URLhaus Database

You are currently viewing the URLhaus database entry for http://app.bridgeimpex.org/img/H4sNbg51/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	273104
URL:	http://app.bridgeimpex.org/img/H4sNbg51/
URL Status:	Offline
Host:	app.bridgeimpex.org
Date added:	2019-12-19 16:15:10 UTC
Last online:	2019-12-23 17:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-12-19 16:16:05 UTC to abuse{at}a2hosting[dot]com)
Takedown time:	4 days, 1 hours, 41 minutes (down since 2019-12-23 17:57:49 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-12-21	ISeQw5uuqLYI.exe	exe	f86a2882452a6a3b7c33a7a5b7a7e129631dd6cef8b70412e4b7e0fb4da8e659	25.35%	Heodo
2019-12-20	NlR8KHnfvT5D1.exe	exe	c4047152a0f228e55fc0748cd21a0bed309c32fea414d22611b6eb3be9d3c304	16.67%	Heodo
2019-12-20	qaTrMzeXaTiMJUJR.exe	exe	3f183c896c2b119baf27478e6c7aeee411687696f27c2d20edb72568dded44ac	12.68%	Heodo
2019-12-20	qD2v.exe	exe	0bf0af62e1a16bc8463d89e7d73166a0448d9137a8f40809de98a38f1275de56	6.85%	Heodo
2019-12-20	Foa.exe	exe	2609ac18c14c67fb61e6a5daa14ac32fe8a1868d8a29cd27e05b6ebfe850d98e	6.94%	Heodo
2019-12-20	OB8.exe	exe	d31dbd120c197719def67ac82576c19e83508234eb05f0b94b65eb78fee9d166	7.04%	Heodo
2019-12-20	aA50R.exe	exe	d18f18532bf931fd0d0aa610dcbe45d7a8a5c4e0db160f67147c7b0fbc4605a1	22.22%
2019-12-20	F.exe	exe	8b52958959a77b4b800ec20b8db8d25062982ce88d4ec7eae3e6437a12d9261a	17.81%
2019-12-20	OeSSacu6QEZLT2MZWmpL.exe	exe	2df602dc5e37833439f5cdfe569133e1913dda008f1d4f2b0e140851d5cba5f2	18.06%
2019-12-20	qnyz2nWauqMHgaE.exe	exe	160fb36d9c59d84efa13d0efb29db6024e0d128876ad49e71f0438ebd2693733	12.33%
2019-12-20	hkwCN7kQpuUmI.exe	exe	b96d75d71f18f32a1f4c303afb5bb5c3c04b950768c2473aa5d3c23fb2929384	10.94%
2019-12-20	Do5gSE0.exe	exe	058c98919d5c1644ef759578bdb9c5e6b7cc60558a49488afad1a39306a4238f	9.59%
2019-12-20	a.exe	exe	744290a436d9615140b0905d907a7c4d3acb87e671f006606729760bc5e18076	10.00%
2019-12-20	g2R9GA0F.exe	exe	9c5cdfc2e2d2c85218a414bb86f6f45a91c99b8707dc3ff3294df8d9da3c9f73	12.50%
2019-12-20	s3poY.exe	exe	944740d6173afa86bc648d7bc0be732ab8cdb7c12e0ee8a849c109d9317eff95	12.33%
2019-12-20	KKh9w9I.exe	exe	b9df29fbee79903dfee1f016e0b5dd827d47e34c41aa1162040aa3e61f6a2d33	12.50%
2019-12-20	J.exe	exe	ede005804a4b800126e687dc0beba2cf7231b31207d5717e32b56ef4e8dd8e65	12.33%
2019-12-19	pQ2ffH70LPLr9crOf4q.exe	exe	2269983ea31c8cff65fe7c63a7d5d5a52bba209cc62e999ae36e59430b89b14b	n/a	Heodo
2019-12-19	8MLCHp3xO.exe	exe	8ad22bf8907a7736938513d7634ea1d083b896158f4a1d5bc5045edd8b5551df	n/a	Heodo
2019-12-19	ssbDvDvKpbHMTM2oDM.exe	exe	43f2d883012acd85d9e323eaef569d9bce412e36e0302cc94a62862c3e6ce311	22.22%
2019-12-19	iajLjbB1JY4H.exe	exe	e339923d88a37d60127ad7b8287544303d40b86d7701460aded6edd9622c661b	20.83%
2019-12-19	yxG2R6HoS4BD6.exe	exe	28b114e546825d32f3a7dd63ed6f404b3e48863cc03ad6a7da0ef88aa72b94fc	n/a
2019-12-19	maG.exe	exe	e584a810d9862647ca6ca6a0cfd5b2780957301f36b450d15f5908312ac91f66	15.07%
2019-12-19	kOuA7QsT6lU3iZvaDI3.exe	exe	25549e688713c5e8782d8e34bb4fe3d72a98f70a7b1f2ce82c5ef946d62485f3	n/a