URLhaus Database

You are currently viewing the URLhaus database entry for http://ondasurena.com/facebook/l0dgt_x3wg7rx-383166034/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	203378
URL:	http://ondasurena.com/facebook/l0dgt_x3wg7rx-383166034/
URL Status:	Offline
Host:	ondasurena.com
Date added:	2019-05-29 08:36:03 UTC
Last online:	2019-06-10 21:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-05-29 08:38:05 UTC to abusencc{at}interserver[dot]net)
Takedown time:	12 days, 12 hours, 32 minutes (down since 2019-06-10 21:11:01 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Bazaar	Signature
2019-05-31	exg25a05_7704247788.exe	exe	981d7f80596479b6e8300d0dcfdf96a82d56ffd6f2ae967df4a7b52727533c0c	29.17%
2019-05-31	ksvrsxc1cw_7853.exe	exe	a56ca8c87b8cf746cb8409c797c6ab44723656e0e1234a25edb724dc02b6e3ea	28.77%
2019-05-31	ct1pyulj8o_72532476.exe	exe	d8433b324f9acfbbfd9df3bc83b883eb2487d9fae9bc98bf3521de11b63d84fe	30.56%
2019-05-31	3nd5nie8e_18776980.exe	exe	504a1660f77f698463c1a5ebfa8ce1ea2cd6bf5fce57a33ee74e2688c2bafd9a	31.51%
2019-05-31	02_1063.exe	exe	03434d43f8e9a3942ba7dda9d222b34a54b0fb47b713d33a981fab4b85bd4261	28.77%
2019-05-31	qxd7t_64176.exe	exe	062e0e417a84020aa889b540734fa425457773ade77baed850f35468cb87e22b	28.77%		Heodo
2019-05-31	s684lsiwi_61403200.exe	exe	d37453e050f16b3a052075884afdb82cae5d1d994495d4049f42385a5a813a47	27.40%
2019-05-31	5_0518.exe	exe	89505e3fe64ca23db5e3017824d146817d02227a7480d94ae590fc0eacbe9deb	28.77%
2019-05-31	wll0li5_03.exe	exe	426d40fa7f96527382e0a0d4eac63e01cd89f262853046371a9c2e43baf72838	27.40%		Heodo
2019-05-31	todhe2unh_55.exe	exe	9ccc19110df66ef4fb52664d56b04c9139e8caf2cbcfa1be7db3fd7fe4e1bc1a	28.17%
2019-05-31	7_49.exe	exe	59bccbd8f0a9bd09cb01a96be42f1ae64203aafc416dc60fd049479ec433d55b	n/a		Heodo
2019-05-31	fy0fa07f_4484.exe	exe	4fd1a0c32f230f5f119636f8a3a7eb5dffb7d9efbee7563b302af483ef1c5adc	n/a		Heodo
2019-05-31	u4tzt_5653246.exe	exe	135b4ef9a0fea462f9c363f90af3598deb68e5bb7e99a166f01950393d98977b	32.86%		Heodo
2019-05-31	fuvw07o_7.exe	exe	75888d87ffd18664353ec8dcfdfd1b7e0009e454cb30b372fd93e8dd1281829a	30.14%
2019-05-31	rwqd6rs108_2.exe	exe	1f21d1476f3f275bca23e17714a9fb602af9054e213b5f68c02ebb1abdaefec3	n/a		Heodo
2019-05-31	vwr_648.exe	exe	8fd59df7927379aa3b0a0daa0d7e9eb30bc323997b9905c2cafc687ee5b54068	31.88%		Heodo
2019-05-31	x5f7is_679.exe	exe	f0a488c10f3d607daa53e44995768fccefb3cbd8ae59e3fe1ae54b502731c5fc	31.88%		Heodo
2019-05-31	meon_02.exe	exe	72155cdffca2e2e9265d88547e410e51921c014cd8d259eda30b9cff7de118c9	28.17%		Heodo
2019-05-31	dx_80131.exe	exe	62b8d2ac4bd2eff5caac87d4dc34246c90447595ba783063a10de1af77ae24f4	42.86%		Heodo
2019-05-31	o6_485.exe	exe	fdac3bc5c6d96b8beff3a5c19737d2aee7cc1e744f1697f34560ebe0c001a845	35.62%		Heodo
