meinrenken.de
Date added:	2022-01-12 05:20:05 UTC
Last online:	2022-01-19 12:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	AndreGironda
Abuse complaint sent (?):	Yes (2022-01-12 05:22:13 UTC to abuse{at}oneandone[dot]net)
Takedown time:	7 days, 7 hours, 7 minutes (down since 2022-01-19 12:29:25 UTC)
Tags:	480946516 bazaloader bokbot IcedID wp-roilbask xll

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Bazaar	Signature
2022-01-19	DH-1642593492.xll	dll	a19a61482e4b0b342546fdc14c13f206569e47b6c6ae310136cfd54bdc5b32d8	20.00%		BazaLoader
2022-01-19	DH-1642591589.xll	dll	08bf0258a2a82e0ad674a14bcbbac2d84a61cbcb4b172d795ec128eb79831adb	20.31%		BazaLoader
2022-01-19	DH-1642589471.xll	dll	2c2070acd612d96b786e7f8e5ace1fa0965649d4da600936b9f99bf79e331a72	35.82%		BazaLoader
2022-01-19	DH-1642588671.xll	dll	628430a43571477dd00085cdcdaa9a834e030cb80e39ae19b6a107c1f904e2cf	23.88%		BazaLoader
2022-01-19	DH-1642587549.xll	dll	a2e85069fc46ebd9d42f5032342656337b40583c3f94f82f653e17dd5bae7f5f	28.79%		BazaLoader
2022-01-19	DH-1642585334.xll	dll	a9040dea33ad6d284d1302e069d31c3b08c3d83de3681dd0557ced13781ca391	24.62%		BazaLoader
2022-01-19	DH-1642584662.xll	dll	f788a8ef14ef471ca30ba366c02b440912db3a113941edc77c1da9cd7b03c513	24.62%		BazaLoader
2022-01-19	DH-1642580381.xll	dll	3d96364b05eeca8c8e82542c15127c5c648177560e738afcd6160c22a5a4408c	20.00%		BazaLoader
2022-01-19	DH-1642578216.xll	dll	d6c5958b3428b877f04dbfe926d80823e014e182b2cda18c0b0e9f2fde835d44	23.44%		BazaLoader
2022-01-19	DH-1642576840.xll	dll	79cd208d8f4f4720ac7f85e0c3dabc8715dde7ce28e114d1bfd7372f30c10460	17.65%		BazaLoader
2022-01-19	DH-1642575766.xll	dll	d5c03179945956647ebd5c1481506cec6cd412bc624872942bbf5f7082536b06	23.08%		BazaLoader
2022-01-19	DH-1642574923.xll	dll	4f5fdd31a9968ef180ac139cd711f49708ee61c0959d0507d65ea29c90033606	19.64%		BazaLoader
2022-01-19	DH-1642573846.xll	dll	74111ea2672178a41bb598c8d4239790c37ce0be77ae2f38106f258fd89a38c0	37.31%		BazaLoader
2022-01-19	DH-1642572979.xll	dll	52db9c20a7e362af2fd93800154e761a7fbc7253b9c97d77ec2df6c6e691e0c2	26.98%		BazaLoader
2022-01-19	DH-1642572112.xll	dll	56d8a969497fe0cf90aa6e71c8f7c1a2e76b621d0b18876db8e3ca198a7b4350	23.33%		BazaLoader
2022-01-19	DH-1642571765.xll	dll	964e1ff84b5c231a5176e2e4425d1e8b9186f0b62c02d492505872d48f6dd58b	35.38%		BazaLoader
2022-01-19	DH-1642569327.xll	dll	3e4533d0e092a0a8c35ea248153062fe54e1a38a4aea9b627de619ad53fe90b3	34.38%		BazaLoader
2022-01-19	DH-1642568994.xll	dll	2045ecc425209bfc5e090d868856afe74cf0cb13dc63f8a00b656aac3fe438ea	21.21%		BazaLoader
2022-01-19	DH-1642567665.xll	dll	f7a45008c19652c6e48896a7b5abec6c33baff2f663f72457e4efac3e95c48e8	21.21%		BazaLoader
2022-01-19	DH-1642566732.xll	dll	d3dbd89bf43c2ade8f0c590ab831f5a3b200bb5bf370a13450523ef9f094437f	21.88%		BazaLoader
