URLhaus Database

You are currently viewing the URLhaus database entry for http://epicmusicla.com/R8SeKMT4/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:28583
URL: http://epicmusicla.com/R8SeKMT4/
URL Status:Offline
Host: epicmusicla.com
Date added:2018-07-05 12:50:14 UTC
Last online:2018-09-08 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: JayTHL
Abuse complaint sent (?): Yes (2018-07-05 13:00:25 UTC to abuse{at}godaddy[dot]com)
Tags:heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-051.exeexe dce79105d6bb1403fd4bca295531957275c95391adbef2558ba0b7567c6c0086Virustotal results 23.44% Heodo
2018-07-0545259.exeexe 126701782650fa23c14f1e5a06ddb222b875992071598e3b8ced8f3d5cf0257dVirustotal results 21.88% Heodo
2018-07-0504442.exeexe 228c5a2d6ddb06e4fe54c34d3732b3b220e95b5995146997488bfd9730cdbc30Virustotal results 23.44% Heodo
2018-07-0550671.exeexe 66acf0e9a1a4a472e29b4a36eaa62fdb3fb97030ea1ac0a02bb0612ec4591776Virustotal results 25.00% 
2018-07-052.exeexe b257be0fe4d5ae6cb56ce08d9fec1c36f94956ea09c2b8e42cb46a76f49f7d04Virustotal results 37.50% Heodo