URLhaus Database

You are currently viewing the URLhaus database entry for http://www.vgxph.com/wp-admin/Ch9wxSq/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	293316
URL:	http://www.vgxph.com/wp-admin/Ch9wxSq/
URL Status:	Offline
Host:	www.vgxph.com
Date added:	2020-01-21 07:37:14 UTC
Last online:	2020-01-27 07:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-21 07:38:09 UTC to abuse{at}us[dot]leaseweb[dot]com)
Takedown time:	5 days, 23 hours, 23 minutes (down since 2020-01-27 07:01:10 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-23	htwToG7v7CkLAlb6BFAt.exe	exe	e262479fa5ba2fd0697c8fc29237fb6761a1eb76ec482aa1cb57dc5d48bdae14	12.50%	Heodo
2020-01-23	mqM.exe	exe	b088762f2b03d43d7ff932de0e7203f910f8e1ffed3e0530ecbbb243608d738e	22.54%
2020-01-23	EjkW98jLTfe.exe	exe	d5f4874c75f718c231fa676c9e4c26472d2148a5b304bc5db27ec94f2233ff3d	16.67%	Heodo
2020-01-23	gxlLZMbSXj.exe	exe	7afc02538cd4f12e0a3cc5e458238ab7fcf9035ea76fc5e4c5d066f5945516e5	12.50%	Heodo
2020-01-23	N0J7A2a0vLiuX0.exe	exe	e5d37fdc4469b27a3d6e0afed5c86d4e02f584e455c716b1992cd650470e571f	12.50%	Heodo
2020-01-23	tr5wx6VRC3f.exe	exe	2237337bbeec02180c31a435f1a4221f1101b7c40bd1f028448c536c27b3b438	n/a	Heodo
2020-01-23	H6eItv1nT22.exe	exe	4d7bd0d0b6fa966e529acb5b671e8c9308f82d0d4678946244052f3ad549e60f	10.96%	Heodo
2020-01-22	2SKYMdXNcsMpVdwd3e9R.exe	exe	f3e8036d106e5dc7eee4669c2bd8a5586684a42ede28a48b176a4c3b01508bb8	8.45%	Heodo
2020-01-22	tenP.exe	exe	12eec58e3d208500789dbb6b12aa35b10438f3ff15bf95250955e8e3dfc6beb6	n/a	Heodo
2020-01-22	8rxI3G5fzm.exe	exe	7f570aa9b0e8ed67f6f83b2e807a3ca5c8de6190f9fefa85c82a92413e58f70e	n/a	Heodo
2020-01-22	1WF8.exe	exe	9141ecd2e23f7b4aa683f16c1772c9f04f4e23e7188dfb4a1623cb1123beb418	n/a	Heodo
2020-01-22	Pd6as27mDESrG.exe	exe	5e6e2d3f4da18e2ecd1ad33eb82893d24301f498242aa3a4f18830bc5b6f363a	14.08%	Heodo
2020-01-22	Lo68Y.exe	exe	4773ea98d00e3e87de598899d7f1623a38f5db2b0654a96faf5373a2f540535a	n/a	Heodo
2020-01-22	5SDjjWMMYny6.exe	exe	b02adf47b8cb362ea18a229726a83faaef7d0a718b9d111cbbc0877e11dc49e2	n/a	Heodo
2020-01-22	XzlNSJ41I5YaI.exe	exe	d7371c043893c4ad29baf377976da8c9ad2ff975e5142a1578d254370b1841b9	22.22%	Heodo
2020-01-22	pJIJoggHmk6ni0.exe	exe	f874c2939faf2189c8fba8090c1093db8895642d2441233a609ecb8dac7ecd72	19.44%	Heodo
2020-01-22	FgSMDfCLEEb9a.exe	exe	54a83e1137df41d0ed0117d9c252bbc7269544e14e53d2546657e6c3d341bd2a	n/a	Heodo
2020-01-22	y6ZiS0O8jqGFCB.exe	exe	39a68ceac062420854e9ddf48e8bfd6d5ff27bb23a1a0497b451cc55b5f097b9	14.08%	Heodo
2020-01-22	sTLjsJLksq.exe	exe	33fe4fd0c96a619c7456d8712a0e8932b060b48c24bebd90b3210d2ad7ecbd5f	n/a	Heodo
2020-01-22	JJDw.exe	exe	5822dd9a7c371281bb5e7df5e97cdff3b490f1892b4e00c9df8da7b6493e4286	n/a	Heodo