2022-01-19	DH-1642565736.xll	dll	2a44ed0a9fda586147fb82a9927090f745e68887712a29d34e4bb1c52a83fba3	25.00%		BazaLoader
2022-01-19	DH-1642565276.xll	dll	7855068e0cfb093ab9be9ec172676e3c119e16511f3d631d715a4e77ddad9d89	20.00%		BazaLoader
2022-01-19	DH-1642564252.xll	dll	e397e69d94adae69848267c77b54d3599d27f95de11631020b1348b087fcab3b	18.46%		BazaLoader
2022-01-19	DH-1642562638.xll	dll	7d27d8e926562f49922248582238865036fbce5d84fc42cf02ed8fcac1a4074d	22.58%		BazaLoader
2022-01-19	DH-1642561709.xll	dll	75cdb51337ba20c2f53bc8dac34e55678cc01b7698550ba91aaa3ce667af32c0	20.00%		BazaLoader
2022-01-19	DH-1642560486.xll	dll	4db56cc519b8fe92f608a30bf32477b62c1f154de183e7f075bb4cf68e918a83	26.87%		BazaLoader
2022-01-19	DH-1642559239.xll	dll	03396b2ed677c8afc58f2ce403417e56df85027468621f42ac416a38baa7bc63	20.00%		BazaLoader
2022-01-19	DH-1642558725.xll	dll	4507c736a5aa8756e4ae1f5a43f16fffbf1f8536cde0f450eb2fb8e9edf68142	20.31%		BazaLoader
2022-01-14	DH-1642155226.xll	dll	282807737e0679dc3fa77ee725ee4d6ab74f4ceaef2f33fc317cf70e82878b60	23.53%		IcedID
2022-01-14	DH-1642150212.xll	dll	6062599bb13ef036a42185ad9d1e2f58665f29d665626ce95571c49e0107f5db	24.62%		IcedID
2022-01-14	DH-1642148324.xll	dll	cf69a7a2b9beb8ae178df59e31393bc33ba69f9ec15b5cced248ba459f2caefc	31.82%		IcedID
2022-01-14	DH-1642140446.xll	dll	93680a56efaa95e69cf26ec2a98c2de094425654db8a6c3b91f2fabc95d5cc21	22.39%		IcedID
2022-01-14	DH-1642134253.xll	dll	f65fc4fa3431e6e93d85cd91fb1fed68f46db285032c40e0b87df9614e4349eb	21.54%		IcedID
2022-01-14	DH-1642123111.xll	dll	d1e61f9b080e3b6892df3660c346870ec62ce7627437bc666d7e369e215f5f43	22.06%		IcedID
2022-01-14	DH-1642122447.xll	dll	a670f3ada5b3b1ecbe3e5deca339cf032fa84d60e3ca18be4ba31f0aac0046b6	25.00%		IcedID
2022-01-14	DH-1642119688.xll	dll	3160725ecb2e49e109db6db96cb5dd7c537fe5ef8198bdcae2e55a9aa5de3384	0.00%		IcedID
2022-01-13	DH-1642116465.xll	dll	88e452f7857567a9172ad966b76be4c9153224a32f22fa025daed33cef0b5d51	13.85%		IcedID
2022-01-13	DH-1642109569.xll	dll	a7d8021fc936f12b656c03b768cb00c53888073cd548b179a81529b9e36892f0	0.00%		IcedID
2022-01-13	DH-1642100903.xll	dll	149e1550810651ae047350af9dd52f2875b483fa7cc2b5a641d68678317d5e97	22.06%		IcedID
2022-01-13	DH-1642098189.xll	dll	5a5bcd7586232234b26c06e0a0bce8ab5e4fcf32379c4f1529fa4f3797e4ea95	25.76%		IcedID
2022-01-13	DH-1642094535.xll	dll	bd865e20e2f5900398bc876d184e0abab7d62715d91130961a6a61d3cb64315a	0.00%		IcedID
2022-01-13	DH-1642091626.xll	dll	09f61d519da2be5534a3089c1a1a9ddf53e66add5cec3812514f936301728142	2.99%		IcedID
2022-01-13	DH-1642089849.xll	dll	6f7dfdabd97519cfe18e64f8e7d8663c7ad6d7422ba5ed09b473ebe290848e5d	15.38%		IcedID
2022-01-13	DH-1642081562.xll	dll	5cd2e18c9954e2224ffb17693487b082a41500d285e703e947a21e8d1b70f106	0.00%		IcedID
