URLhaus Database

You are currently viewing the URLhaus database entry for https://servilogic.net/b/14hqrdyP0Z3WsbQib8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2038845
URL: https://servilogic.net/b/14hqrdyP0Z3WsbQib8/
URL Status:Offline
Host: servilogic.net
Date added:2022-02-09 16:37:07 UTC
Last online:2022-02-10 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-02-09 16:38:27 UTC to abuse{at}cloudflare[dot]com)
Takedown time:10 hours, 28 minutes Good (down since 2022-02-10 03:06:54 UTC)
Tags:dll emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-02-102Nf1Nk.dlldll 31eebc627290fefb1a4c492ea4fb4992d852d694837a4f162789a2a2b1477412n/a Heodo
2022-02-10uas8G.dlldll cf4ef64831088b0c4b2d22247eb0dd5ff56d2940b53c83e2a65ee255d4a5ca80n/a Heodo
2022-02-10zDbtISeQw5uuqLYItl.dlldll 5506ae5a2fd5c578e16733142619ea6a041555ab95fe29c3de331fbba3376e5aVirustotal results 10.61% Heodo
2022-02-09rrAsdkAhuU9ttABCL2o.dlldll 3da28544f9294db2b95f428132f848d8d907baebf49d3c6dead3c13d9907f1d1Virustotal results 10.45% Heodo
2022-02-09CWSaQx.dlldll 34cfac5098251eb3210dea3cdd6bf508d8cbecfcfc35daea8d34839a16585e9fn/a Heodo
2022-02-09uTAsl.dlldll b33dcfff14956d2d19c147ba73d1b36e368c09b8b2e6412bb91e59d470e2fdb4n/a Heodo
2022-02-0938aWcyFyBJPP3lB.dlldll 625b03c944ffade8ea99a39e912911bb4430c6af8a4e5fb747c2858b2a78650eVirustotal results 7.94%Heodo
2022-02-09XcNXWfogpwJOm7T.dlldll 17a799e770686f1ce4a2cf9bb8dc52cb0055230fab1182c01b10f29f605333d2n/a Heodo
2022-02-09H2ky64JF8QAmSzc.dlldll 3486b2c85f7a0f66d2939738ba6b0e041c8856ba6ad314f2e8822699d4427b84Virustotal results 24.24%Heodo