2019-05-31	fx35xvb_7163210.exe	exe	85c9b15366241b549b8d70d7ef7805fd7a91da1e6e8bfcb0b0460a93e5984e13	33.33%
2019-05-31	16qjmo5z3_7.exe	exe	507c5e64ab714d3e9578aba8329b5bce6cbddaced248c01483398adc0ee33196	32.39%		Heodo
2019-05-31	7qsnht2ks_2.exe	exe	3d667258ac6ff5afcd3d267a747fae7c393f1b52ca743ae60f713e8d08496865	29.58%		Heodo
2019-05-31	fmz4rjoc_520055050.exe	exe	41f07e5814ea0ccbf9e82e16a17ead43b91ba65dee15854029be12a3f68010cb	38.03%
2019-05-31	eco43awv2_20470495.exe	exe	b666ff5180facda1c5770aaaa432d95e89656f113f8b00aec5b77361c8f247d2	n/a		Heodo
2019-05-31	6hhvg96_47.exe	exe	4bfc940e5354b36df128e8eaa3b18cae76678b8f1038055a439be347fbce72a2	37.68%		Heodo
2019-05-31	g_93.exe	exe	bff0e404f0249f2d4cbd0d602e7b30f5dbecdd5f67bc62577518f7664d215b59	n/a		Heodo
2019-05-31	er_965056.exe	exe	2dc759d207dd72d1f12d6459a83085a197244ce9e3b0b1919133e20a40134839	35.21%		Heodo
2019-05-31	g4arh_1.exe	exe	66f26cae7b756787017057ce9b4a8928b5da531bb7a524fbd61e3baeca03818a	30.56%		Heodo
2019-05-31	1_53162.exe	exe	35c6039f9844d8a3bd110942e6b97a5f8a1d3f02eb400342ab225623d027ca6b	28.57%		Heodo
2019-05-31	23131zcu_6.exe	exe	7e2f7a61a5e46ca5adefbd3bcf38ba87ab0ad7864a989a030b7c8a587dfd4d21	35.21%
2019-05-31	0mpax107l3_086378.exe	exe	1cb4b3a6b2b220b49589073132ffdc081db523f1500bcfded0450f2fa128b731	34.25%
2019-05-30	hie_1842.exe	exe	525e72da48f2db8eee60a2cda794ff96c152c1e177ed6fa11ba48d76cfbb57a4	30.14%		Heodo
2019-05-30	5_113.exe	exe	6051270500093c2ab1c557f10f937557007418a54122f59752527dadc64dd0ef	33.33%		Heodo
2019-05-30	qks_662549217.exe	exe	837d4d8f3f8fe6d7e2562ed0e453397aaaa8a59c3c4ea830e6264a7c01d0c1fb	39.13%		Heodo
2019-05-30	zx2_867.exe	exe	50092a141f4d560ce350390de28b7752cdbbbf0b5d0757efec18f8913e680a09	29.17%		Heodo
2019-05-30	i0s4muoi25_907011.exe	exe	f3af2dbb956568b03dfc2e54324b6a5c0afa5d09d541ce3b42aae6600a88fa85	n/a
2019-05-30	36cegr0_0.exe	exe	5a8758f08a1d08f6c819d883c87e46f3e3310a39eefc2cd12671307658f09c95	33.33%
2019-05-30	5weo9l1_214.exe	exe	2928ce934df8369f06899ac9d1d94f5fc35cc66708825748922078162321b321	23.94%		Heodo
2019-05-30	voosmi8n_781.exe	exe	cfb6f176281e9e72abe5fbe4b8b09aa3f2219dd97d9e817b59361e8478a77ca5	25.71%		Heodo
2019-05-30	m224km9o_58.exe	exe	565b3525c4a01fd1277dc4e0139cae1033c7fd2ec65e24b87197dd33450afb19	26.76%		Heodo
2019-05-30	dqm9_2653142322.exe	exe	d176f3d714947649f95781d10266540d827eff89ab8089ab41571a8f7cc40e98	26.39%
2019-05-30	d9z_107599136.exe	exe	e2a925e4d7f56eaf6803456847049924903495b13af99231494f4d5ce53d7341	29.17%		Heodo
2019-05-30	18_45265581.exe	exe	b574e372df7146902ad2e2f479bc708b2ff0de17a082964b58862567abd3baf6	26.39%		Heodo
2019-05-30	pni5jsqfr_61.exe	exe	3e62b4591a3cd19f078cf8171c520a84667202c516584c37df169cd58898ba4a	28.17%		Heodo
