URLhaus Database

You are currently viewing the URLhaus database entry for http://jayracing.com/996tt/UNID/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	290700
URL:	http://jayracing.com/996tt/UNID/
URL Status:	Offline
Host:	jayracing.com
Date added:	2020-01-17 06:58:08 UTC
Last online:	2020-01-24 15:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-17 07:00:10 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:	7 days, 8 hours, 40 minutes (down since 2020-01-24 15:40:33 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-18	3xSm4ieMdQBX0c.exe	exe	ab5dc331127be64fb5120501c03de22a819a9ad88d8e17a8cc04e709900e4f6e	26.47%	Heodo
2020-01-18	Qz1E.exe	exe	c48a7b6bf0a487080949029ef8aa59888481815e11f27357c85ed49c91132edd	19.12%	Heodo
2020-01-18	UDQ7aPfXFkBJVmmzs.exe	exe	e305d29476a1431019e8f7b2d960c06cac5075c903de497c78a27f83d6492ec8	15.28%	Heodo
2020-01-18	xySB5mNviSox9phQM6.exe	exe	b74e55a8ce56d9820350ec899e3de1ceb3ddd6f213d0c90aa4a5c329add4131f	12.50%	Heodo
2020-01-18	asy.exe	exe	2e7a6760419c8dbc3ad8005d99f2cd8bfb4bf509152fa86fa2f54d5fc44fabf4	11.43%	Heodo
2020-01-18	NzWBIW1qNey7yWPTx4.exe	exe	327758dbfc46bae5f2d46016f482002098d283cde7a6fa04045e5e95561d3827	9.59%	Heodo
2020-01-18	nhu55NSa93dtm.exe	exe	10274ec59899011e808ab76acba60b1e3caeb34a7007da3d7257e74908a92a10	13.89%	Heodo
2020-01-18	G35.exe	exe	e685c407341b3175562635b2e2f468d8a7d53e461cc975919006a3776f709d30	9.72%	Heodo
2020-01-17	QIi.exe	exe	0c6a5cfd8f4fedddbe98130c44c7066f8d5408be546c3e9e65c32bfa96768c12	n/a	Heodo
2020-01-17	E5kcfZUdCS8RUSN2W7f.exe	exe	d8b68d96f79024dac5030360e7200a3c5785e06d2fe9e541483f71cded6bb76f	n/a	Heodo
2020-01-17	eG7eLcKLCaSSpnP5L71I.exe	exe	14ab17f373c2d45f4191b1732f03df7c90a89d2a02449e5ae7a61cefd47ec267	11.11%	Heodo
2020-01-17	YNe8WE92zNfAz.exe	exe	54e1b3d2b09af635b4fb96b871f61ddf64bee455441407200c8345dd0d2d92b5	n/a	Heodo
2020-01-17	6ZI2Cgis4.exe	exe	d27f9d46694bb9913eae4c536027be6599a3e9ecb4da9299fa29ea23b840b2de	14.08%	Heodo
2020-01-17	sdA76SLFP.exe	exe	88e8ab5455056dca4bf06306ca768b75cc89e338f342e9f53ecf45e4a6873f16	16.67%	Heodo
2020-01-17	PXCO4YqVEyNmCZ.exe	exe	759ec750149ade2ff4fcd6b5402cfe65eb2240a3a0d58008fb6e2b69059324e7	9.72%	Heodo
2020-01-17	YImLqiL5OFKB.exe	exe	03f79397c9bdb9547d35cae5f8d945a8e971c640db6b601eb902e0f1f154e518	19.44%	Heodo
2020-01-17	LmmvHEkiYiA.exe	exe	532df3165be359ffefbce2bc458d0a04bd5be5e480fcab15881272d0442df3c0	19.18%	Heodo
2020-01-17	fGb.exe	exe	6cd33a09fbf736c36c851df7cc784e19adbe667f4d8cddbc588da1050f78658e	n/a	Heodo
2020-01-17	PElQAzJwHLLlfgCTch.exe	exe	847c9e6b61d3e5c0a6573d6825ef8085c76b7dad1b01c605f0f8e7b7fb2e379f	23.61%	Heodo
2020-01-17	9eXb8W.exe	exe	b068757a8bf7e90478f7ab19178308d329e5b25f8c87ac6e7f58730e5ca89a86	n/a	Heodo
2020-01-17	ZtYBZfoFPGqMK7xu2.exe	exe	9ffa86d3e867d674ff48fa3f7e8edaaad969b80397e42abf365a79cbfcd04fb5	n/a	Heodo
2020-01-17	qhFIwuYXcgzjZdYVnWWJ.exe	exe	cf2d137e9678acd8e45134297b28aeee071411379db6c67991d7b308915baae8	n/a	Heodo