URLhaus Database

You are currently viewing the URLhaus database entry for http://sap-city-dental.org/cgi-bin/uc89fdk72_rxx13zqaln-698/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	204123
URL:	http://sap-city-dental.org/cgi-bin/uc89fdk72_rxx13zqaln-698/
URL Status:	Offline
Host:	sap-city-dental.org
Date added:	2019-05-30 14:58:04 UTC
Last online:	2019-06-12 10:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-05-30 15:00:06 UTC to abuse{at}strato[dot]de)
Takedown time:	12 days, 19 hours, 10 minutes (down since 2019-06-12 10:10:28 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Bazaar	Signature
2019-06-01	5h3i5ns0f_9837080.exe	exe	1f4259e2b808cd00fc825f0e39a2b22ff4aea6caa5175f1e4567dba0bf296dca	61.11%		Heodo
2019-06-01	v5zdamf4km_481433945.exe	exe	96db9b2251e7b2ae461a49839fcd0cacb7cab6dfa05894bcf6830b91f2564074	59.72%
2019-06-01	zm_197505388.exe	exe	ca6b51e5eb19b7bf944bab66471424980eb99a8fd245b50175a8f1b7472a1036	58.33%
2019-06-01	v57dzj_959396737.exe	exe	5ffe89f39ce332d5ced18623c40d604b340bc8be283ea6abc333763ff651c9c4	57.75%		Heodo
2019-06-01	izi_7912806.exe	exe	f5d49f6414bd71d4d0b06daaea66ce61606e062bc01bfbaf4168eae2baf6099a	n/a		Heodo
2019-06-01	pi697umku_06.exe	exe	c9834d76d7846425116d5e9c3d7802e4937b42ef12317d9f269dab3d9570b23e	57.53%		Heodo
2019-06-01	yb9yduynfl_496173.exe	exe	0461721df37c8d27491e1ce9708000ce18823a38222ae99102f448eea63d4f13	n/a		Heodo
2019-06-01	mn8_6069407379.exe	exe	f009825e48a63656f31d05bcfb18c7e6e262fbe51500ea900bdd8546efd51682	52.05%		Heodo
2019-06-01	2sg_6087027156.exe	exe	80122891d866d64ad40dcccf3ec2b6607d6ca01e860c4ae0b85633ea6d6c2931	50.00%		Heodo
2019-06-01	9u_2763285.exe	exe	c82c0ee05026242ce254f01400399f89f69c32e7c84d6ccf85c2cfe6338a4ae6	51.39%		Heodo
2019-06-01	ir8aitc_348.exe	exe	5dcc82796184fcee4a68799cb023640a65270b512025d69212e48e5b84e31aff	n/a
2019-06-01	6mw8_5885.exe	exe	ca7ce52836b84c4bf3042c222ee2fc739868e89793a75b68a3f6ecf4f995e528	51.35%		Heodo
2019-06-01	rl_7743106677.exe	exe	07ac480ac48bc84356f84064011254023400e39af622d78bf460baee2f3f0942	49.32%
2019-06-01	8gzi_94307578.exe	exe	0a8fac51df92f3c72fccb1c915e9868f38abc23b0935a94cc6f3c9cfbbcacf50	n/a		Heodo
2019-06-01	vngc_2448008.exe	exe	938d92627c12ec0b308ab3a94f502c182c653ad393ab1c520ee21bd7a8d9a357	39.73%		Heodo
2019-06-01	24y2arwz_37.exe	exe	1a2ffc069d6d103f39b0556ff638a6470c9ec16f181de8e735f20b4f4eec3eb1	30.00%