2019-05-30	kz_300.exe	exe	6b38896177862321b1d36a769ec4bd89ce17a8cf48e00883eb541473fd4c098a	n/a		Heodo
2019-05-30	f_748.exe	exe	2e731aac8121cac328c06647a906995cce2eddcc98cc7049d1d8fa2fa4a51798	27.40%
2019-05-30	id65p_63224756.exe	exe	b65379f11aa7875da82797a5133cefb62b8eddaa8cc774bbbc4afaded1ff3ff6	26.03%		Heodo
2019-05-30	gmeinksa7_793104.exe	exe	e724abc62c654a0115800185ab2354446d4f696777def7f062d98c971d9a4e75	26.76%
2019-05-30	qy0j_3793604231.exe	exe	66edbd54b9283da3b83e8fd81f0a9722f3447b308c53eb817707bfe75921d014	26.76%		Heodo
2019-05-30	xaq8wu7bf_1048243.exe	exe	9563f71380f0fa02034d0554151872fe6a637ad0036a764b781cbee0e1c250d0	36.11%		Heodo
2019-05-30	fcsib7v_3103.exe	exe	ee4d3c418d065b701851fa607a325308e113f99d8fab479a6b93f4f929f75a47	28.17%		Heodo
2019-05-30	4ewnya7n4h_7858525354.exe	exe	57f0449b822e3de6a4653fe43571f7e547116e337e52acfd3aaee3b38a55c74e	27.78%		Heodo
2019-05-30	dm0b38ehn_7582139126.exe	exe	ef3b8194d9f0872f20d80f2a19983539be6a83f3b504a4e9185f1b784f385b16	29.58%		Heodo
2019-05-30	zcenc0s_7075022243.exe	exe	d0de6fa065bca9517222e815dcf73ac54b23f1df219c0ffafc5c2d6b9d826e6f	32.39%
2019-05-30	de4uvj_176954.exe	exe	d83af2f9f4b8886bfcd17c91c4a5d27a1d76eeff56cbc9a5fe09c93d6f1803be	34.72%		Heodo
2019-05-30	cgj3v_54.exe	exe	8f831df11feeadcf237b038c432d4fe706cf9afcb940c4e88c165a9d1930e9fa	27.78%		Heodo
2019-05-30	wo_96591.exe	exe	5b2d5986c950662faa5f3e2caa6d9e1cb5649aeba1fcecd360f7628d32a7d808	26.76%		Heodo
2019-05-30	a_03927.exe	exe	23af4fccf4ecf994e93c39b21a85b9562179764d733cea3093f1c91ae28c1574	26.76%		Heodo
2019-05-29	4uljff1l_75827863.exe	exe	4422c70a46ae30c8b4e198d88b210001784d14edae31a5b41d271c5f36988b1b	23.94%		Heodo
2019-05-29	lplyqfsks_7966176.exe	exe	79dd32af2ad9878c7fe2311e6ce290f8bb313b0f240f3517b5ac6c2bbae887d0	22.06%
2019-05-29	ow9f3skhs_823034449.exe	exe	6116b8b34753bf6c393f7c34b209f34cc582ada6b5d259a71d26d58fbec4da87	22.54%		Heodo
2019-05-29	qrqhu_0118.exe	exe	424a5b607d62c205c51b67f637152bf257e435490994495d5657892dfabfbe25	28.17%
2019-05-29	wxhg_455.exe	exe	2c4eefa44987a71690b58dae201cbe79c135c498b670683b690d18f86a96d1ee	25.71%
2019-05-29	8u73be4u_533.exe	exe	c0e4a0bc169a955d44cf6b113b249738e39f02269440f39a6fe258fb847893b8	n/a
2019-05-29	glq_728.exe	exe	5be764f22ff7428d95e3437186a8f540f2c00b3a613f76857f49caa6af7e2294	n/a		Heodo
2019-05-29	lk167i_315.exe	exe	8c444330d522b540eebc8fd67814ef4ab8cba6705f5b856b32d5b7508f0f6a1c	n/a		Heodo
2019-05-29	1sb7ts_0576566.exe	exe	0203632d35ddac01f92b4e959d592185f673b1dfd0007d9d5cb63676450e9270	n/a		Heodo
2019-05-29	dlu_8.exe	exe	7221a5ac575f1c4812be871a2ba7cfaf793d95e510e330da59fe5329dda3fcb6	26.76%		Heodo
2019-05-29	3rm_0.exe	exe	af94cf9c09c1b4cfe24e9f829e6d178df48a317d52581b82b1260877bc7972fd	40.00%