URLhaus Database

You are currently viewing the URLhaus database entry for http://www.rishishwarfoundation.org/afx/52rs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	289485
URL:	http://www.rishishwarfoundation.org/afx/52rs/
URL Status:	Offline
Host:	www.rishishwarfoundation.org
Date added:	2020-01-15 23:21:12 UTC
Last online:	2020-01-30 17:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (Ticket DCU002249091 created on 2020-01-15 23:22:07 UTC)
Takedown time:	14 days, 18 hours, 25 minutes (down since 2020-01-30 17:47:42 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-17	q.exe	exe	bb47036d56346de76c6e066bb8331e756835c361fb0c562beb090082f74b451f	13.89%	Heodo
2020-01-17	h4mhQsjE.exe	exe	7929bcf5abadda47da3540dbbb09514a9e90b5cabc47af28a2fea6a43c98a704	9.86%	Heodo
2020-01-17	sPSYsZsPdw.exe	exe	1fda1557f85117f8d7f02cf8d2ff1d5d998318dc0cc10b4c425584e4a78d97fb	15.71%	Heodo
2020-01-17	myTg5.exe	exe	babee3681f82b909b44e35730607910aff3d5bfc2b539a78bd1e80d12c4af3bc	11.27%	Heodo
2020-01-17	qa01Xu15WO2wSOQK.exe	exe	44de1fda3315e9140ee467547a856e9e3c7f5f683b22b852590f69e2327be269	15.49%	Heodo
2020-01-17	J.exe	exe	f55fd46dc456c4064c0a54f7726d7a9df6d6742baf3c58ad6ea0391be9da4fb5	12.50%	Heodo
2020-01-17	55fCllcsn5bd.exe	exe	6742c01a902c1343f272b2112d8bc7cfe6264e853304f4ade3349391e7141ee9	14.08%	Heodo
2020-01-17	niW0BHfJfA2OeuFE.exe	exe	44d4be0943c71e9102f36e2a92318e7f66e863a2b0baeb7a9bc9468ff3c5ed19	8.70%	Heodo
2020-01-17	nElUgB.exe	exe	4e93e415faf5348d1d25f9da8c96e7db1a329cdd9dcd11144357bacf592215b0	n/a	Heodo
2020-01-17	ZTq.exe	exe	54347108ade6b323b3d4308467479efc1b92b5f7627673681fb07c5dc1d3ad14	19.72%	Heodo
2020-01-17	OSlA0mMPh44.exe	exe	b2b6388b0e753282f8cbdb0b95f65735da1343dcb4ccd5eebece6d37270a52c0	18.06%	Heodo
2020-01-17	v1ngDnW9j0JhC.exe	exe	6cc238a48d512bbcc005f5a54c4aaee33271f7f0bfbc530d7ecd0c9abf57a80a	26.03%	Heodo
2020-01-17	4bKGz1MisyTp.exe	exe	3124ffe437bbb59c83c995ef9f3ed3fe2245b518ab7fbb698066b56a6d95209f	26.03%	Heodo
2020-01-17	FauAD73lWe.exe	exe	33e1b8b2d4d08ff986299f6e20ce6a3ffc2221c634c925ffacb112868c4a19e6	28.17%	Heodo
2020-01-17	66V4X7O6CQ.exe	exe	de9cb06f374dc761178cd19ef6b16dfcc09e204b6b6b293328ac8d4f5ecdc01d	19.44%	Heodo
2020-01-17	lSgW.exe	exe	0f540b87389cbf4df0fc4329de3a4ce274cb80264aef9052f3501c538a8af6bf	19.18%	Heodo
2020-01-17	spGDyyasFlV7Kk.exe	exe	061a0342f5677a8455bcedcb93aca3ead080b2ab737d5152d8fd75b54ea919fb	18.06%	Heodo
2020-01-17	CaI98TGH22Nn1o70sd.exe	exe	a39906f3efa59ed011ae37b19d39a01197b5b7614e17aeea548f6d11a61b6285	18.57%	Heodo
2020-01-17	208OzeR8mg3XtR2b.exe	exe	e3b1ee8134c713e8e6524bf1316bc585249d235413df0f93bfca603d321f9c06	15.07%	Heodo
2020-01-16	sh9yKIMtUsU9XKgvXgG.exe	exe	9b9570514af4fb139355d142d44c7776e33635e850429e2b3f4ab4d385e7eb32	12.86%	Heodo
2020-01-16	2sI38LO.exe	exe	3bcaeaf92ef41b08b0415a7e0b094762ca88272627f9b10483dff29c0143f138	9.72%	Heodo
2020-01-16	Fui.exe	exe	dee4ca89cdf2a4b0d90ce6ec9b7de9d2525b3bb2c82b39f93cb627e98be34641	n/a	Heodo
2020-01-16	5ssnw.exe	exe	aea7a784f4d4abb91342c0bcc6c4539b5517d3f75020e8aaf94ea049b92c6aa0	13.89%	Heodo
2020-01-16	ZqOVnu.exe	exe	fcb57076271ad2040e47e091a984c0bd98f997cb2326f90dc83823e1b169fed9	9.86%	Heodo
2020-01-16	TEJJJWCxbxMu.exe	exe	1fff2de5a03d6b560fcf0dc1cdd3405cc3fc4b7d1bc515118dcfd0c09e52f597	11.27%	Heodo
2020-01-16	2yIJGBVSEQD.exe	exe	176fa94452d5dfb15d0c0cd5c8079ceb6f72f26339893d6d86dcce7e2a978860	12.50%	Heodo
2020-01-16	03k5m5BvwiG4gs.exe	exe	298f5ddc04f75a5db9261d80691906c3151727d0524821eec0b2d7689a14fa51	9.86%	Heodo
2020-01-16	h3.exe	exe	f56b18d4ce473dd74391e302d1a162050cd2854ef3465c64f2cc0d90263982ec	9.72%	Heodo
2020-01-16	HL6Cj2DD8tBz35.exe	exe	563b3dbdb51d73d2c17a968b03df80cf92ce16fe74435e6defb110cad1d6d629	6.94%	Heodo
2020-01-16	oI.exe	exe	045ba8f8849deeec34751520cb26efb1d43c4e72b70171a319fc2a6ac157e3b5	6.85%	Heodo
2020-01-16	ZaV7iwZp3nzIPPJ3VOJJ.exe	exe	68109f79d9c1d3a197d3ffb7dcd3519261b083d4c7ab5c4c13611055c4abc3a6	7.04%	Heodo
2020-01-16	hyTG.exe	exe	a6a1859f3f10313bee5dc8bd44ce4bb0558b1d2b714d911dc33e138c48e1b737	4.23%	Heodo
2020-01-16	KWl0B6GAKLZr13h80.exe	exe	4ea119890e77a3f78c0fe42d38d204cc1d641398c8b98015902d0b55dd981e74	5.56%	Heodo
2020-01-16	TVby8oreruqTo.exe	exe	59ae3f034ce0185f8bd0711537f4d590459bec9b2a3809e75ca2030bcef9c3fb	n/a	Heodo
2020-01-16	XChbOVQNuAAox33F.exe	exe	5caca9f7b8847833ea42f09aca955d8a9d69ea5a2386ec4b25d206b1d23ee449	n/a	Heodo
2020-01-16	uR6JGGLI5XZlZUaaqRL.exe	exe	184fa46f862078b2a13ce3541837fdaf3840091b8dc6f867557132a471cc7aee	n/a	Heodo
2020-01-15	qmzD5.exe	exe	ce6f95cd098a60d4861ec723edce1b254af88b64cadeaf449bf82658247f657e	n/a	Heodo