URLhaus Database

You are currently viewing the URLhaus database entry for http://www.dilandilan.com/wp-admin/l4zy_lntjocgxg-769120353/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:236894
URL: http://www.dilandilan.com/wp-admin/l4zy_lntjocgxg-769120353/
URL Status:Offline
Host: www.dilandilan.com
Date added:2019-10-02 07:05:03 UTC
Last online:2020-04-02 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2019-10-02 07:06:11 UTC to abuse{at}guzel[dot]net[dot]tr)
Takedown time:6 months, 3 days, 11 hours, 8 minutes Bad (down since 2020-04-02 18:14:20 UTC)
Tags:emotet link epoch2 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-10-04b5yc8ek_102.exeexe f0ac854808ef5855438fc02b394222d79acf637b5413a7b13c0af185c8d6805aVirustotal results 40.00%Heodo
2019-10-032y_775833999.exeexe 62c44e24519a249ef3903e8a119845985886532ef8066a3af963ca113944ecefVirustotal results 4.29% Heodo
2019-10-030_1154441.exeexe 1064c5d678d7aa358ce5872c74f156fe4bdde53679278a269467a951529c4480Virustotal results 7.14%Heodo
2019-10-029iym_195134.exeexe 8ca89a042cd42ae1f49533836724d081e337858f528b2daa531396fb9fbf9eb2Virustotal results 5.71% Heodo
2019-10-02t4dsijd3_017.exeexe f7591c6c0b2f3cdeec2c18f0122c4a485a29b6851e7bde68a76170ed236bf448Virustotal results 5.63% Heodo
2019-10-026wum_6.exeexe 4ba303cd51be7588cb1aefee98170dc1218d3a35a08cd420ae82ecd8ff247f6cVirustotal results 12.86% Heodo
2019-10-023gll_6205.exeexe 3c3fec3cef9506c1e7d333a079384baa19b70f6ed56ec2f51485682543ac1235Virustotal results 7.14% Heodo
2019-10-024ac_8056461.exeexe fc771e698b0f41c2c705a4f15d4cde5b4a37c51d7aba18c7de05a75d4f0398fcVirustotal results 0.00% Heodo
2019-10-029c_53.exeexe 81a1c73892b82e3cebe4c203280b00e34e4a1a87a28946e778a2b4c589a6365cVirustotal results 31.43%