URLhaus Database

You are currently viewing the URLhaus database entry for http://www.meggie-jp.com/images/Tznj/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	290100
URL:	http://www.meggie-jp.com/images/Tznj/
URL Status:	Offline
Host:	www.meggie-jp.com
Date added:	2020-01-16 15:29:27 UTC
Last online:	2020-01-27 08:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-16 15:30:15 UTC to abuse{at}alibaba-inc[dot]com,intl-abuse{at}list[dot]alibaba-inc[dot]com)
Takedown time:	10 days, 17 hours, 3 minutes (down since 2020-01-27 08:33:27 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-18	NW.exe	exe	be403ce2d14f38b66528d438457927218f1aa44a68530bf46b2703da75dcc8bd	26.76%	Heodo
2020-01-18	CBLnC9sNPx.exe	exe	aa0352b12805ed979baeefea6ac7e9933a88ac09dca3cf8f538dae9a1de7e3e2	17.39%	Heodo
2020-01-18	8t.exe	exe	ab8bd6c25798fffe45963879c3b794d3df7ada9466f295b28974ae1184d47723	13.89%	Heodo
2020-01-18	kjqI07Ed1A9oJ7I9dm.exe	exe	9b183c153166d005c277d09cc1f8e1923d0ca47c2db14b937c51606d81509cf1	12.33%	Heodo
2020-01-18	1EHbZflxe.exe	exe	68e699b962af409b5e0cec19f0670991fa5b2dc59672c91cdc4f7a59c037dbf6	9.72%	Heodo
2020-01-18	Bde8Tdtk9nxmgAFew.exe	exe	eca289591a6c69e6a5a410263ea6edb7d64852619f5d2d6b7589b9c604e1d066	10.96%	Heodo
2020-01-18	eqkxB1RuFf.exe	exe	cbf4d162acf55c6e5bdf5f80b313487426ecc6066306236cf8a95f7995b40d6b	8.33%	Heodo
2020-01-18	2XU2aZsQQwmUf.exe	exe	59863e214ec80f34af3635dff517541de923688239cb343c82250587c1e9c99f	17.14%	Heodo
2020-01-17	sPy3FM0X2iT2dN5z5Q28.exe	exe	024c315b15a1a1876ffea2adc9de974bf1c67dfc265fd823290b7aa3e6694ee4	8.45%	Heodo
2020-01-17	7dtKj2FMpO39wHbUBb8.exe	exe	7929bcf5abadda47da3540dbbb09514a9e90b5cabc47af28a2fea6a43c98a704	9.86%	Heodo
2020-01-17	YZ8igfpVnFcTMSZ7a.exe	exe	1fda1557f85117f8d7f02cf8d2ff1d5d998318dc0cc10b4c425584e4a78d97fb	15.71%	Heodo
2020-01-17	FJEuE.exe	exe	26242e79acb556a27d4a44346ef7428208a69966af825e7a718b7dbae9326228	13.89%	Heodo
2020-01-17	oaKUASPU3dYtlWxZi1.exe	exe	c9cd5a479b70cc3655f4dd7776d194a685ec43cd161a942bff8f8c21d9a7a9da	15.49%	Heodo
2020-01-17	8bla1FQMz.exe	exe	64746f4cd6c7fb741ca675aa14b7938fc1d42e31fcc57851c8a28b0269066d3e	14.29%	Heodo
2020-01-17	rgb9nKRc.exe	exe	337f652e34905559e06786fcba363cd7f951138e58f4f282f978fd5ab2cbc51b	13.89%	Heodo
2020-01-17	XJ7vVI0ge4woCYS4P0.exe	exe	44d4be0943c71e9102f36e2a92318e7f66e863a2b0baeb7a9bc9468ff3c5ed19	8.70%	Heodo
2020-01-17	E1WtOJF18TbElA.exe	exe	18aba06fbfb1d0cd45e4554aa56cf918cfdfac590bfbd40728b0f6f8fdcad3fc	18.06%	Heodo
2020-01-17	4RA0iS5FJs.exe	exe	b9dfd1a839cd05354c35bd22f46b0df6599183b08d6ab8ad87faf36cc2bac0c4	16.67%	Heodo
2020-01-17	0.exe	exe	7a9d5d03616c968becfeb4f124b063c932663f71c739640c4678c5958445a3c5	n/a	Heodo
2020-01-17	pX7tGZp.exe	exe	fbc8815df7ed52578d3b0df17948172fb6f26bcab87fea2e762bf204bec54bcf	23.61%	Heodo
2020-01-17	E2CLjE8zpp.exe	exe	d827f086f0871988a100a8f1dcd097cd23d5bc9cd102522f97ed348c5b7c40d0	26.39%	Heodo
2020-01-17	CznPhHtQ4iLoUSxxrc.exe	exe	fe6b3c11879bbfa61714c884476c9e03d2445957e30d36ea1492a9b3357dadb1	n/a	Heodo
2020-01-17	RQQKKQ5x0Pc6sMonbbQ.exe	exe	06018c6503ea6cbac91572051c153ff2016c69a1089b43061fa9f7ec78a2c31f	19.44%	Heodo
2020-01-17	I1KH2t.exe	exe	19cc41ae33b93b18fb971c9f800ca82fc231c502898c759be8b041a0aa47851f	19.18%	Heodo
2020-01-17	0MEw2S6q.exe	exe	0f540b87389cbf4df0fc4329de3a4ce274cb80264aef9052f3501c538a8af6bf	19.18%	Heodo
2020-01-17	aar1BqAZqqiVSf5h.exe	exe	c64b34d2f1b0ae083b6bb3457c6f0a8e8360cc9e8533460b9e70932d01a75288	18.06%	Heodo
2020-01-17	GnkiTrwAA.exe	exe	a39906f3efa59ed011ae37b19d39a01197b5b7614e17aeea548f6d11a61b6285	18.57%	Heodo
2020-01-17	X.exe	exe	48347031adcfae3101eeedc80b303174df3b74e0aabc9c911a03e3b6560f4fe8	15.07%	Heodo
2020-01-16	NEgZpEJ3F14AJbixJ9Jf.exe	exe	cf346d6aeeae84d957303473a35ec051ec9f7477d195ab797e11843750446649	12.50%	Heodo
2020-01-16	XXm0ia7KKXGzg.exe	exe	2f017705c139aede645b6149196f5bef5e1ebaf6f63841329d7f4785d23e954b	n/a
2020-01-16	j7TRA0ogFDWDhuZmY2OU.exe	exe	5f4bf7c51f9c3aabace037baccf1fd7d0446cfdadde40c713b1addc1a487228d	n/a	Heodo
2020-01-16	uxbuaSZ.exe	exe	19f4bdba534dc51ab21fc9c78f974ef4dd5877917bd98287d2c066636355668c	n/a	Heodo
2020-01-16	pnc0.exe	exe	4efc13c3e41a1e96ed32c5ed90b42a8d96dddaed9317b2bc66038d09eed5862c	n/a	Heodo
2020-01-16	hXh3.exe	exe	1fff2de5a03d6b560fcf0dc1cdd3405cc3fc4b7d1bc515118dcfd0c09e52f597	11.27%	Heodo
2020-01-16	V.exe	exe	93dec745111d740453a3159afb1888e3f145938f2a193b078a29854adbc54706	12.50%	Heodo