URLhaus Database

You are currently viewing the URLhaus database entry for http://wqapp.50cms.com/addons/JMvvHuNs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	291186
URL:	http://wqapp.50cms.com/addons/JMvvHuNs/
URL Status:	Offline
Host:	wqapp.50cms.com
Date added:	2020-01-17 19:30:54 UTC
Last online:	2020-02-14 10:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-17 19:32:04 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:	27 days, 14 hours, 49 minutes (down since 2020-02-14 10:21:04 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-02-11	luaNfmnW1sp79iI85pO.exe	exe	95f830da739b987cfdf09546cc0d720f557f69f7f63bc62e7365845d1dccb8bd	n/a
2020-02-05	luaNfmnW1sp79iI85pO.exe	exe	292a9855c5aecfa3e6e0ed775cbc13158d94ade1d137cef8d8b7a7298955a1b5	n/a
2020-01-31	luaNfmnW1sp79iI85pO.exe	exe	bdda65b8a2aedf913541a9637940a95955f691778e0a65ea8f3e4eeb13ea63b1	n/a
2020-01-29	luaNfmnW1sp79iI85pO.exe	exe	39dcf802eb196c33eca4ab46a75816cd137ce64fd1c20cef91c93d637a10e73e	n/a
2020-01-29	luaNfmnW1sp79iI85pO.exe	exe	b2e15087382af276ec31d4954d474da9e619806b7d2fda1b7f7f969e589a9a0a	n/a
2020-01-27	luaNfmnW1sp79iI85pO.exe	exe	bea6d90e7b58a13735e40646db755a393ce0702f0925c114902c553e0ec89c2b	n/a
2020-01-18	S9W4mJ8pvLxX6ANv.exe	exe	be403ce2d14f38b66528d438457927218f1aa44a68530bf46b2703da75dcc8bd	26.76%	Heodo
2020-01-18	jyKDOkgar8Vqq.exe	exe	8ec47534c73e03302d650eb9e98b8ce9b048edd49cb68ed6061ffb9151248366	18.84%	Heodo
2020-01-18	mKGr0FxxzZ.exe	exe	b1e1931567195640c4e361cefb4e3ebc2b3588f2ff209e4e441db4284cb9111b	13.89%	Heodo
2020-01-18	cBa4.exe	exe	e9a40a3dffdf4520b286d3a3ba1c9a2ceb395459ce561b65121595086683eddc	13.89%	Heodo
2020-01-18	dF3OjHz5Qpxzl.exe	exe	68e699b962af409b5e0cec19f0670991fa5b2dc59672c91cdc4f7a59c037dbf6	9.72%	Heodo
2020-01-18	G.exe	exe	c1dce61939aff1b41632d863038cbf9b9add39ddaee630367cbd210899026b34	9.86%	Heodo
2020-01-18	KfnIh7Nx3.exe	exe	eed6e133cc200be2be07df0a9e069be0e7633248b055bfb69b907af4a01c3206	9.72%	Heodo
2020-01-18	dubNJeZ4GVJAz0.exe	exe	cbf4d162acf55c6e5bdf5f80b313487426ecc6066306236cf8a95f7995b40d6b	8.33%	Heodo
2020-01-18	2xr1.exe	exe	34b5c666e95d914089e1b988c35bb69a2a9d3685a5460d4cf632881f8621c3be	9.59%	Heodo
2020-01-18	LLckyquCrrNe.exe	exe	59863e214ec80f34af3635dff517541de923688239cb343c82250587c1e9c99f	8.22%	Heodo
2020-01-17	vU.exe	exe	7b8672b4397bb9300e2b48400945727108f27aad2a32042f1b30494b8c2b3eac	12.68%	Heodo
2020-01-17	lVKSBTJxzfkYfd.exe	exe	f06c2d95c47b4510825a3ab1559191fed0838533eb1008b38fa0b29b72d56691	15.28%	Heodo