URLhaus Database

You are currently viewing the URLhaus database entry for http://blog.yst.global/wp-content/languages/2jlffy/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	244870
URL:	http://blog.yst.global/wp-content/languages/2jlffy/
URL Status:	Offline
Host:	blog.yst.global
Date added:	2019-10-15 07:25:15 UTC
Last online:	2019-10-21 07:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	abuse_ch
Abuse complaint sent (?):	Yes (2019-10-15 07:26:02 UTC to ipas{at}cnnic[dot]cn)
Takedown time:	6 days, 0 hours, 2 minutes (down since 2019-10-21 07:28:18 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-10-17	ucz431495866.exe	exe	5a6db057d7bd551cfe5932c83e899556c2f0a746cbfd8c946f4cc69fcc188efb	2.90%	Heodo
2019-10-17	b4pgaaiawm3195.exe	exe	102b934e2a311a4ee8e84118cb1900a6d412bc40787094a5519aca131a0c5ad6	11.27%	Heodo
2019-10-17	upir155862.exe	exe	7537350e4b0376eabc4f83c5fad42a9f2bc509f68dce1d0f7f150ef6c515883f	n/a	Heodo
2019-10-17	w9.exe	exe	80647d075b8de1f6554759a01cfc4030c6ed14814277328a4e8707202d109956	5.63%	Heodo
2019-10-17	h2s6xq1.exe	exe	c8f5bfd038088da96af341813e29553a7b719296df1a55bc01e5f922164bb4a7	7.04%	Heodo
2019-10-17	6qm2hmm17504495.exe	exe	4b58c4ea81deaa87adb481f436d5d31523f971f457e6a41f6becb5fd39c4f2bf	5.63%	Heodo
2019-10-17	cg2cid2113.exe	exe	2f061359647c10323d0655bfeb3645942dc0fd66517d3fdf02905444b7239079	7.14%	Heodo
2019-10-17	cyqw8l7d3401.exe	exe	563e4a9c9a917e80688e73c3d8146d7c12aa2d5caf1e836599ffd7512b23e0bb	5.71%	Heodo
2019-10-17	hium99tn47.exe	exe	919a1dab9edf36017431963fdf69dfba0968fa843eec8d0a8c08fde47f998c17	4.35%	Heodo
2019-10-16	WcPj232.exe	exe	7c9218030c00550eca49d41c94325f5e8d43b3543927f49a6f3bd75cf9296680	5.71%	Heodo
2019-10-16	xL27.exe	exe	8c00a1b594d352f793ecb8f7e9675502085f9a8579e36306567237c6b2741acc	2.90%	Heodo
2019-10-16	K011.exe	exe	4cf8d6cddbcf10823dcb836cd7632b7daac5f59b6fc7f7ae07221359c51d05da	2.86%	Heodo
2019-10-16	WWvkK1gfoY048.exe	exe	fe2dd10d4b70a41002108f3380c31f92ce82bc7a1437c19eb6c4846b54530936	n/a	Heodo
2019-10-16	Byi6253311.exe	exe	9576e7ca220c27f681b86b7708bb3a77e5df0555e984b863894b1e9e00bf6032	2.90%	Heodo
2019-10-16	A53.exe	exe	cca5b2130c667d8b930b10031f2aba279584ad493987dbc16b94ee2177c3b54d	2.94%	Heodo
2019-10-16	HU454171.exe	exe	d0798de6a98efa6664d4e9dbdd9ce79a86d3eba6a5fa42e031eec52408ccbbf8	1.43%	Heodo
2019-10-16	h0786.exe	exe	ebc69d24302d9f9262b4d07cd4022317358009156651555af9ae7e5a80ab151d	1.45%	Heodo
2019-10-16	xwQIaY2258.exe	exe	277ba7c1dec46ee4af68163291620364ed6774fdabec562641ded11dda8bdb85	0.00%	Heodo
2019-10-16	sAin0F6uK5007472112.exe	exe	ef6af0844b3321c71024845188ddf305dabe6be2445be86eefacaaa942837e6d	0.00%	Heodo
2019-10-16	OYChF124116.exe	exe	8482ec884e39ba88dc0fc76ba8e81c553f0e4572c4360540c6582bfa8a368226	10.14%	Heodo
2019-10-16	b997163550.exe	exe	5f57806615245c072c1930ac74a311cb536cfed7bf8570389f7f9ae6cac61a40	12.86%	Heodo
2019-10-16	IDa5KlaPli564064576.exe	exe	8eb78f57619a173819ea9ef22dbebdf89bb7b0497c29eb6e3f0c72413049cac7	5.97%	Heodo
2019-10-15	QTP821570449.exe	exe	deca3be654504d28d58507d7d847b1bb35c9d23535c008ef7ce27d9ad1a23f5f	4.29%	Heodo
2019-10-15	KynfgFF5134.exe	exe	88cb9fee414906e4d55a82c4c3564bb1181072683db1c3f0e9820090a6f40072	8.70%	Heodo
2019-10-15	RBmzTT040150.exe	exe	6de788187b9a790f0a378b94f02582e1453d4f77f5ac4c742c7ffc4bef0ea157	10.00%	Heodo
2019-10-15	GCsjS063.exe	exe	455ef6d0b604616a90a98f66c763d393267e97ab85134e328db164c7f2ba7a03	10.00%	Heodo
2019-10-15	TdGunm5vxi99287.exe	exe	0897d9a44d1aa4b7afe9a3fda15c54d9062ca988c31201386fea03838734e7f2	4.35%	Heodo
2019-10-15	2j50234071.exe	exe	8245d6840bde1c3d2fad9999d01e33702d237f6aed4b45d5ffbc9eca54e76309	5.80%	Heodo
2019-10-15	NtY951899.exe	exe	18235ac8c4482d9c0ca96be91ed18cbc601fa793f03d1820d8ffe492d6ff42ec	37.68%	Heodo