URLhaus Database

You are currently viewing the URLhaus database entry for http://rocketbagger.com/0iayq/7m39842/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:245138
URL: http://rocketbagger.com/0iayq/7m39842/
URL Status:Offline
Host: rocketbagger.com
Date added:2019-10-15 17:27:14 UTC
Last online:2019-12-12 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002013283 created on 2019-10-15 17:28:05 UTC)
Takedown time:1 month, 27 days, 13 hours, 53 minutes Bad (down since 2019-12-12 07:21:41 UTC)
Tags:emotet link epoch1 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-11-30n/ahtml 411840419bc6948956e10d549a55797a0618cb936915fa09ae014b7dacacc06an/a 
2019-10-16toc26aix.exeexe 9adce19fb00715bb64552e54796e9bec193abf3a84db92c67578158839e53373Virustotal results 1.43% Heodo
2019-10-16dwipooy6f.exeexe 58977bb211c036dbdd3ca821e6a76b6225aaa30382438dcc2de7843e685e3b3dVirustotal results 1.43% Heodo
2019-10-16rlvf8qdfk.exeexe 11f9207a18156c349d2f237639caea7a3aa77f2907620c9e8d959ef4e20f05ceVirustotal results 0.00% Heodo
2019-10-16vt6gqi8voi.exeexe a2627e9dcc3399f4c3c2079ef208e90c32d8f2c1eb0be9076d56f79dfd9e0945Virustotal results 0.00% Heodo
2019-10-16f0841iiacxqyu.exeexe 279528c7d30318ff4d2b6633490ca457715f873f7a442b7991344dd7a7819e1aVirustotal results 0.00% Heodo
2019-10-16znwddv6gwtcnka.exeexe fb0a0f10cbebefb5dbe6034c3bdfe246179e444c68a6e36c4d20232d52fc07a7Virustotal results 10.00% Heodo
2019-10-16vdv535de.exeexe e760fc0b42582d93198e24a1eb9f335eee399ed61e04255cdec3b3edded2abfcVirustotal results 14.49% Heodo
2019-10-16zcunq5jdxoho9.exeexe 3b84df99ab9980cfb87380d48f8819bd217eea2553e3e3d2a2942ab35a1688e0Virustotal results 7.35% Heodo
2019-10-15lgv7g.exeexe 908619a387352495ff2ea2d8e46c70aa1e390dd5f6a87e5898d5eb146e30cf85Virustotal results 5.97% Heodo
2019-10-158r4mwcvtesu8vj8.exeexe 4ccb4e885119ed8356f145caa1856f0b617701c6fe85e2523a499ca4e2959da2Virustotal results 7.14% Heodo