URLhaus Database

You are currently viewing the URLhaus database entry for http://osyron.com/css/yASnV04o/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	267984
URL:	http://osyron.com/css/yASnV04o/
URL Status:	Offline
Host:	osyron.com
Date added:	2019-12-13 00:18:07 UTC
Last online:	2019-12-16 01:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-12-13 00:20:03 UTC to netops{at}singlehop[dot]com)
Takedown time:	3 days, 1 hours, 28 minutes (down since 2019-12-16 01:48:21 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-12-14	5H08z3Oxm4Uex0l8.exe	exe	4c37faf152f719f4c9c8535b1df89e1d036b1553b68c1ca317075dbfb7815eb1	20.83%	Heodo
2019-12-14	SRKkzLMP.exe	exe	bdd309e09e8ea4499052ffb24eefee4e18302c8b5fc25e1c62c638bba0998bcc	18.06%	Heodo
2019-12-14	LtirOwFR.exe	exe	f097fa22bcb7e1164b575f339db9777077084595ca85fff0a96bbad3b2f3fd94	43.06%	Heodo
2019-12-14	mC0.exe	exe	6f3c172a0fc3a5c3f4626fc4ac2b09f1df71d54ad89a10f10656fb3a9dce2fe4	19.44%	Heodo
2019-12-14	i7dS9tzcsEhrMq0e.exe	exe	b25c352aeedfe4e1d9d320bc137735efe9333c632e839eb347f0a1f5a99dccda	15.49%	Heodo
2019-12-14	te.exe	exe	c9cca01782369a5f3b391a9a6e77b560d9e73b7819a398f91882cf86b9fafee7	15.49%	Heodo
2019-12-14	DR.exe	exe	181a79a35af190ce05e5bac09e23d8670c247db0b55f465ff2af8c834e984ed6	19.44%	Heodo
2019-12-14	B5ydi.exe	exe	befd9fa4f8c02701387397d61fa9a1a5e4a555783fd7f1416e37790a66a8bcb3	16.90%	Heodo
2019-12-13	G.exe	exe	51fa2da211b25dfa56b759c79d7b52c4615b3f4beebcde07a49ba3d4776062c8	18.06%	Heodo
2019-12-13	cWxxjJkTphJ4PTGhjKC.exe	exe	21556b2d910de92eee35636dd5e5b04935525ddbc544f2f632ac3b1d5acbeeb6	16.67%	Heodo
2019-12-13	aDLRybHaQUVV3Jq.exe	exe	3abe9af7c1d0f06477ed3d68081cec884cb792316c676b346a83014cd990942c	10.14%	Heodo
2019-12-13	16jy9KXw2vrk2Oaa.exe	exe	6cc2a126b3bc3dc955f8d7f93aa12d03acf034b86051073ea8356e14aaa0bc51	9.86%	Heodo
2019-12-13	fh.exe	exe	0df2136505ce6b07a5f09b69bc9eb377e3306e75e5124b9056c10666a3258319	n/a	Heodo
2019-12-13	J9ITjGUj.exe	exe	6f65c3773b031f0aa512fa527da8e004a3c9694ae5ad3890ca0c6c791b6a61a9	8.45%	Heodo
2019-12-13	2ABVssQthglaN.exe	exe	8c6cbd92b48db1f7414c2bcb5aaa2403b37ce273a53483add52edfff52f959f6	11.11%	Heodo
2019-12-13	0.exe	exe	fef2252679aa0810b38c2a0bb28f86e7a59a22811ca5dadd8e982688ea70b2b4	12.50%	Heodo
2019-12-13	K5HbI3j0Ss47O.exe	exe	f8fe29f7411d466c75e5057bc341c958e6bc4895338f9cb67dcea1ac31d33239	9.72%	Heodo
2019-12-13	Q.exe	exe	101cec8651d14aca503afd3f061f791fd1add0b3aa699a738f7c3e0cdc6ad110	n/a	Heodo
2019-12-13	eLuj295KKH.exe	exe	0be549352e264c4aebca790a05294684f11ba46b3260cb20b67cfae925634b4a	19.72%	Heodo
2019-12-13	vM.exe	exe	895911bcda82bdaf662c9563c5d5fc9ef16eefc2d4bfacb45803faf728ed8824	n/a	Heodo
2019-12-13	b.exe	exe	38f321e1d7367a1002f53d162279135440272af848efe75a6aab71f299599eb2	11.11%	Heodo
2019-12-13	Nk.exe	exe	a1fc8e140dfd5d46b9bdf53cb516cb2aa2ec84bdb29290b5cfea4bbccadd6326	9.72%	Heodo
2019-12-13	HkVg7.exe	exe	022c139f821927a8f9180689ce0a0ad1a38763cdf20254eb56b41db0c8bc5b8a	n/a	Heodo
2019-12-13	YeTrWUBHBCQG4VB8UvCp.exe	exe	e19158e6d8c78cd831df154b5fb36a779a033925be47374d16f59011617aad64	9.86%	Heodo
2019-12-13	U.exe	exe	252710721d1afbd063cd00a940827c2ce003b6859358847b67521dcd51076ab4	n/a	Heodo