2019-06-01	g7u7cpj5n_54.exe	exe	7b4678b04960a7bf39fdf758637519af1680f558a482aed762aeb79ccefed55a	31.51%		Heodo
2019-06-01	kw47fl2p_651212.exe	exe	1beb09ff3b19dc5e10ba1915dbc1b83fff890deeafd49b95d97590058e56f362	31.94%		Heodo
2019-06-01	n7gldhl803_14828.exe	exe	faf196619e341bb8cccc91c7dbffdc2b1b095182a2a055a19e45d8aea7dc6fa1	34.72%		Heodo
2019-06-01	t_523628.exe	exe	d5b32fac9f25343f6c9f6cce2bc6c7c285a794377c8a8f0d7080e8cde98e61a7	n/a
2019-06-01	e_77.exe	exe	c1bd33466fcc7f8e974b83fc6ff3e80b2e838a435779363b31241ddc914c71e4	35.21%		Heodo
2019-06-01	3zei_7035.exe	exe	17cd84a5e5246dfbd4c94417ade88d4a58426b5926689d3135309191a181b059	30.99%		Heodo
2019-06-01	1mkkl9_010110.exe	exe	2006a7fafd151050a2ecbbe15180fb927d6e78d91fd8a34576e9bf534ced4e68	31.94%		Heodo
2019-06-01	zce4l_3368476565.exe	exe	a4258eb0c5f6e753fc4c91a7b1d7730af7d2dc29eee94a1ff213d11c9c17796c	32.86%		Heodo
2019-06-01	3lhxne_4.exe	exe	2a6076fc8d5cbd48477320f392fc59177931f8846203757418b062bddfed6902	31.94%		Heodo
2019-06-01	tkjm4_37.exe	exe	39fbcfccfe68cebb14f1476186e0c4221ee46cf2fd2f98eeb1849954595605ba	30.56%
2019-06-01	rult63qp4_4253.exe	exe	21c9e7f8e09d1d6faec2268d39c8982ce52afc5aa7356cbcdd4651d42034c1ee	n/a
2019-06-01	sy_95955951.exe	exe	7f3efdf2d06973bb9335352eeec20c179dce44653749e06b38c5b44e146cb57e	30.56%
2019-06-01	7v_7.exe	exe	87d17727f88d0bc9f5e35ee7aa3476170624bf9a2d44bac58428ff409b984fcd	31.43%		Heodo
2019-06-01	b_2510.exe	exe	0f1cb997ff7e0efd308d6d16f1a9eeb9a885a2af9cbcdc33d7d94fc608c74924	n/a
2019-06-01	3pljl38_271391529.exe	exe	2b065202a1d9a2b5d733962a5a0101463406dd8c0db625094b6077df63fad365	n/a		Heodo
2019-06-01	0am_995.exe	exe	846de9b3ba2858ecde3c7a890c1610d38f5ca4d225d86734246b956f273b3247	32.88%
2019-06-01	xnipgx4_99463.exe	exe	cc0f10966a0993c49254fa79810ddf2a04ac4d0ba44055a567f4142bc0319735	33.33%		Heodo
2019-06-01	23lqp8d7ms_296.exe	exe	ca09b957de0c1e373312e9fa1b1cc2360329bc7744f286d02ea33533270abc53	32.43%
2019-05-31	e0mry_102695767.exe	exe	51992faf6a2da6e340b65ee42b2a33ccc77306331152b6c5a7516bcde129c8dd	30.56%		Heodo
2019-05-31	5_237205.exe	exe	b5720e57b4cddffdcc08794173c091c1be2977bfc26e5fa89935288bc242c539	30.43%		Heodo
2019-05-31	nvlxuw7ly_744.exe	exe	2e2c892e414e3cadfe07c12b53325303e0bae8ce9ba7100605bec4432479fedb	n/a		Heodo
2019-05-31	1maae_41.exe	exe	f971a3e8cf7ef49ebd3f6400817fc8978c2360f71123c16ccf3a46b9d03f156a	27.94%		Heodo
