URLhaus Database

You are currently viewing the URLhaus database entry for https://ushuscleaningservice.com/cgi-bin/8s899089/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	287077
URL:	https://ushuscleaningservice.com/cgi-bin/8s899089/
URL Status:	Offline
Host:	ushuscleaningservice.com
Date added:	2020-01-13 14:12:18 UTC
Last online:	2020-01-21 20:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (Ticket DCU002241931 created on 2020-01-13 14:14:15 UTC)
Takedown time:	8 days, 6 hours, 34 minutes (down since 2020-01-21 20:48:47 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-16	58Gg.exe	exe	11c000cbc7ad1681ba7b7f529159582e4487af280875b72aaf52ca85910fae4b	43.66%	Heodo
2020-01-14	6L8bLp71Vg3KQr68z1AgZ.exe	exe	ea2a39e502a71c09d5d7fefc48b2ca00f2196c42e3288299c69e7d085cdd6b46	22.22%	Heodo
2020-01-14	RGTDnwCkrbV.exe	exe	b0a59df4756ac630e6cdb6458a63cde0251b1284013a3d8f4f9a2025789fdb32	25.35%	Heodo
2020-01-14	uqW15jPuDBviQ2.exe	exe	82749256f7bea612e1c338bac32b3bad58f0525c4c7fdef6cb87cc6e93d76c63	25.35%	Heodo
2020-01-14	zP555AorF.exe	exe	60df4d9a82872456ed57a0e07159685ed4f9d7b89aac66c518b7e4843ab89ed7	25.35%	Heodo
2020-01-14	k4RM.exe	exe	49041d079d8cb768bce72d60e0d47e47f22abdfafa493dfa9882194cf32696f3	n/a	Heodo
2020-01-14	9Eu8xklYn3BCJn.exe	exe	eb59fa820a73d9eef2a25cb63375376a998d46cbcf9a9ba5185b3b32535f9252	30.00%	Heodo
2020-01-14	38dp4t3EV76vsccDXo9S5.exe	exe	ec47408d09bddb18ef92e68ec7fec02e5485be3fa6f622d587c9d09490fccb06	27.78%	Heodo
2020-01-14	7RmOrN8H5NKW9EJF.exe	exe	fd76a385819b537cd30cb8dccb8164e6646d0a618e10c73bbf999804ca956cce	26.76%	Heodo
2020-01-14	16f4ajGCAClDrC3j4Nn.exe	exe	f8dc6ef6b3cce570c6c9ad661feb3e171734a408c6cd559000baf7d5983ed5c9	38.89%	Heodo
2020-01-14	5wah.exe	exe	4954c405cf7c4fffc6600d299a088525850e4e37bfd63072ce34bc6751384b27	34.29%	Heodo
2020-01-14	F8DOkbf3Tjle6Ipg7QrX.exe	exe	46ba3607d4d3c6f903b17635c3d082f91dae213d32eb7a21839e51715634cf0d	30.99%	Heodo
2020-01-14	D00iDwN29gY.exe	exe	e3b52f227944c583a454a8f274e5fd7f19a8e0e33f40c20c756f56ebd415fe15	n/a	Heodo
2020-01-14	3XUHI3qI60I.exe	exe	615c7e989fd7bfb6889614ba2f4542ef6a6e8af49cbad782ca7d0859ca1abd8d	26.76%	Heodo
2020-01-14	Tkg0QVTkSuki.exe	exe	81b8fd8242b55fd96e748ba8d922340f87302ce2cee62af8d988f001efbb8a8d	30.56%
2020-01-14	xHO.exe	exe	93d44d4fca2903d1feb1e0a144f5e832ba66bfea2df7294196f574c0fccc8e30	30.56%	Heodo
2020-01-14	Dm9GvL2OHJvPrkyM.exe	exe	9f2a7a094d9531eb0796088735ac9ce1f4f612a86a4c7f5a73838fdaf1137776	27.78%	Heodo
2020-01-14	rjea94MJ.exe	exe	3c9000f84983ce11dc84ab4034b1cb9b5e16a18989e60e3b30cf074aad5ac29e	23.19%	Heodo
2020-01-14	tpgdf.exe	exe	f60c37046cafd42b329c6e0b5bb9e3976c21a042c0bfd87a1dede4f72be5f6bf	24.66%	Heodo
2020-01-14	Jjfyuqy7tg.exe	exe	cc6dd52a1966143eb5a9720f6becd21ac0de6e3cde84bee63a0d388aaf800a9b	23.61%	Heodo
2020-01-13	ft5ukECMLp8WMG.exe	exe	52ffd67f1dfe0d6d0f56399cc869d090cfa2badcca485114012e3a4c17cd486b	24.66%	Heodo
2020-01-13	aPjGKEJW5q9nifn.exe	exe	a28dbcd19b2356dd8876cbfd49a371c536e7a4a82dff476658bbf4e64152626f	23.61%	Heodo
2020-01-13	PhbkvLK57py6ttkOLG2.exe	exe	87602cb88a11f5c008e8725cc12de0fa5f8d883f94b44a92874df22568155f45	25.00%	Heodo
2020-01-13	8TuMAqVDS.exe	exe	745888bc231066bcc9fdad601c2fed958e876b881bd7fa56be8049626debb269	n/a	Heodo
2020-01-13	NE1T.exe	exe	3ec58af6e3cafa49b33a388a006bca231c48cfb8c96d73392d16df4cbd9469c2	19.44%	Heodo
2020-01-13	BMXQnUMqW.exe	exe	53ba51c9c929a683cdcf3501418f2843d98b0142aa74c9ff69fbc670d55fd076	n/a	Heodo
2020-01-13	Q4G.exe	exe	ba898fa43353a7dc577c32938973876eb2a0d9ae6cedeeb67947b67cb9f80924	n/a	Heodo
2020-01-13	5WSw.exe	exe	d0b1fba3b59d941353eb13058320542aec57d31e1ef5d41adc81d407629f9242	30.00%	Heodo
2020-01-13	mR6K7ZqTyeNfzWDjgqBG.exe	exe	125f7c51507b088a78877c0d304d06d6f552b32ec963b7599aa142658c79fe01	27.78%	Heodo
2020-01-13	phz5zRwEIqlQzWW.exe	exe	b43692aef0f38bf8069b6f9ca113906fb633f402ed4ce213fa11e0a58627fc0d	n/a	Heodo