URLhaus Database

You are currently viewing the URLhaus database entry for http://garageheining.nl/wp-content/plugins/wp-roilbask/includes/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1987725
URL: http://garageheining.nl/wp-content/plugins/wp-roilbask/includes/
URL Status:Offline
Host: garageheining.nl
Date added:2022-01-18 23:11:07 UTC
Last online:2022-01-19 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-18 23:12:10 UTC to abuse{at}one[dot]com)
Takedown time:12 hours, 3 minutes Good (down since 2022-01-19 11:15:38 UTC)
Tags:bazaloader link BazarLoader IcedID link xll

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-19FF-1642585470.xlldll 9bfe3e664dea6ec4c143d6beb35b7cef737163ee64f78e06e4d779859c046138Virustotal results 19.70%BazaLoader
2022-01-19FF-1642583629.xlldll 113fa9ae34480ab1f6b091d8928b9716a4e7dffeb3c9c47129ed249af762b47aVirustotal results 21.54% BazaLoader
2022-01-19FF-1642578585.xlldll 3d96364b05eeca8c8e82542c15127c5c648177560e738afcd6160c22a5a4408cVirustotal results 20.00%BazaLoader
2022-01-19FF-1642576760.xlldll a9040dea33ad6d284d1302e069d31c3b08c3d83de3681dd0557ced13781ca391Virustotal results 24.62% BazaLoader
2022-01-19FF-1642575716.xlldll fa938c8e0833e3d8a642ab29cb8ecfde8d1ef574837d41a7e4a7c1676ec91531Virustotal results 22.39% BazaLoader
2022-01-19FF-1642573118.xlldll f7a45008c19652c6e48896a7b5abec6c33baff2f663f72457e4efac3e95c48e8Virustotal results 21.21%BazaLoader
2022-01-19FF-1642571592.xlldll cde9da874805fce066203681f88254cb84d6be7d77b3f0794140decc1e1448eaVirustotal results 33.33%BazaLoader
2022-01-19FF-1642570182.xlldll d6c5958b3428b877f04dbfe926d80823e014e182b2cda18c0b0e9f2fde835d44Virustotal results 23.44%BazaLoader
2022-01-19FF-1642568663.xlldll 7912ecf58bf36144f792f5fb357c4194229b1e3728d9852c4376fa297ddaad5fVirustotal results 19.40% BazaLoader
2022-01-19FF-1642568009.xlldll 092d57e94574cc3a9afa80daf5b3cb26160e4e4a55df6e48cbb4e314cfe6f509Virustotal results 24.24% BazaLoader
2022-01-19FF-1642567284.xlldll 4507c736a5aa8756e4ae1f5a43f16fffbf1f8536cde0f450eb2fb8e9edf68142Virustotal results 20.31% BazaLoader
2022-01-19FF-1642565743.xlldll d3dbd89bf43c2ade8f0c590ab831f5a3b200bb5bf370a13450523ef9f094437fVirustotal results 21.88%BazaLoader
2022-01-19FF-1642565203.xlldll a134c216fa5bdd844aa6c620365776754d618280a7982aa11b81a11f0bbca307Virustotal results 34.85%BazaLoader
2022-01-19FF-1642564072.xlldll 2741d6da882c151334cb7777b2f8bf26f8b0e197d244f1aa86570b040f334a76Virustotal results 24.24% BazaLoader
2022-01-19FF-1642563124.xlldll 564ff55dbe619258820e95835d623e037c2daa146c81eb257f7c88ef28f76578Virustotal results 21.31%BazaLoader
2022-01-19FF-1642561495.xlldll ad5f4db4dad54f1c69a36a826311d782671ab5e16af827e17920c8180ec28a2eVirustotal results 20.00% BazaLoader
2022-01-19FF-1642558494.xlldll e397e69d94adae69848267c77b54d3599d27f95de11631020b1348b087fcab3bVirustotal results 18.46%BazaLoader
2022-01-19FF-1642557690.xlldll 7e2a361d904e56e56ebdc4c4439e77f63246ae4276f573ad5b5427a0658fc5a3Virustotal results 33.82%BazaLoader
2022-01-19FF-1642556781.xlldll 75cdb51337ba20c2f53bc8dac34e55678cc01b7698550ba91aaa3ce667af32c0Virustotal results 20.00%BazaLoader
2022-01-19FF-1642555689.xlldll 74111ea2672178a41bb598c8d4239790c37ce0be77ae2f38106f258fd89a38c0Virustotal results 37.31%BazaLoader
2022-01-19FF-1642554942.xlldll 08bf0258a2a82e0ad674a14bcbbac2d84a61cbcb4b172d795ec128eb79831adbVirustotal results 20.31% BazaLoader
2022-01-19FF-1642554441.xlldll 56d8a969497fe0cf90aa6e71c8f7c1a2e76b621d0b18876db8e3ca198a7b4350Virustotal results 23.33% BazaLoader
2022-01-19FF-1642553610.xlldll 628430a43571477dd00085cdcdaa9a834e030cb80e39ae19b6a107c1f904e2cfVirustotal results 23.88% BazaLoader
2022-01-19FF-1642552197.xlldll 4f5fdd31a9968ef180ac139cd711f49708ee61c0959d0507d65ea29c90033606Virustotal results 19.64% BazaLoader
2022-01-19FF-1642551690.xlldll 7855068e0cfb093ab9be9ec172676e3c119e16511f3d631d715a4e77ddad9d89Virustotal results 20.00% BazaLoader
2022-01-19FF-1642550583.xlldll 488453b2c3d9e532d42bcb634b9817cb02b5fbf3bdbb4d12f24abca359e44089Virustotal results 20.00%BazaLoader
2022-01-18FF-1642549780.xlldll 964e1ff84b5c231a5176e2e4425d1e8b9186f0b62c02d492505872d48f6dd58bVirustotal results 24.24%BazaLoader
2022-01-18FF-1642549143.xlldll d5c03179945956647ebd5c1481506cec6cd412bc624872942bbf5f7082536b06Virustotal results 23.08% BazaLoader
2022-01-18FF-1642547794.xlldll a9f6712e7cf49bddcbdef715d13768157f94252be28bd74331a9ff963401137cVirustotal results 20.00% BazaLoader
2022-01-18FF-1642547464.xlldll 18f5ade40bc5441aa11d03672f5a08e0b05e3fdeca5f2903a565ca7632d9e537Virustotal results 32.31% BazaLoader