URLhaus Database

You are currently viewing the URLhaus database entry for http://dobrebidlo.cz/cgi-bin/JtTDLyOOz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:242106
URL: http://dobrebidlo.cz/cgi-bin/JtTDLyOOz/
URL Status:Offline
Host: dobrebidlo.cz
Date added:2019-10-09 16:59:46 UTC
Last online:2020-02-16 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-10-09 17:10:05 UTC to abuse{at}forpsi[dot]com)
Takedown time:4 months, 10 days, 3 hours, 1 minutes Bad (down since 2020-02-16 20:11:35 UTC)
Tags:emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-02FYJanu6.exeexe 145847120d077904887c0c4a0dc0868fd94ded874cf0b8f666609f57c7045786n/a 
2020-01-02FYJanu6.exeexe 7d95cfc95eefa43338464ff88ec247d2b27d47ecdff95084bcf2ac14fbf60417n/a 
2019-10-1098Sk5AHfQL3832048.exeexe 4dc93b3587ef77f8ad79d70d5b62e6af508bb0dae578f8d691b10cee1c9c6b98Virustotal results 4.76% Heodo
2019-10-10k4sc_570.exeexe 93af2091e89c55ff7358968dc363e0c4db34d770d07a375c00c436dbcb8fe911Virustotal results 12.90% Heodo
2019-10-10wru5e4_7266.exeexe c16b037770de8e203fd61532daf379889933d310d45d9502675c6faa3ac6ad70Virustotal results 10.14% Heodo
2019-10-10qc05w1ru7_9.exeexe 079abae48ab8953e193dfc9164a5e445631fa480fb7d5c7065dea99049e3d51dVirustotal results 8.06% Heodo
2019-10-107fv1bormd_2723.exeexe 51737bdc870897dabde0fc132e4393c125bc7ebb8f72f4efd1b3530fa3d95d23Virustotal results 10.00% Heodo
2019-10-107i_82.exeexe 7921e0e1f73e08021aa0648c408f236cdc483fb187d19e7a5651c08f05d9dd3bVirustotal results 11.86% Heodo
2019-10-10g23j_721951.exeexe d17998dfa4f23b11b50c0b84dcebae08c912bc5d00079ce83d2f54114a734ceaVirustotal results 4.23% Heodo
2019-10-107_2155.exeexe d0ce7284573bd0b16c06d34bdfcd6c1960738c0e8e39a6327c178523ce412f44n/a Heodo
2019-10-10pjxo2qx_20970.exeexe 9ebb7f528634bc0e26806b9558c0f2958f118f14eea21a2e1148f943508d1446Virustotal results 27.94% Heodo
2019-10-10isl_7999.exeexe d144da1fd4cfce2614d6ff1ce04a235f3399b315a9138d33b2f72ce7f254d315Virustotal results 21.43% Heodo
2019-10-10t_4585276.exeexe 0ceb1ab2bc03b840c03b5fcaba8397ee8d0f3877b73fff22e7bc50ab5c596821Virustotal results 8.45% Heodo
2019-10-10qb_8612.exeexe 205e75b54f67ac0d99445adde7a91e94c56cfb5c4995878327027159f5562027Virustotal results 10.29% Heodo
2019-10-09kdpxxrbd0k_68370675.exeexe db9ab62920e6a46ca2ed59de12132eb16c5c6205f3328a4d5a26cb52ae298ebbVirustotal results 7.14% Heodo
2019-10-09z1eozjd_0823765427.exeexe 6d68d21a0635b1bbe2335d4e2cb3e34c8a0d69e320725849465ac3a5ab11b31eVirustotal results 8.70% Heodo
2019-10-09e_9370.exeexe ee35b43c9bf1a9c24ab983a470e1cf5eb9508c741df45f5829c8d918a771b584Virustotal results 7.14% Heodo
2019-10-09e4rleofmc_1.exeexe 4a98c1b48e25ed7a590d7fc89d65e07e40896e90c7977658c3bfcd8da7392181Virustotal results 10.14% Heodo
2019-10-09yl6y6_2666.exeexe 3251a00155619dd1ba363b7fe477dab326fe791d2135129d3133c0cb716dd58bVirustotal results 14.29% Heodo