URLhaus Database

You are currently viewing the URLhaus database entry for http://demu.hu/wp-content/UWal/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	290704
URL:	http://demu.hu/wp-content/UWal/
URL Status:	Offline
Host:	demu.hu
Date added:	2020-01-17 06:59:14 UTC
Last online:	2020-01-19 16:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-17 07:00:05 UTC to abuse{at}telekom[dot]hu)
Takedown time:	2 days, 9 hours, 54 minutes (down since 2020-01-19 16:54:24 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-18	7klLDtjSMmFTpF.exe	exe	ab5dc331127be64fb5120501c03de22a819a9ad88d8e17a8cc04e709900e4f6e	26.47%	Heodo
2020-01-18	5Yk5SlcK4QfwwJn6.exe	exe	b07d634a2ac597ad9a21a9c7bec3d1e351e78fcbfbf14fb1e4ec6c3b460c08b5	15.07%	Heodo
2020-01-18	JxCTT3go7SQSGgeccW8.exe	exe	f8af5be3e70df682fe7606c65641fd385676eed8ce65d16539623cd29028d02f	12.50%	Heodo
2020-01-18	2UJQaYr66X.exe	exe	b74e55a8ce56d9820350ec899e3de1ceb3ddd6f213d0c90aa4a5c329add4131f	12.50%	Heodo
2020-01-18	brz5NqbUaPQzeOd8h.exe	exe	557c537aefac72854cac0ad0272868e6d1ebcacdf39c62ae3207c9cf7ce55c49	9.86%	Heodo
2020-01-18	nIPouATCFL5.exe	exe	82eb2e501d6897a8e0ea4dbf8afd728a9ea224b4c5430a79d85850e7d1715f71	9.86%	Heodo
2020-01-18	8gzdiDU.exe	exe	10274ec59899011e808ab76acba60b1e3caeb34a7007da3d7257e74908a92a10	13.89%	Heodo
2020-01-18	qmC5OwnLXpzz.exe	exe	e685c407341b3175562635b2e2f468d8a7d53e461cc975919006a3776f709d30	9.72%	Heodo
2020-01-17	0DGY.exe	exe	0c6a5cfd8f4fedddbe98130c44c7066f8d5408be546c3e9e65c32bfa96768c12	n/a	Heodo
2020-01-17	T0YHk6YMFGGPKct.exe	exe	d8b68d96f79024dac5030360e7200a3c5785e06d2fe9e541483f71cded6bb76f	n/a	Heodo
2020-01-17	DqPJkyGbpmwGXg.exe	exe	a0a2adb4aa63df59ec491842965efa9301e8fb301d2ea58ada83067719148c38	12.50%	Heodo
2020-01-17	Yf43qYMLqX.exe	exe	14ab17f373c2d45f4191b1732f03df7c90a89d2a02449e5ae7a61cefd47ec267	11.11%	Heodo
2020-01-17	ewFVb7mh0YCgj.exe	exe	54e1b3d2b09af635b4fb96b871f61ddf64bee455441407200c8345dd0d2d92b5	n/a	Heodo
2020-01-17	1edzf6jmDdy0QoR.exe	exe	a67e449a0df2798a80fe8ba4c0582d4dbc55ddc151e07e17875a6ea897496059	13.89%	Heodo
2020-01-17	AS73K.exe	exe	88e8ab5455056dca4bf06306ca768b75cc89e338f342e9f53ecf45e4a6873f16	16.67%	Heodo
2020-01-17	RxfTLbvWwlg2my1UiiMW.exe	exe	759ec750149ade2ff4fcd6b5402cfe65eb2240a3a0d58008fb6e2b69059324e7	9.72%	Heodo
2020-01-17	c7c5kknDlmprLyYhF3b.exe	exe	62c67c8dbd995d7b151e8129ad87de49d0a75c7cd4caac758b86d45bb51dd80f	n/a	Heodo
2020-01-17	Ttpnp55oOwIjOLhW.exe	exe	6f684b7a05a4217fab092c075cb23752ac51b39235715de02641fbc4f6a2a0a9	16.44%	Heodo
2020-01-17	wLFkB.exe	exe	6cd33a09fbf736c36c851df7cc784e19adbe667f4d8cddbc588da1050f78658e	n/a	Heodo
2020-01-17	4bMfVCx2ResGUXfRYijJ.exe	exe	42be66794332fb3f2578f1515d9fde883cba935409f2ab8c465809e4ea70d112	25.00%	Heodo
2020-01-17	gWppd1TVP0.exe	exe	b068757a8bf7e90478f7ab19178308d329e5b25f8c87ac6e7f58730e5ca89a86	n/a	Heodo
2020-01-17	o0VpXQwSLM3XO6PFYD59.exe	exe	7a21e9889f2c12727b85f7c710d8b50993bf7cc8cda067d4580ad16ce9a9a92b	19.44%	Heodo
2020-01-17	U2kNr.exe	exe	cf2d137e9678acd8e45134297b28aeee071411379db6c67991d7b308915baae8	n/a	Heodo