2022-01-13	DH-1642080284.xll	dll	ad095615f5b450c9f7ca1b115587c9708739bae844b819663248799f4a927ace	18.18%		IcedID
2022-01-13	DH-1642071457.xll	dll	61aecc39f888146216a2e12253178d8a10c68e72de71a1ecf1131be56ba4f8d9	0.00%		IcedID
2022-01-13	DH-1642070003.xll	dll	6038cc151cd08a021c57bee8a527e4d816f4020f94f3e43e30990999475cd415	11.94%		IcedID
2022-01-13	DH-1642060742.xll	dll	415abfb2785209977e7293d58e6ec29345a1be9dc343ae69f17e96c5346f9fe7	0.00%		IcedID
2022-01-13	DH-1642058117.xll	dll	d61b19edd293a0691527f40fb136511022d2c106bac5b770f9aedcea445c70ad	12.31%		IcedID
2022-01-13	DH-1642056624.xll	dll	105047a088c424564285c660467e7d848743d0d932918d060b937e85e9f7ddd0	0.00%		IcedID
2022-01-13	DH-1642054635.xll	dll	f44c7240b424e204e34300a9e93f745fee9095f436ff86b2de9772d1084c0182	12.31%		IcedID
2022-01-13	DH-1642052464.xll	dll	e4fdc8b6743a24bcb75957fc1c2591dd552637e33184affe233f2ec7aa694225	0.00%		IcedID
2022-01-13	DH-1642047143.xll	dll	386a6b2542e3d43404d66edb56283b4bbb8b54f0c67812ac8ae272601774e676	0.00%		IcedID
2022-01-13	DH-1642042815.xll	dll	c32f6612f756900f22fe617bb11d8ac5793851efdc29bc38b129cf6516a841fb	0.00%		IcedID
2022-01-13	DH-1642033540.xll	dll	125af770735566cb3c35df290d870eb47b00c67129e84ee4e392fbe556c057d6	0.00%		IcedID
2022-01-13	DH-1642032318.xll	dll	1a47ab49a5341a3cfc40bd7a64dea46cb8cad224314a51410e7ad56bb6bb93b0	0.00%		IcedID
2022-01-12	DH-1642029698.xll	dll	718c54d1146a1d4a10fa7791295332e1bc18b906cbf5ee56e1f8a34b238b4cf0	2.99%		IcedID
2022-01-12	DH-1642028647.xll	dll	97f67fca98471d15b171917f1b24e9bc85d4ca6e94b57985235f611c15637bbd	0.00%		IcedID
2022-01-12	DH-1642025988.xll	dll	36eea2780c6330a824f03fde03e1c465c19d1706909af8ab1da60acb3b7f02b4	0.00%		IcedID
2022-01-12	DH-1642025003.xll	dll	25cccdb32c59c9f617d5a40b1c0f8fc39760ae3fc2a68bc3c3708c02a0a7389d	0.00%		IcedID
2022-01-12	DH-1642020463.xll	dll	66438cb07ca0cc562bc57e0fef289ff7b284ef872afeca5bbff75be2f8360f71	0.00%		IcedID
2022-01-12	DH-1642017907.xll	dll	4db9f2e3a6a38aa75ae3cd65ce4f9e01a51f17ef831a4b95a1b8c7f4a0c4d5f8	0.00%		IcedID
2022-01-12	DH-1642015620.xll	dll	63775b5137b9d9e831bafd186f5cfafe4f7a7417a7bae5b5e15ebc99e0edb406	0.00%		IcedID
2022-01-12	DH-1642014324.xll	dll	69e2bc37da2c8a6f25fce37a024aca628f8216cb0ddcf70e1e55766eae011bf2	0.00%		IcedID
2022-01-12	DH-1642013947.xll	dll	1ba223ba6300c05c1e29105e519d884c2cebdbd1485838a46378c10dc77a8623	0.00%		IcedID
2022-01-12	DH-1642012343.xll	dll	4590da9ffdb2984735232c83b4c73224bc6ffaf6c9f99c8d3c475e5e2fce24e9	0.00%		IcedID
2022-01-12	DH-1642009768.xll	dll	cbcb0c99f879bbedf38347b63fa62c480f12580e5cb95a4a357bbef602d96e61	0.00%		IcedID
2022-01-12	DH-1642008497.xll	dll	31ea2c96fb914d5d932a3176db0400ffbaac1af2d5b89d4f5bb58380d5cb7fa9	0.00%		IcedID
2022-01-12	DH-1642007292.xll	dll	455d020d000ec39c5d1e52b10080042d6b46cce1acd9b557a075dc514c0c1187	n/a		IcedID
