URLhaus Database

You are currently viewing the URLhaus database entry for https://edgetactical.ritabilisim.com/admin/2jKBEGDY0XpcgxF7f/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2023989
URL: https://edgetactical.ritabilisim.com/admin/2jKBEGDY0XpcgxF7f/
URL Status:Offline
Host: edgetactical.ritabilisim.com
Date added:2022-02-02 10:30:12 UTC
Last online:2022-02-24 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-02-02 10:33:14 UTC to abuse{at}odeaweb[dot]com)
Takedown time:22 days, 12 hours, 36 minutes Bad (down since 2022-02-24 23:09:40 UTC)
Tags:dll emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-02-04WS9F7imzKVXUSJpVea.dlldll efa6e280425ce3b3cec5dd6902b27ad7bf667e3cb8156a2327b0e7141eee8c40Virustotal results 35.38% Heodo
2022-02-04YDEoPOZgFT.dlldll aac78fd22bbeb1e645f196b82d6fc43fac0f779bb8892afff041829f58538b34Virustotal results 33.85% Heodo
2022-02-04uPY8Gsmr.dlldll f4eb34e15504252c8bf383d8798647fdde0813328880bdd59edfba987aa7d338Virustotal results 31.58% Heodo
2022-02-04yhZu94mxhbZuZijghO.dlldll e4dbec562980f63cc70250a9ff834b7c102accc972c3442eb358dc95fde4efe8Virustotal results 32.14% Heodo
2022-02-04hfp8vP6NUWYEAbIrs.dlldll 5f30f3fa10fa1096defd060a78101f343e333292cd3360a7854a402d84fac111n/a Heodo
2022-02-04W3Wf2HTb4EwPk1nwC.dlldll 7b6a6c505fe56dbc7c277eed4e92075430dff9f1b3040d81fe794ca50c1d4e36Virustotal results 35.38% Heodo
2022-02-042kvXVf.dlldll c2c14a5c5b26640c83120a09f5f009112a4893a3ca28d19cd19f47c5a454f9f5n/a Heodo
2022-02-04SNjt3tCiwm.dlldll 1a22b5b00faa4f53cc03da6996598bffaf39ff9d8e06384270b88a87f55feccdn/a Heodo
2022-02-04Vln7JysqmEMf9.dlldll c579f71301a05e5bbf8171de06c4b8d12537945725ec53bc28d6ccd5d0ae3bc7Virustotal results 32.31% Heodo
2022-02-03RYnUE7YiwssFZW9b.dlldll 8fdf7f90e51498b79af17d88092e3ed577ddf24a3458f953ea59405c0f5b0c27n/a Heodo
2022-02-03NtXKn6JCkA3ippX.dlldll 26a895599026c2f15eaa06ac723d12e268af51f8d4fd3e2b6c8d9abf0b58019cVirustotal results 31.25% Heodo
2022-02-031MpRQsAyeuu5II3hx.dlldll d93ced80d47c983685f2fd8e50a0d7dd2e2f9094c6282caad43e857a41652aebn/a Heodo
2022-02-03UpEoZ4LRQB1ZX.dlldll 33028b050c745cc05dc60d69f3cd472b483371a8814dc6d9d1421328f86f0871n/a Heodo
2022-02-03rdWQWvmbLtdCk3l4eb.dlldll de9302a5e2ab73e92579aced66a0ec5144114f9d2b69074ce1a755f4b8631afeVirustotal results 28.12% Heodo
2022-02-03zDtUZfDM.dlldll 664caf97481269b5a932f147e575295cab57cc37aecf68df37b0bb6e5937e9f6n/a Heodo
2022-02-03jBiyniEEQ.dlldll b02c89f7a5bab0b0db7f0e25976c22aae35d78d3103d11917a007309e9bd3e9cn/a Heodo
2022-02-03yttmt9X9XE4f3v9c.dlldll 0133d2dfd8c1947c78fb56206ee921e7dc3a51704851f2ddc6a0c71fe691fee0n/a Heodo
2022-02-03GxLv6Ped2swI6l.dlldll e3f8e03ff3269f6cbbcdd7d376d746f9a23be95280dd4e78d18caa5148b81250n/a Heodo
2022-02-03cCVLN2q.dlldll 7cc55fd08210c0ba35b1761552bc4340c41416469a5b78c3e29b6c2a959cffa9n/a Heodo
2022-02-03t1KJdG06aepo.dlldll d28db4a0a3d0f1318798343ed32485572894e6ef9900d71eab297b11eddb0ed9n/a Heodo
2022-02-03tckFqJsWrccmz.dlldll 6ad0ed9c6c59024c0cc5e3dd8c061b0525d105c48e381691d460ed59a878a326n/a Heodo
2022-02-03V02Gnf.dlldll 1496e7b5dfbd9c52841d38187af1313c49e80d4aed149c9769933191ecafad1an/a Heodo
2022-02-03Ym9ShU8Tw2A5F4G.dlldll defa25dd8326db6dda623407d2746ff66cf0728aab86fb09b9c568bec3a0fdfcn/a Heodo
2022-02-03QRyHIpFeRIPB.dlldll ef587e54570b2ad5bf70601eea30e5fb53cb72a7b76830d36bdf0cf441676315n/a Heodo
2022-02-030jQYB1ykxS1VOO.dlldll d130cc9cb048f73030d08951d68d7ecc98120f4b863291e1600561a29bc96c08n/a Heodo
