URLhaus Database

You are currently viewing the URLhaus database entry for http://www.metalgas.com.ar/wp-includes/2Ecobg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	2198901
URL:	http://www.metalgas.com.ar/wp-includes/2Ecobg/
URL Status:	Offline
Host:	www.metalgas.com.ar
Date added:	2022-05-17 07:04:15 UTC
Last online:	2022-08-30 23:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2022-05-17 07:05:18 UTC to abuse{at}hostmar[dot]com,abuse{at}dattatec[dot]com,pablo[dot]pepe{at}adinet[dot]com[dot]uy)
Takedown time:	3 months, 15 days, 16 hours, 28 minutes (down since 2022-08-30 23:33:40 UTC)
Tags:	dll emotet epoch4 heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2022-05-19	hBTNNtkC67.dll	dll	206a23a44c5805bd328c83aee79328199e745f2806acf22a87c22b84271dde08	n/a	Heodo
2022-05-19	HYUnDOycN2RAAmYWw3Vn3gUe3PB0gelUwLI.dll	dll	da80572c7b389f91c832febf5e69ef82db6f73943a8fd15ff8a332416101b163	n/a	Heodo
2022-05-19	qJyBRGI6k7v6Ui0x5pbUPGRQ4dbCn.dll	dll	82789f7be59bdaa59bbe6fed33d24feebaace352ba461033b1812bedfdde339a	n/a	Heodo
2022-05-19	g3ktfrYqnMBZLv6XuXD9teir.dll	dll	4073a9008388cbd96bb79bacbb744b2c80349b2d819bc4fad98ca477703348f2	n/a	Heodo
2022-05-19	wEnF1IxUWUuWcz.dll	dll	cd61409e23f3432965dc41d5cccecd51c066709d654719f4da1db2bb15e69d49	n/a	Heodo
2022-05-19	rRbEocU4f7ERF16jhO3TC.dll	dll	d75135b6d0b3822a253bcb9ede98df5a27fac6fd48d114139602d03c8ddbabd6	n/a	Heodo
2022-05-19	4zjOJKvdp4sksFgtlamvM4dZf4BzavvbZ.dll	dll	ff4c340e78d10d1fd1a7102de4bad0d3da08c005b9ab0adecee210a8ebba9ec7	n/a	Heodo
2022-05-19	4qB5jJbPZ1rHz6G7CQlCIvVGDm.dll	dll	106526a2f25329908d121a993ac4aafda0b08fc7cd41f7af4e6c8a146f975009	n/a	Heodo
2022-05-19	IIt8o8dc5gX4.dll	dll	e27d47f3ccca03181c75beadd3b880e206d7355396c5126b696dc3c79fc65b69	n/a	Heodo
2022-05-19	NE9atHZUjYp0p3iwEnSu.dll	dll	7c9d540566e55a7aec3c866ce34abc95cf1d1975d3466338843658f86693404c	n/a	Heodo
2022-05-19	Wy0lbFR3mqdV7HEnnWWp2nQ0I3.dll	dll	a3c9d130bc2e201bea26342c95f4658f6bdc4af8f9f88626f909aa4cd95ad7cc	n/a	Heodo
2022-05-19	b4UDOn22jzl.dll	dll	d3d28769c28792d850ca9a941d0ae61dffcf650d7fc697c319a53a3f6e1d0036	n/a	Heodo
2022-05-19	0EgtLdKKV141RBSuR8lmRwchDvC0.dll	dll	6af1b19f9ee5a9b894b3c2a6966c7ffa8d146c4431a05421c4990b05d50d939c	n/a	Heodo
2022-05-19	NkOqr7wLoR5EmAZAz199jj.dll	dll	4bb4cf08ae31ac5526f27a517ba3a64c4ef20d33affe33ceefa51e13c0e5adf5	n/a	Heodo