2022-01-12	DH-1642004925.xll	dll	b6e82ee1beaffc29641bedf570c5a2704f76c1da1f0ac9f97337075e6c8ed75a	n/a		IcedID
2022-01-12	DH-1642003408.xll	dll	e81beba107b603de192702d9ce123e5bd73260e3914f4dc291fcb9725e5ef1bc	n/a		IcedID
2022-01-12	DH-1642002195.xll	dll	1dfc17329674661fef45cc7b5b81891505821f454cdec5791370ba2cca1832f3	n/a		IcedID
2022-01-12	DH-1642001356.xll	dll	6cb4bd982b2cd8453206293fef87d30123766482cedcf17c53957810af96cdb6	n/a		IcedID
2022-01-12	DH-1642000261.xll	dll	3092b1e6b513a751a482e7f83c3e653cd2e44d91d031201c5baad111712a8e1a	n/a		IcedID
2022-01-12	DH-1641997782.xll	dll	eae48dccceaac324c748e58347917917d450a20d48515b891d4e09988974e5e8	0.00%		IcedID
2022-01-12	DH-1641996818.xll	dll	5f6d60e0a6d16a8d4f3b3856505e73aa1e4235613e9edb2cea74f567c1583f10	0.00%		IcedID
2022-01-12	DH-1641994207.xll	dll	f7b9c1125891501366974a8eb80e3717a22394867d9237799920dca257f29463	0.00%		IcedID
2022-01-12	DH-1641991191.xll	dll	4a2b485a1d9f6934c6c4df0c4678f5927b74eb58814b13da4a9c000f347ae492	0.00%		IcedID
2022-01-12	DH-1641990242.xll	dll	a9b40dfa9b0006472486f98a76af109e8113161729285a0170a61be2e0f87463	0.00%		IcedID
2022-01-12	DH-1641989110.xll	dll	a8450330ca0839df33a1bd532ebff2b6e8aa8dd6b7838831ff49a1a8ffdd9443	0.00%		IcedID
2022-01-12	DH-1641987866.xll	dll	2775fd1fce482977acac8bf3bf7f8af4ed6c98630497317df49d7843b3a64543	0.00%		IcedID
2022-01-12	DH-1641985109.xll	dll	a9461a1ad655d9d82139de58dac75c935631092401fbf924285ecdd3fef5679b	0.00%		IcedID
2022-01-12	DH-1641979925.xll	dll	17fa73e5bbf353546a4e51ae2e1ea8f11315e71c7c8453f22ad05e90280bdf01	0.00%		IcedID
2022-01-12	DH-1641978268.xll	dll	59ac4760631f394ca1a41bc3dd7b4476fda6dcba1a8811f6190f4bab29a5f5c8	n/a		IcedID
2022-01-12	DH-1641977232.xll	dll	8e66a80288d6f6ef23e1057309ab41fdfcd670dee1bd2752100488a5fb3e27bf	n/a		IcedID
2022-01-12	DH-1641976253.xll	dll	95cf4f58f7728d43b7bf60c3686db69cd465efc99609d21b417359dfb7697e3c	n/a		IcedID
2022-01-12	DH-1641974142.xll	dll	fa422bce64ec00320dcdc59100460a132ea2fa9c6ee691d4125839fbea0b43da	n/a		IcedID
2022-01-12	DH-1641972897.xll	dll	e8a65a972aee014a66d8ec8dfc0e5db8ab3cf9b2f589f92c7a4ed31db09dc240	n/a		IcedID
2022-01-12	DH-1641970959.xll	dll	487138a37a67e8bf954f04521d2ee665d2e81ff7aa0cf7b603059569980bd080	0.00%		IcedID
2022-01-12	DH-1641970120.xll	dll	0ee1895ecf188febb817e837f528deb48d07e0a6b1728588eb8202a2460d4f8d	0.00%		IcedID
2022-01-12	DH-1641968144.xll	dll	720fd64e0dd6bd4ed89e497069f3fab6c3e582ff689f87a51a8adc4e96970c8e	n/a		IcedID
2022-01-12	DH-1641967464.xll	dll	2b50e3c91db5e8b987b78a9d207e09726bebfed5cc482c8790d89db7ffb446c6	n/a		IcedID
2022-01-12	DH-1641965477.xll	dll	28d5fb64c7eca295bc325d07f773ccecf27871f7e34e084eb70f80dce65e7312	0.00%		IcedID
2022-01-12	DH-1641964805.xll	dll	7c0990e56342e75681d975c394faf56cabd13b73f9d08cd158a96fff4fcef4a8	n/a		IcedID