URLhaus Database

You are currently viewing the URLhaus database entry for http://farschid.de/verkaufsberater_service/uADJw/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2164668
URL: http://farschid.de/verkaufsberater_service/uADJw/
URL Status:flame Online (spreading malware for 3 years, 7 months, 16 days, 1 hours, 9 minutes)
Host: farschid.de
Date added:2022-04-26 08:59:03 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-04-26 09:00:09 UTC to abuse{at}strato[dot]de)
Tags:dll emotet link epoch4 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-04-28ismiKPMhGKBCudRopj5q.dlldll e05243ec70891d75bbd33d5ac93a6a4f40adcd1d0f9e3e6f8a9cc2331b5c11c6Virustotal results 13.43%Heodo
2022-04-27Ni5INtaoRwkR.dlldll b481ac05ea9a59eedf6233166327057279babef26c913a8e89536472b192e86cn/aHeodo
2022-04-26OFpbhuX1dwwuFzTio9Qdp0lxZ5.dlldll 6bdac750fd1885696ffaf5dd38806c8f7bff2c8bc706421c9b4f0c2b0a9d8520Virustotal results 8.96%Heodo
2022-04-26oD9D4qiMomwn.dlldll e64c5c1068cdf1b641f109286f3d9e7db776514e4398d350ae66c1deb909bb6en/a Heodo
2022-04-26euDTaa8QJYb2h.dlldll 83884493b871d3e131c67bf7a661663bd8c29ca8662f4cbef22156d8b50e76f8Virustotal results 22.06% Heodo
2022-04-26OmzHucIBKwH53R.dlldll a5bf70f121d2ad8641dea65ce844fc1f5caa3a3fa507e66f600b5c91e9fdfb91n/a Heodo
2022-04-26YPGNggkDY089axUauoY1Xc6lwCofe.dlldll 772563eb30e7cb2cee3c289190c4d6449fc5d67f40d08d8c20bb78eaa3755fd7Virustotal results 17.65% Heodo
2022-04-26VgUi9W3Aq660gvkF7EJLrtmYEVirYcy9TU.dlldll ebb6123f4517cd654a809e177a6e41c86a87cc264537d364c29f19b001d6f0deVirustotal results 16.42% Heodo
2022-04-26wNdWvwTw0OWknhYBWXqR.dlldll 901160eb8a398e813bc6cab30e104ffec25091bd7daa7f49701135bfa069e8b5Virustotal results 17.65%Heodo
2022-04-26KYran0tAPhlXbeTgzN2nwXeaj.dlldll 82270e74dff52ef8b214ec4191ed43d36f42945bccae1174c5acf68fd7dbeda9n/a Heodo
2022-04-26rSwvJvPlToR8zs.dlldll 6dab4e930d0341e9f5eed1b7be96e8ea26fed61974d5150e8fe938b72cbc2392Virustotal results 17.19% Heodo
2022-04-26wBnNHFBoQqTcmRUWb7.dlldll 168c8e57e92cc98d0a0da2518792502c6f69b468d9b23bb355d7a2fe0e670744Virustotal results 17.65%Heodo
2022-04-26aUq1K16J6NRs.dlldll efc8b5250e39051662aa78f9ec6e001701d8e0bd761f88f9b55a6cc92fd173cfVirustotal results 17.91% Heodo
2022-04-26PBxDJEJ8o6hAv8QqhQe.dlldll 7175da502a843222bbfb0f147add9881f6a92a846730b83f356ab573f6185eccVirustotal results 16.18% Heodo
2022-04-26ycrjZky4jPWtRT5dS1oZVhoax2PtuD2xjuV.dlldll 2728f1e99cbc08b3010857e4880787a23dee6c02e7fdb21fc27f5963a871992fn/a Heodo