URLhaus Database

You are currently viewing the URLhaus database entry for http://meca-global.com/wp-admin/fuUttfLHe2/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1984586
URL: http://meca-global.com/wp-admin/fuUttfLHe2/
URL Status:Offline
Host: meca-global.com
Date added:2022-01-17 21:19:12 UTC
Last online:2022-01-18 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-17 21:20:30 UTC to abuse{at}godaddy[dot]com)
Takedown time:8 hours, 56 minutes Good (down since 2022-01-18 06:16:33 UTC)
Tags:emotet link epoch5 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-18TrWZ65q.dlldll 6934320be4a29102457ab76847e5aa8f06b9b2f85b3c1934c5cbd5b9880b710dn/a Heodo
2022-01-18NTu.dlldll fb055729756e159fb49274785106049761c041e052d95f2324c4de7c35ba80e2Virustotal results 16.67% Heodo
2022-01-18gOACNv6Xg390PP0.dlldll 08f9c3539c8ab9f229603be53f81ccc604a3014552ed7a4b2013b73dd96831f9n/a Heodo
2022-01-187UY4w3.dlldll 8842f328d2c9a7c9363c274c4aa7fbc4fac0b8fcab7b88d37f21d45bdabd9ab6n/a Heodo
2022-01-18cnYItaDge6YV52p.dlldll 59693d296debad46b4e824cde0b47f028cada2966cea645e3cc5161ec55bf7a9n/a Heodo
2022-01-18kRPfbSleOV1J.dlldll fde55a5fcbfb7c168c8849a28e2bb666032758da259abd5d138a430229141927n/a Heodo
2022-01-18PtOu.dlldll afbaf07222489875b9b932188db300713d3de63e067f9840bf041d4bf899e83dn/a Heodo
2022-01-18aMK2I.dlldll 4be3a5c2677cf60454835b2dfb1fae2553960c3dc2f1440289ff8d2389fc0efdn/a Heodo
2022-01-18wSPEdOPjcvLHK.dlldll f1a5dc60d3304412bd2135783c337290cf9356088d5d1aa10672b7287ef6544eVirustotal results 15.15% Heodo
2022-01-18Ka8Ler.dlldll 1be9d9e9de7d3bdd0767604e60fd0224fc2283320cf76ad86aff16b2ff25d005n/a Heodo
2022-01-18UDQ6E3.dlldll 955bae2901e4053a3d23d76355dc9aabab5f3050a0ed2670ce15711ae33b443fn/a Heodo
2022-01-18ojcS61J8Vuw8x.dlldll e66dec018d514f5f025c503c3767ac0cc5502f857b29945fdfe9a085a796da73n/a Heodo
2022-01-18Llo.dlldll 5c8abebda7df8450347a3951f9ff8f3dd3409d710fe70867766fb7fac560c7e7Virustotal results 15.25% Heodo
2022-01-1822BAm7.dlldll 1e48aa3849ee5d191a76a86c09daf39d7ab6429d6291ad135171cc9ea6439949n/a Heodo
2022-01-183ppIA4.dlldll 66eebf807c88cefe686b65bdf57f7d7c0033794c64bf19b63d36d050de4050e4n/a Heodo
2022-01-18VQFuRhN3mzat8zstX.dlldll ba95a7b4863a151ec3c00a7ef3061012a5bde396c614bdf8fd25bd74e878fdcbVirustotal results 13.85% Heodo
2022-01-18TTQMleXg.dlldll 6fd9d83ca53ec8135f816df97c6d002f17a09090f0fb22a0e504b10f981cb2cdn/a Heodo
2022-01-18SgoBqg.dlldll b4322c33238ec416cafc370f7c57806f175c5a8c7e18cfe074b8c23b8a1b93f9Virustotal results 15.15% Heodo
2022-01-18656TlPiALDyT43vOFC.dlldll 7626e9242973680a7eec63a1ad8d1b61ed51ec8010a6dd407567e8b9322aa56cVirustotal results 15.15% Heodo
2022-01-18Y9Nml6P.dlldll 286cfa4dbcae6c1253ba214b02de1a160971bf51473ba5285f67943933dd923fn/a Heodo
2022-01-18dTWoi8lJ.dlldll b88a4ba69f685465a7fc660057f27948445700f73bd7c60b7629f729c0aa400aVirustotal results 13.64% Heodo
2022-01-18mYch.dlldll 0fb1bb33b2a2b343560495f4aa89d0519266d10e16d990d2e529c0f4492cc811Virustotal results 13.43% Heodo
2022-01-1837B6NKiZZlZG6Whx6.dlldll c2b5d04a2a70fa3ca54b48e3584835bdd5c263523dab872ef232c90738a4a549n/a Heodo
2022-01-172jBpAAjUFaDihBqqUo.dlldll 563d837b155b2ac63d91d0bb34b5c8db584c1237d7e8f4a93510f609b0afd66fn/a Heodo
2022-01-17v96XopOP.dlldll dbb62456d6f5881e4879346b93e44c6ec6ae5192394c9d458670fff6265ed73dn/a Heodo
2022-01-17ZndqFU.dlldll 55ad71347e17a1211834619fc1cd7e488e16e9ab003b731fbc6b74d9c30f89ccn/a Heodo
2022-01-17E8i6W.dlldll 86434a404c26dc0c476badbc0acedfdc85eb0208b8041b6f90f3b1642091dda8n/a Heodo
2022-01-17uJaCgSbLB7oVGP1IwS.dlldll 40f84b07870203a432080cc536aed265ae828c05f7b21081bf03770ed63b7fb7Virustotal results 13.64% Heodo
2022-01-17hhTi0WXvEhKQr.dlldll e830fc1e893f8f0ef0bdd8fef218b83d1517451a09988ab76bb8ea50bd0d1660n/a Heodo
2022-01-179BLLmae90njSOLfF.dlldll a42830edf19200df0e2d3fc36c9d44ceffc5c1ea7d212b3e232de462eb7f18f8n/a Heodo
2022-01-17oEMsotz5jP5kF4C.dlldll fcc9e6ee3acdca9897b0a94e04e36e94766b423e1076f1da84d11378d11e8a72n/a Heodo
2022-01-177RhWKsHPBokc32mPffF.dlldll c39054bd256a0a2f47750e8b6b8b2721b32d4b0d3f12d1ccbeea4bcc4b91b475n/a Heodo
2022-01-17wf8lndfnL5U3Q5Jp.dlldll eff79b62abc7ae937bf95f2cc55f37a5eb15810eea99bf1a5d238e601085bb8dn/a Heodo
2022-01-17H5kAeOCf.dlldll d0890d24d2109a601462a1e69077a11699acccbf6dd07403a1b3e623833d936en/a Heodo