2022-02-03pwarCoBT1Fqq.dlldll 294d81c121f6b676ab9cc4b697d1fb9908fd0935366ad83e31f190f0e4615ebcn/a Heodo
2022-02-03jL4i.dlldll 568896676ce8424bd3f2668c78ae312c7e75740ea77fa4cab3b1c488296e44c1Virustotal results 40.00% Heodo
2022-02-034TSX.dlldll 19a0feda33f295e71fe207c156ed19c1ef9f1144b1fd8c2b474c8a00dad29f46Virustotal results 36.76% Heodo
2022-02-03xpSyF5.dlldll 52012af7164c534f1db4fd2c4cc13a51d2576b435edc45f448a5146cb86ea959Virustotal results 37.31% Heodo
2022-02-03JnyaL7IIJhB9XEyOt.dlldll 5c685d49302de46895795024ff0b5e488688fe907d752e6c6c8723092c3fc532Virustotal results 36.76% Heodo
2022-02-03dfY4IMc.dlldll 2f2839c5c32c36b3f3942700799fd1d3816e5a6cb0a58dad4b362b24de36e2b1n/a Heodo
2022-02-03abVLkvyZsgWR.dlldll fca71dc584a0b5824e263b774f4d3e479dae9dbbaf7a9b977275676901b7865bVirustotal results 33.82% Heodo
2022-02-039Vwr.dlldll beded4bd8d02f6b23d148476c2da6a90b46e4378357d0e54f9d28f35d4d627d7Virustotal results 30.88% Heodo
2022-02-03YHRmbMeiUxg.dlldll af13bd813b95e71807f495f6c758193d746c99516b1dfc3a6386f73407216b83n/a Heodo
2022-02-03idyl43VsDKZp60suju.dlldll 00984045537c44eb6f1c934e368a66bb4598d74870f76137ff8ab6532915d530n/a Heodo
2022-02-03Aos5xUsGZUAk1Pi.dlldll fee3ed18c387984b120f020cb3ebe17587037dd8fa8d5781720d699041fdd586Virustotal results 27.94% Heodo
2022-02-03XDArulxjc7Qp.dlldll fc6b0d9fdf099aa7b4c39ce7569d3e13dce44a4f7b635dfb85be38afe768bc56Virustotal results 30.88% Heodo
2022-02-03cAzcT4xGrbWa5x.dlldll 67b6cf7be31f12182ad36d75b493b5a5ab9a8357b89fa6c62af6dbd47c3b5bebVirustotal results 27.94% Heodo
2022-02-03xCeyQBbnHMW.dlldll 3a4615ac992bfd8bda90149df549ad8407c2afa4552e6a2829d8fe69cae76d21Virustotal results 27.27% 
2022-02-03YrHRP.dlldll 2357bc95840b54e679fc4e77144bbdcb154d66669937598dabd7c230507ccb75n/a Heodo
2022-02-03qpFYOKPbF.dlldll c00c77be1a1a5c3abe8187fb93f1eb5601f0dd23f59a6f8135b30c09b9b45860Virustotal results 27.69% Heodo
2022-02-02fyOIJEC.dlldll 90c396642f74357bbd90e5891ee30a6bfead0d13a83ccde5dee9084c4a3906ebn/a Heodo
2022-02-02NsflZbudWtawmo.dlldll 0e130f554133c60b6d23eca30998b1ae2bed3182d7da77d025a2f653060b462dn/a Heodo
2022-02-02T7Wy701Dk4w3OPnFmfR.dlldll 0dc35f02b388e6d48988b25217ae67fee125ae749a198619f9f5038560e8dfb6Virustotal results 26.87% Heodo
2022-02-02aZYGBhnwAOKUJDu8.dlldll 9fde7fb6f4cc165e434392afbbfdf796d1b78cc8fa93e4c5866593b4dc172992n/a Heodo
2022-02-02R0GKxPgifrfGPL4W.dlldll 2afa1ee168d5294b66f6bf2648a287dd055eb89757005d8cdbc1bfb07e63ee63n/a Heodo
2022-02-02pRVOFbeZRnBgK26.dlldll 8a06aabf71a682f8f6d98cb68104cdb8ad7aa79ba51d35688eb931ccd1824aeeVirustotal results 39.71% Heodo
2022-02-02RvJd3.dlldll 43977aabf224b0aff86ca180768cf0e373e4bab5595ce1f1e374fb8fb8f9cc27n/a Heodo
2022-02-02XrXwOfayKzmljRqOXF.dlldll e11a20c6682bbbd07b9ff74ee2f4d2b02364eec140d6576e2428f73828ddaa67n/a Heodo
2022-02-029acRLZxbfX9Yw9xGYy.dlldll a8ca6d7b108160942a00f04cb912ddf4c60cd71d079d936419e9913accca014fVirustotal results 38.24% Heodo
2022-02-02SE3eKsfH.dlldll 810ad22f6306f9f34de51172859c45e1a85c031095d49ecce778025b50ef05d3n/a Heodo
2022-02-02pRddYK.dlldll 138f91ebb4d4cf6d485de861624974bfa099c3e5b26e28924e333915164db9ban/a Heodo
2022-02-0210NHV2QwGGl2eW3J.dlldll f7b39027faf693b600be6623a66db91a431a7b459e5533bde39517909b0975f3n/a Heodo
2022-02-02Wc0Rcg8.dlldll 77e8ec9304eef6b889983140e78edb0bcf34fa30fd7400f92f3d51fa508e920fn/a Heodo
2022-02-02n1qsD4bG2.dlldll 9c88ebd35fcf19fbf186a56c0c10eabe045d22f8c9b008e7e16bdac9c1b737den/aHeodo
2022-02-02TOa.dlldll 098438e0f154bd4593d8e648b27342512d56e450c2496768e6ee33838e138d7en/a Heodo