URLhaus Database

You are currently viewing the URLhaus database entry for https://navinfamilywines.com/alloldfiles.zip/ds6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	258371
URL:	https://navinfamilywines.com/alloldfiles.zip/ds6/
URL Status:	Offline
Host:	navinfamilywines.com
Date added:	2019-11-26 07:58:14 UTC
Last online:	2020-02-28 15:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-11-26 08:00:09 UTC to admin{at}internetnamesforbusiness[dot]com)
Takedown time:	3 months, 4 days, 7 hours, 37 minutes (down since 2020-02-28 15:37:45 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-11-28	ibvbhxxgtc2il1p.exe	exe	be84e04af6570d70028461e9003d5cb7944d96fcbb5a003c059af6b263cd7866	27.94%
2019-11-28	dggww6yhw6.exe	exe	46983bc25b3c516538fd8b42efea62a42da33a8beb505428edc28e66562e6771	21.43%
2019-11-28	yzr6ak5za9nkaog.exe	exe	f3a3ae669fca5868f4d9204f53c109e4dae068c4b52c0ae567c1446f6b551306	n/a
2019-11-28	dgv1ywse83vh4ns.exe	exe	6c8e892520d231cfd1ae188dfa7d7c7114e0c827fb1aaeb6d2b258d6e7d43f41	n/a
2019-11-28	u43oq7ulbm32.exe	exe	0b6474b1d5a5fd0f80ac23b120c9dda90a09ad6e271629d9ed0efca1b52be798	14.49%
2019-11-28	breh2cgunea9c.exe	exe	bba97d08fccb583e1f378bd63ca5f35dfe857f0e18f97cedde66276f30abf134	14.71%
2019-11-28	jkfset6625z4jlx.exe	exe	796ffa84f67bcd3488e84977c129f9d7324cc65c5ccdb9a43280d3f230ccb752	n/a
2019-11-27	beb19.exe	exe	af09a07b23f9679d6e44fd53f3d5bec357a98ff1621ab489d55bf74c70ce91ae	n/a
2019-11-27	525412nq77q9wfr.exe	exe	50302deb484dc4d98f092bea34ced538c6003b45a51e3e3fe84ab28154cc6834	n/a
2019-11-27	8jmozvzcz710ls.exe	exe	788474841de39846a24f3882041021b9e154afcbd5a23b66c92e69cbf06bd5cf	5.80%
2019-11-27	0q3aw.exe	exe	d50ccb68deaebfbfcee2d5073c41ea106d431291b94fe0e2bcab354c46e9f929	7.46%
2019-11-27	8nw8eeefhr5.exe	exe	f8e0681881c81dbe9afdd2fc79337f54e18f83dbe524082298dc808d9d6ff8ce	11.59%
2019-11-27	qoq2cpgbfwc.exe	exe	9ae58527d157e5e1397749a21226586c08ecbfdf1242d4e7517edac2e9a643e6	5.88%
2019-11-27	mqk234o.exe	exe	90074e67ea1adbb8d591a7a9505ce73a94693e3bb8121e1840c76e69f87840c8	8.70%
2019-11-27	la1jld5b8b.exe	exe	9136d2d11ec7ad188bad42a129b8c1caa5b27dfdae813654ced01cb4a1f9cd15	4.35%
2019-11-27	xlvhe33jrm.exe	exe	4c0330ba61df053186f88b5fc4d6e603205a2715688a8a33576f22315626e34d	5.71%
2019-11-27	e17hruaffhtr.exe	exe	79b6a63260f7069090e0cfa47e73d9b59c46c04f0b9108c407f826e1466d35e5	13.04%	Heodo
2019-11-27	nhfm4.exe	exe	2f736a1e9dac3b540863ffa77ab8b630cbf240afcf3fae2dce5eece0428a747c	n/a	Heodo
2019-11-27	eiucbjbb97pxw.exe	exe	90381a3c7336a15198e01ccd94da96cfbd016377073e01fd13dafc25a91caa15	n/a	Heodo
2019-11-27	yc8dos.exe	exe	1681cd8014caf0fbce07a775f38e40c301e10e3d5a2c714c86f0ed1ee2c3e6cb	8.70%	Heodo
2019-11-27	ewk2nd.exe	exe	f97937d94839d261641ab68b23c71ca78b2c81ddc83528b7e729911e90241629	8.82%	Heodo
2019-11-27	irrsy.exe	exe	123e00a6e02215405efc48f70c4168ee7c002f0be696682f6cb476177b83983f	n/a	Heodo
2019-11-26	wptb8t2t6e.exe	exe	1ef3441aa185fa9e49b4c38cbe2248902b7cf411564c5b09a3684a0e997af770	8.57%	Heodo
2019-11-26	zslsmgn8vnzi1.exe	exe	6c731f66d5465cd9c065fd15e2c4fc3398260009bf8e7cb770888c75c05334b9	11.59%	Heodo
2019-11-26	k8iirv4d.exe	exe	8a923b995c287ea57ffb00bd4242423a918817e9473eccae7c2dfa5f8362a4c2	n/a	Heodo
2019-11-26	4r2dvipg30.exe	exe	b3910d15d6b5327dc7e0f5ba3d40679e7337a964914c33d71c3d9ed25286f82f	n/a	Heodo
2019-11-26	8ttzayw7.exe	exe	4102b6cc68d12965be6c11f10640d1c702d8d2503dd0379ff3b90cd97a4db702	21.43%	Heodo
2019-11-26	vf6n6.exe	exe	e7f2e72541a1357b61e915290d476bb16914f9f78bc6ccf72a363e3b68857c5c	24.29%	Heodo
2019-11-26	5lvvv32ftgk.exe	exe	3002fb77627616b28953d056db2fcc513a0094fadb3bfabf7b11a8359f22c767	12.86%	Heodo
2019-11-26	sucbfidns9.exe	exe	2b5240f0a525b2ed967baa058a53fc33423a9037c57c55fea8cb2522a057c6d2	n/a	Heodo
2019-11-26	kebvrmrx.exe	exe	2ae2ad8861f94112a980ce517aa103d974e8597d002663c3053e11b6be566dee	n/a
2019-11-26	5yrsbge.exe	exe	46e8372ee460296f61d412b2996873ac9df10e44cbad1f50496bbf9549a4e4e2	n/a	Heodo
2019-11-26	93ii52f75j.exe	exe	2f5a32596076cbe9e2c25d718639b0f59215c9041d4d88c2bb5109db45b6c970	n/a	Heodo