2020-01-22	BB61UlBMu5jlh.exe	exe	97d08c2a67cb52d2f0bb4e0edcc57865715b82e28a44da34871f6d3fdcfc5a2a	n/a	Heodo
2020-01-22	HDRZTz.exe	exe	bd4b6909e2608bb7381a4ffc20802c91086c247d85f42aaa1e46663969bb48ab	9.86%	Heodo
2020-01-22	QbgT7gK5U5ELVn.exe	exe	6d6cf35ac3d4ff9e9b1da3dd8eee4fc0404fc65c215bb021bd9f245bafdd756f	19.44%	Heodo
2020-01-22	9H5RYtyZke.exe	exe	750d01217bf06ce255d7c673de4bf78a5fb28f8f1fefb3a2921fe782368a7a8b	15.07%	Heodo
2020-01-22	ghfVY.exe	exe	3d88eabb5dbd16f203843e97021ca4ee71641e9907e867966f0e06254a3c1a41	15.28%	Heodo
2020-01-22	CrZDj9uCGGv.exe	exe	1d91072acadbdf007d96e3300f69321f70d0b5a211a142a12aefee1792376279	n/a	Heodo
2020-01-22	Jtx.exe	exe	61e7cb4cc8d4b2091c32d5884e26bf8ac0debf4d04329ccf709f24785d036cbd	n/a	Heodo
2020-01-22	mlQk6B.exe	exe	69866e15957b36f9f6cc2bbf7d4f9b464e9880e2e4497ba1dce34f5d81b3c11a	13.70%	Heodo
2020-01-21	K8NNSA.exe	exe	44981a294bd290a9a5dcaa2ce0344e84f6686562a5a8d5aa3e96ad28960b9402	n/a	Heodo
2020-01-21	sFxgzVYsZX.exe	exe	715261a187da9c1e936ca902188d4fdbc17d2cafab90fe04acc9debcf4dc4e9d	8.33%	Heodo
2020-01-21	bmxwjnjWOw.exe	exe	e62a9fe3232a66be18fd1cc21b9d252fb23d43cf4087de7d9f821a145b4a0734	n/a	Heodo
2020-01-21	LEHXZ46HFYzQBrC.exe	exe	94d42d8c67684b1b20aab79bd2f26ebc6b36d6e9a3c2373eea5c7a6226775258	n/a	Heodo
2020-01-21	qwt0tEhg2KKvCLmxJ5H83.exe	exe	073cdca4c58ad02faea6d9c0a6bc536b86af9094538624b601ebca8607f1f4ed	8.33%	Heodo
2020-01-21	SZ4LLC13MFdXyvUE3.exe	exe	0f17f3f67dd9c1f8e2607fae6ff07d4f5c8afd729fa4f6236a9601294ba8eb63	n/a	Heodo
2020-01-21	MFMaqSnO6nM7xptNc.exe	exe	f874b531ea8cff169cadd58ad107567c27bcfdb4c4274a67fed89c5654fa8c12	11.11%	Heodo
2020-01-21	8b0u5Xp0bgW.exe	exe	7ac089b430d5c3495075a727e687968b43a421f8b78ee496af6509061289e418	n/a	Heodo
2020-01-21	tYgvsgDNGEdx.exe	exe	fc78d00ee03c69f8631c00b4a022b1ada34852b20210c1f8e649df43a0648a2f	n/a	Heodo
2020-01-21	MC0fyDsoX79YtAbiNx.exe	exe	baa1530db27557958f492583747163f4bd10c42f12f423da7ce689fa43b279b2	16.44%	Heodo
2020-01-21	R47kJWv47wR3uMhVgw80.exe	exe	a1a4b467f3785abc231f54f9fb5397a82b192733ae35965aa148b7aa04c891f9	n/a	Heodo
2020-01-21	45tXLd6P494kHMDJ.exe	exe	8a679a3d539017ffe5cd93271f2a71df90f43bf4563e317936c2e16a31ca7cce	15.49%	Heodo
2020-01-21	Fzovw9e8ROy2MTmHN.exe	exe	6f1d8688eb7f02040a79c35abf5a1bfa3e7ba191cf13ea607467ec6a302f856e	n/a	Heodo
2020-01-21	4ekm4thmwTB.exe	exe	8d540f22d1332e63f63ef535d754b61a16c021d2f18f60dd0f0c7c44d1edcc8d	n/a	Heodo
2020-01-21	DpHBOuIye11aStLm1Ghs.exe	exe	eabc8a628634a871fd0cce48aca649fe4b37a91f164f2af3a5452b48d347c9fa	9.72%	Heodo
2020-01-21	JGBU6sAjXjE39wy9ZNIo.exe	exe	6477361017bfb0677f8d4585f0598ab3adc742ded5b2a879293a7b22ead5b81f	n/a	Heodo