URLhaus Database

You are currently viewing the URLhaus database entry for http://generalpro.com/_private/a/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:268217
URL: http://generalpro.com/_private/a/
URL Status:Offline
Host: generalpro.com
Date added:2019-12-13 10:14:15 UTC
Last online:2019-12-18 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-12-13 10:16:09 UTC to abuse{at}uk2group[dot]com)
Takedown time:4 days, 21 hours, 10 minutes Bad (down since 2019-12-18 07:26:47 UTC)
Tags:emotet link epoch2 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-147tJGMb.exeexe c9cca01782369a5f3b391a9a6e77b560d9e73b7819a398f91882cf86b9fafee7Virustotal results 15.49% Heodo
2019-12-14PDpjVj.exeexe befd9fa4f8c02701387397d61fa9a1a5e4a555783fd7f1416e37790a66a8bcb3Virustotal results 16.90% Heodo
2019-12-14GihOPzglZaACgVt9b9.exeexe 10d00fa6ecd1746acb0415e2fafdee40f810aaac9926770d544ebb6ae163081eVirustotal results 20.83% Heodo
2019-12-14yhElaWxn0FtjZkkafGz.exeexe 6f3c172a0fc3a5c3f4626fc4ac2b09f1df71d54ad89a10f10656fb3a9dce2fe4Virustotal results 19.44% Heodo
2019-12-14el.exeexe 829d320a94bc45c699a4a9a1757b2bfb428ef54a80232b5dc21ad40eccbd4bebVirustotal results 20.83% Heodo
2019-12-1423GEXPzw1F.exeexe 59a46b91b63d38f843f91ecc59b78310a490323aef83a2518762ec4b9d2e3510Virustotal results 17.14% Heodo
2019-12-14FhRH4tAflYouUeUdI.exeexe 181a79a35af190ce05e5bac09e23d8670c247db0b55f465ff2af8c834e984ed6Virustotal results 19.44%Heodo
2019-12-14ipvOFL.exeexe 6cf54601213e918f6f70d5d1a394932ba42bf99415392125f57453f38725d1d4Virustotal results 19.44% Heodo
2019-12-13tOnvqJyS.exeexe 6ad4ce5fe52732a95342fbe3d26efa0c1a973701e6a22595c14dee47235afe5an/a Heodo
2019-12-13YE3c6YSJW.exeexe 6eda5c315289e13a491a884daf9b40d12f555cdfff10c29916fab29fd2e0721eVirustotal results 16.67% Heodo
2019-12-13pCb0wfGu.exeexe 3abe9af7c1d0f06477ed3d68081cec884cb792316c676b346a83014cd990942cVirustotal results 10.14% Heodo
2019-12-13ut6bG2Oiu.exeexe 6cc2a126b3bc3dc955f8d7f93aa12d03acf034b86051073ea8356e14aaa0bc51Virustotal results 9.86% Heodo
2019-12-1314u.exeexe ee27ce622d86fc20b1805c2ad66dd90bd7c235083e17217d38ee292488cb19c5Virustotal results 8.57% Heodo
2019-12-13a4eR.exeexe aea789f491bac759432c8d44daf9ffd56b73095ca4e09e326b2fee99c58b15fan/a Heodo
2019-12-13VQCazdeDbcJ.exeexe fef2252679aa0810b38c2a0bb28f86e7a59a22811ca5dadd8e982688ea70b2b4Virustotal results 12.50% Heodo
2019-12-1323ouFLjk90p2e.exeexe f8fe29f7411d466c75e5057bc341c958e6bc4895338f9cb67dcea1ac31d33239Virustotal results 9.72% Heodo
2019-12-13Zo3FOgpQysfBFY.exeexe 479943dc8e5c1335b3210310fddffdc06857796ecb5a1e7872595023875602f2n/a Heodo