URLhaus Database

You are currently viewing the URLhaus database entry for http://deredia.com/cgi-bin/cbas/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:243807
URL: http://deredia.com/cgi-bin/cbas/
URL Status:Offline
Host: deredia.com
Date added:2019-10-11 12:59:23 UTC
Last online:2019-10-13 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-10-11 13:00:05 UTC to abuse{at}unifiedlayer[dot]com)
Takedown time:2 days, 0 hours, 16 minutes Poor (down since 2019-10-13 13:16:45 UTC)
Tags:emotet link epoch2 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-10-13wM9.exeexe a4532a333319600efa847ac6b63b58e855838df70063ceeb58d605f81d223922Virustotal results 1.43% Heodo
2019-10-12q12.exeexe de6a8b8612b5236a18eea1a6a8f53e117d046cf2ad95e079a6715af68f8d2216Virustotal results 5.80% Heodo
2019-10-11S1.exeexe b324c3f1d846f5074cbd93d571bb318be73f452ce3ede02a2e60ffab5a2c25c8Virustotal results 7.25% Heodo
2019-10-11Xx45EI5527756.exeexe b6658cfde96c4e49b1b1abd9e0092cc216b0f081335a9832dfc9cfb67f15484dn/a Heodo
2019-10-11xprb3h169.exeexe 9b798802fb47f53b07558c494b9163c839a07a3f8814c418c4059f9bfbcbe010Virustotal results 4.48% Heodo
2019-10-11pabdNA26z864101.exeexe 827fdbf68fcad346635cbe27c6fe3dba63f02a176e9238a0b7cf717c46890ebcVirustotal results 11.59% Heodo
2019-10-11WxiE253375.exeexe 9352f33597815aed4ff9832521e28d736b5b90516509c597d3ea6eff06baf522n/a Heodo
2019-10-11WlSNTW2526344799.exeexe 606b1b5c0f7f6b0b31825ef8d2271727c274fc8c50beada611daa47e35a10792Virustotal results 14.29% Heodo
2019-10-1153667.exeexe 72bf2eb295e2b41ce57c07aca7b4bb2721116a47c74fd119beff3a7e04820a18Virustotal results 7.25% Heodo
2019-10-11h4233879170.exeexe 2a14adedb8f75aa65e9ab044b5bd259822ee6158de6833ec8f8ba5b7a29e9fbeVirustotal results 7.58% Heodo