2022-05-19	9ExQlA.dll	dll	0d8325183210d859119562a26b9a2c61d74f07d36cbe7f29a31d3d29abe55675	16.42%	Heodo
2022-05-19	HHevlAGfxfQyshptIxYcwvCHGiRKc.dll	dll	4c0142ff7b581490998c6cc47100adf121987ed68d5ae6ce89c1f258c3acb9f7	16.18%	Heodo
2022-05-19	XClplKooJuFeexURx.dll	dll	e74a53b3a9266ae93c9e42528e8124014695f7d7a4afdbc5ca25ebc0ce207719	n/a	Heodo
2022-05-19	s5K8A58sBbI5IQBOETG5v9qKQ.dll	dll	dd235654116ac0c2957a9b9a10bb37cecc648e466b362abf0c16c31a29ecd317	n/a	Heodo
2022-05-17	gXm8lJalEoK.dll	dll	d3c5f3d36648827162ab79eacd13f5e911fb084879ae596435ab0c471c95fabb	n/a	Heodo
2022-05-17	sw5q59bzK9EBuXDlWyCpYi.dll	dll	48dae81aa1d2e76dc5f26125f419850baa304908e4d38a45fa29b7f9f0f96bae	n/a	Heodo
2022-05-17	ewWViesCQMflTy1da8ZZL.dll	dll	3eb7b4e88567f32284d5973167f73fee0babd3c268b252847d0b5146da0c29b6	n/a	Heodo
2022-05-17	O6LNyP4Wf49LFOh.dll	dll	25bc5cb2ca2cd50d9eadbae03e7a1e8b84425373fb9ed49e1c9494e7dd98070d	n/a	Heodo
2022-05-17	6srNt2ttabfxt7vdYclPQQDbP.dll	dll	664a1782c641c00b2e8bc7fdf4ccd437a12b33eaebe86b14c6e2f14e0d77478d	n/a	Heodo
2022-05-17	Ws6bRMxLaNDd.dll	dll	5ae696ef4b9a6b04c78fb13409adebd143dd3ec17f0a16d2fe498db6b8376335	n/a	Heodo
2022-05-17	nlRx7iirWwgoD8bYlzR.dll	dll	698625aa38dc2c381b96b2aec29014476c2ca1f69ce8d03545b471b2cac89407	n/a	Heodo
2022-05-17	hChfHTWpf0WvIuAMsrZABEivHQ.dll	dll	b47f79cab7ee952c9a92d8776d008fe61bc70c07c9c884b597f3df2c6f582dc5	n/a	Heodo
2022-05-17	HdfuYoocvSgvh1vGjMR.dll	dll	0f5c7fe33099c12c9485ecf1e781e2a5438031cb151e5fe7bde55a3e14e57f8f	n/a	Heodo
2022-05-17	phhIafPm9B5SBHvFFU7x.dll	dll	80951b25e0bd633e2d6e4ea5a6b8e1ad46aa7ffb4f3723bd8914af5c447301fd	n/a	Heodo
2022-05-17	bwtGDBkHa3pZEfwn.dll	dll	a3cb8db0a725137824e9a8806c9cfa9fe74aa231734c8ab23385bc9e565b18f7	n/a	Heodo
2022-05-17	prbEtIUJPy5pNBsE3feWeaY.dll	dll	c27cf206ed4823c00d579aa73c333c7eb8d8093f972307b5841e8fbb79551f67	n/a	Heodo
2022-05-17	JDVH1dbpLYFjDwqHhnuw7.dll	dll	dd902339f83fe8da9865e6f337a709c361a1b3337698f74bec56d1f43779e8f3	n/a	Heodo
2022-05-17	HOucQPaWrTZAlEy.dll	dll	413fce832966979bdb2af8e682e02e0713d1cec51a1d23556117a018b0c8af43	n/a	Heodo
2022-05-17	IVUWdey4NG7dNPHFTjSK.dll	dll	b994322beb9d6f16f54b73f2b734d3d1fe94d1a401343ea57a54f36a068fc26c	n/a	Heodo
2022-05-17	v5kBrTI8ixZcsyX.dll	dll	aa9289a4004b4a46323b52305826088e5db5c110dbfc2aee7699fc034e80e053	n/a	Heodo
2022-05-17	SgAvZuBcrRmdI6.dll	dll	d52dc453c875dbbe9c51c5b394ae503451d2160910de706e29717ca2e7a6d1c9	n/a	Heodo