2019-05-31	966_8167030018.exe	exe	fd96c0136235e180cb5340069b31d0424a89622dbf4a319c21cf9f0688a7420d	n/a		Heodo
2019-05-31	9_7.exe	exe	3aa21ecf0d173cc8e23a6deada7807e1d73dc39035d7d97bb16a0e6a5c0f4a3e	n/a		Heodo
2019-05-31	o0jrvt_93566176.exe	exe	917961058fe00e6aa68f77b326813968e7f4fa3952b2c7fa7c4d3aa300123378	27.40%		Heodo
2019-05-31	6j5dkb7_377.exe	exe	8b9d4bc9f8b026a0d5baa5332eeea13da9a29f06bce84992ccfd9b48d43895d0	28.57%		Heodo
2019-05-31	lk_157254.exe	exe	c84498b0a45190db8495a361a1bedadd756bd11a14f29508bc4c1b702dc3b53d	27.78%		Heodo
2019-05-31	j0sjvqlf_3.exe	exe	1eb175f12416be4f23aed6ce147d2982184e20361608707224a0be64455a7e06	24.64%		Heodo
2019-05-31	tyr8h_68.exe	exe	504a1660f77f698463c1a5ebfa8ce1ea2cd6bf5fce57a33ee74e2688c2bafd9a	31.51%
2019-05-31	o62t4xs9jz_0.exe	exe	49c1d4ec7754eed53a7b21340dbd25739e3c7c46ad84b0e7a46d863f4522301b	27.40%		Heodo
2019-05-31	i5e_0.exe	exe	4a2294d7f0da1fe7ba7d043430891ee3f405fb590ac9b2f8eee8ea15d18aec3c	n/a
2019-05-31	ewu1axvv3g_45270.exe	exe	9b8662cf15c0ef4220d66ba6404855d92660a498f3ed52426ad1e6052ff32fd7	n/a
2019-05-31	xag3p1xtpl_6765297.exe	exe	426d40fa7f96527382e0a0d4eac63e01cd89f262853046371a9c2e43baf72838	27.40%		Heodo
2019-05-31	3zil50_082.exe	exe	887d1b93c6600d515bc090d63e1cd3705cf0015eb5c6afb234abb3e4cfa2b8a6	28.77%		Heodo
2019-05-31	8qkxm61hcm_38.exe	exe	59bccbd8f0a9bd09cb01a96be42f1ae64203aafc416dc60fd049479ec433d55b	n/a		Heodo
2019-05-31	cvztp5bas_1952108.exe	exe	4fd1a0c32f230f5f119636f8a3a7eb5dffb7d9efbee7563b302af483ef1c5adc	n/a		Heodo
2019-05-31	q092_15242.exe	exe	3b3002e7ecfd02947bd780781196f43e083cf540d443787943cdca3c8673c272	31.94%		Heodo
2019-05-31	q_784.exe	exe	75888d87ffd18664353ec8dcfdfd1b7e0009e454cb30b372fd93e8dd1281829a	30.14%
2019-05-31	wjl0uatbr_135807.exe	exe	03b9ca41b285fe1d8df46669bb5a171550094fda52288785364be502c247d8b1	30.99%		Heodo
2019-05-31	hrx0qa64_8518991.exe	exe	b4fbb7f26edd058db5c941d4467d70153ec8ca8d90e7f66f3f4907f1db1ad968	n/a		Heodo
2019-05-31	rvk63_077914296.exe	exe	f0a488c10f3d607daa53e44995768fccefb3cbd8ae59e3fe1ae54b502731c5fc	29.17%		Heodo
2019-05-31	jjtc_230.exe	exe	72155cdffca2e2e9265d88547e410e51921c014cd8d259eda30b9cff7de118c9	28.17%		Heodo
2019-05-31	4824wdh_23.exe	exe	62b8d2ac4bd2eff5caac87d4dc34246c90447595ba783063a10de1af77ae24f4	42.86%		Heodo
2019-05-31	xhmpr1q0t_70374.exe	exe	fdac3bc5c6d96b8beff3a5c19737d2aee7cc1e744f1697f34560ebe0c001a845	35.62%		Heodo
2019-05-31	f7bbqdh_36852.exe	exe	85c9b15366241b549b8d70d7ef7805fd7a91da1e6e8bfcb0b0460a93e5984e13	33.33%
2019-05-31	i5p8_36844.exe	exe	4ad0ce4d112be8d4877973c694543c469959909088cfa8b7f9ff9959a02fe5b2	33.33%
2019-05-31	m0pex1vn_8476668603.exe	exe	3d667258ac6ff5afcd3d267a747fae7c393f1b52ca743ae60f713e8d08496865	29.58%		Heodo
2019-05-31	h9lsq42_0338820.exe	exe	6cf8e05f737841d9f1445eed3ec8aafa9cfccb622df3b44b56feee585bc81c81	31.94%		Heodo
2019-05-31	x_59.exe	exe	ee8eac341f77f9c0d52065c787245933e305a5c20de9097365665669a34d386a	29.17%		Heodo
2019-05-31	j_3.exe	exe	4bfc940e5354b36df128e8eaa3b18cae76678b8f1038055a439be347fbce72a2	37.68%		Heodo
2019-05-31	p4rzoxyqre_47340.exe	exe	6bde5f26ddef0b3fc31b0aac925685a10ad784e1ba83b57a3efa07f674340054	29.58%		Heodo
2019-05-31	xsitnyj7_3.exe	exe	75b33f293bba66b7813275e73ca537825f753891ba1331a753145aa10e2356fa	32.39%		Heodo
2019-05-31	txroj6_39126549.exe	exe	2dc759d207dd72d1f12d6459a83085a197244ce9e3b0b1919133e20a40134839	36.62%		Heodo
2019-05-31	howzgkyzkw_41.exe	exe	35c6039f9844d8a3bd110942e6b97a5f8a1d3f02eb400342ab225623d027ca6b	28.57%		Heodo
2019-05-31	yz324dlna_21646.exe	exe	7e2f7a61a5e46ca5adefbd3bcf38ba87ab0ad7864a989a030b7c8a587dfd4d21	35.21%
2019-05-31	lp_911910.exe	exe	1cb4b3a6b2b220b49589073132ffdc081db523f1500bcfded0450f2fa128b731	34.25%
2019-05-30	h3d30lyov_8.exe	exe	5a29f6b60c2c18ffc91acbe62d68d6dd4de188348d1c4373915481f46d738736	n/a		Heodo
2019-05-30	7f_4015183.exe	exe	6051270500093c2ab1c557f10f937557007418a54122f59752527dadc64dd0ef	33.33%		Heodo
2019-05-30	zbdsqcuvn_8985356.exe	exe	837d4d8f3f8fe6d7e2562ed0e453397aaaa8a59c3c4ea830e6264a7c01d0c1fb	39.13%		Heodo
2019-05-30	9g9_60755739.exe	exe	50092a141f4d560ce350390de28b7752cdbbbf0b5d0757efec18f8913e680a09	29.17%		Heodo
2019-05-30	tl01l_8643660.exe	exe	f3af2dbb956568b03dfc2e54324b6a5c0afa5d09d541ce3b42aae6600a88fa85	n/a
2019-05-30	kuomhturn_812.exe	exe	5a8758f08a1d08f6c819d883c87e46f3e3310a39eefc2cd12671307658f09c95	33.33%
2019-05-30	bqoq_037971071.exe	exe	2928ce934df8369f06899ac9d1d94f5fc35cc66708825748922078162321b321	23.94%		Heodo
2019-05-30	z5fo1711lm_20192730.exe	exe	4764ec39155c325c1042604fc7b97630c62c1352b5150d610bf2e2e6237c31c4	n/a
2019-05-30	e_865.exe	exe	e49fe1fdae8452dd5fa43e5d5322e50912301557b8c256cabeca963155d28672	25.35%		Heodo