2022-05-17	rPZIMOHV5aXm4iTp.dll	dll	b686a84504682214b9970a8f09ec8d004bbf19efa165af851582bbdaa7caf6e4	n/a	Heodo
2022-05-17	AaMdZ8s4KxJKdtzbp3q6rro.dll	dll	ae25f4afbbd12ec28eecdff45ae177f4aab0fb3ca1c3f8f7fe8f8d2e292599b6	n/a	Heodo
2022-05-17	MZ4SXHt.dll	dll	2128c0a730a4e6df07bef8cf82b6d63a58660bff40e7883167ffa29602cf2523	n/a	Heodo
2022-05-17	ijsUa3.dll	dll	50187d54253d0a44d7661e2a18e8f787fa83a0751ded23b93f096b94bb10a313	n/a	Heodo
2022-05-17	oBHydcAdzNMtGAwwrbjU2c.dll	dll	f232faee725602817debfedfed4c38b4dc4a9a39128768885b083103e95aae7a	n/a	Heodo
2022-05-17	Vzbrll9JRk8yUB2pUXAr6s8PeD.dll	dll	976dfe90cd3b9d4030eee50d965d073aba7687e4d28f12fa258fb901f804e86c	n/a	Heodo
2022-05-17	aaOZjR39EoYL.dll	dll	fb1941c83d52248dbe969531538ef73fcdea361570ae1ba21d35882f3f0c59ad	n/a	Heodo
2022-05-17	L8FmdxsOjXyxqT45.dll	dll	2abaea28a40645075fc01232ca3d49ccfe12542b0e08c477056ff7f421f10ea0	n/a	Heodo
2022-05-17	OrhDJNBY16WBW1.dll	dll	df4e1118a5bd9392059254135e4c8b4a73af3c90d4ea03fc1ed3530c3f04ea67	n/a	Heodo
2022-05-17	zZ1o0U2XH43RfR00Nj.dll	dll	760335078225c9a61fd50f2d8b9995dffa3718ac60f2f4ae54bf0e0c244906d4	n/a	Heodo
2022-05-17	OODKmNb.dll	dll	25804825cdd1a9f09dd461e275421d84ef8fea152fc64243e882b74c925faf7e	n/a	Heodo
2022-05-17	5BTkL0TG8Ls4yTksd0L7e1dZA.dll	dll	cef92e65beb02fb87352310ca7bc7a2c725754b05e284eb2b5dcda3580cac6ae	n/a	Heodo
2022-05-17	NnODtVyIdlEAT3G3DBSmKnqwFkZVzKB.dll	dll	55d5df25ec2ae44fd2f5df7bdca21c6c8699d624943598756027bdac92b53cd0	n/a	Heodo
2022-05-17	YB7KpjK5wnt5H1.dll	dll	5a98c588595d3dc2ca7c723021001d769c966a953dd4041e4c7e26fb6da20782	n/a	Heodo
2022-05-17	iDNrK47LwwiCNF2xiNfRq.dll	dll	ec4f1f1792662ede7f0253994b1e33693bc2b39bc1cb3f309b5808d32f939c5f	13.64%	Heodo
2022-05-17	2Llu7vDNd.dll	dll	fa774d59638c6669ba754f2287439aee52ef6cdc8f91a9c7be5b231a852c354c	n/a	Heodo
2022-05-17	Gz89PoS1N3W8dEC.dll	dll	b69189ae15a28edee71a112453ffaa1b4c71217ecfed76d64446d20106d9052a	n/a	Heodo
2022-05-17	Z0sKVA9cP4N0XVfvaUTeX.dll	dll	ed525aea4cdf881ccbd8cdbaf64de4be7192248c009c4d310acc57308791f1e6	n/a	Heodo
2022-05-17	nXMu6TUg7lnu.dll	dll	e8cad4eccb1b38af24c66563661cf9d85caeb23d035e68eb2d05105253c12d9f	n/a	Heodo
2022-05-17	scyGiuFMef.dll	dll	53eb8f467283763b4fdd468932a9d7ead31f7a6c37159680b8bd9ee6cb93de00	n/a	Heodo
2022-05-17	i9S3H5r9qecaqnuxqX6cm82JeIKJkS.dll	dll	0815cf8c1b4adcf980b1a2939cecf49a64b922931baba2e4794ea071a5fff552	n/a	Heodo