URLhaus Database

You are currently viewing the URLhaus database entry for http://www.kongtoubi.org/wp-includes/hiLAx/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	294843
URL:	http://www.kongtoubi.org/wp-includes/hiLAx/
URL Status:	Offline
Host:	www.kongtoubi.org
Date added:	2020-01-22 13:32:56 UTC
Last online:	2020-02-05 09:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-22 13:34:08 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:	13 days, 20 hours, 14 minutes (down since 2020-02-05 09:49:03 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-24	uQf1to6cOfkX.exe	exe	de91ace8fd908cdc9626860e1fd6bfcc611a8f2e786579f6ed32445c5c0ddcc6	14.08%	Heodo
2020-01-24	Bk5ZOP1qQK9D.exe	exe	98e27fac09f717e28b502d29d9a59e12156d1dff3e173fd0f6b507e69d88b4d5	12.50%	Heodo
2020-01-24	AVGdedFu5vi5.exe	exe	75e040069ea45d90235e552404b24f2da9fda20b28784cec07e2384da413a7ac	9.72%	Heodo
2020-01-24	XQIC1a.exe	exe	4a107012830698031e1502930f1de0f18518ebd8d602eb94908011311e2fa085	9.72%	Heodo
2020-01-24	jgGpYs3WaAhyn9NN.exe	exe	e88a8bc072c606f15bfe5638acd7d0bf1817e088e64669b25eed9ffcde0ec84d	n/a	Heodo
2020-01-24	xwoWhll61yTfFyr7ocq.exe	exe	5e30cb313f85bcf0e02a7d892b5544e606613d251fce5f1dd890f71c4b70b24f	n/a	Heodo
2020-01-24	WfSuS4KBn.exe	exe	245550c01a11da351630ae197bba4a168d26f1613d4c8dac3d8126f027407496	14.29%	Heodo
2020-01-24	L5XF0LNt3sVzxpy6.exe	exe	64bb40b371c0c9668ae82192c4cf5adb09dad25ec0f8c844f818a66ad4d1e57b	12.86%	Heodo
2020-01-24	BDNPJEvq.exe	exe	2011d56b088a52caa03eecea3351ce3c11ae8b107567cb8d9cd51a1822d41a1b	11.11%	Heodo
2020-01-24	KSnVJWggP.exe	exe	1e6bd1cd56f4b084eb056bc7a4994b9fedb3e6406145dd2185e0a1cf986aad34	9.72%	Heodo
2020-01-24	IxJC.exe	exe	4726527c46994cb045f1fbadecc0100b1819253436c733e40b33868f3f7ae984	9.72%	Heodo
2020-01-24	ykFzyP7awQz8L.exe	exe	646dd82c5841edb48f53571228ca942f959a21e1dc2fc178549b93c22532615c	11.11%	Heodo
2020-01-23	zMSNz37HToSt4DHP4PR2.exe	exe	ed37a918cff242c521a87b51e08d802ce1f74ff71f163ed49e8bdcefb6d12fcc	8.70%	Heodo
2020-01-23	eJLwWmnyMWFjmke.exe	exe	207b472d42a154104e25287397ec705717e170a111a36035b3c94f8954fb5dad	n/a	Heodo
2020-01-23	6D6uQQaA4LduA.exe	exe	7a5be6c0a6db6c0c91aedab7c8e7cdfb61241a0982ff455804db329368a6779d	n/a	Heodo
2020-01-23	SeFJPSwqZJ.exe	exe	7a74a6b85fd504ab40c006fe26334d7b4aaef84c743d19512222a0702dff1702	8.45%	Heodo
2020-01-23	3YbUjAEnIsjh0l.exe	exe	01507d8712e585c6103b361f0b17a73961b3100dd554a89bf9785d2b9fd184e9	9.72%	Heodo
2020-01-23	kWeZdr8.exe	exe	b0cff866fc123dd8d97e9c70dfeba637ee9083ae10fef971a47344bd01f4bfe2	8.33%	Heodo
2020-01-23	QdJWhWhRe.exe	exe	85e3fbb2c274564eaf5e29c26c9b9e63fa72110a10c11f883d4ab4e7e73ef6d0	8.33%	Heodo
2020-01-23	aMWbFyunzlLV.exe	exe	26f2cfc63ef326fa623c5ca5c1748c70bca1665a98cda42e12b2a3b9c03247dd	n/a	Heodo
2020-01-23	nhCRq.exe	exe	83716347163d8842af8d3c91b15d635506ad71407f1242bf948c5f1c1497ef4a	7.25%	Heodo
2020-01-23	bpAuGywVrpjgpf1BjTCd.exe	exe	ec336acb546da281b6f65e1de5ca2c153b32c6699ad7a9477764daef4bb5758c	7.04%	Heodo
2020-01-23	pexUdq.exe	exe	6ae47cfb2f321753fa12f763e977dcba63bbd1780daad5ad3180ebda22c258e8	n/a	Heodo
2020-01-23	ER0c4ddyMo2nSlYCG.exe	exe	8191e198e8613863e44b6b6f11a7b799bcbfdf0d4981385838818ba4a5af678c	12.50%	Heodo
2020-01-23	hpF1KQe9uD7c.exe	exe	42bf201df50b7de97bfcec960a8a2ed86e3315f28105140d7231768dcdac9f69	11.27%	Heodo
2020-01-23	vBOaOQ.exe	exe	ba1864815dfd004b1ca60e16a51238bd8e1075d8cca67537ee03545eb13088aa	15.28%	Heodo
2020-01-23	w5EJKk.exe	exe	2628f40b54102395837c26d89ac124b28ee954073b705f81d4dd58f41f87fdfb	16.90%	Heodo
2020-01-23	yFtVGAfCuqvhASsWN.exe	exe	17267f4c94a6ea67a441f34313ed0aa394465de600e694922095fcceac9ba025	17.14%	Heodo
2020-01-23	r6E.exe	exe	14a07dfb3aa03a8f1df2714bd70e5fe127678689e0311116ff17a3373c5eee12	13.89%	Heodo
2020-01-23	XQd0TYkDaSwQhpvT0bf.exe	exe	9808e71b8c9698ce2b92033d0d3ff7e61ace74a403b2be36f51fffd7025f6211	22.22%	Heodo
2020-01-23	bcE8.exe	exe	8a0b8b9993b26cdef31577f92dcade2f3422b08c32e858c608259f48b0bdafa4	18.06%	Heodo
2020-01-23	2VbY84AHDW5Ycqrwbo.exe	exe	af2c2aa8ec53442eee3978dae156a18b4d2015f3835b80f3a7ebc66872c42d01	n/a	Heodo
2020-01-23	2j8XMkhDu3YLCM.exe	exe	e2f254a6b730b5ae77afe10256e85219b38c89099e1bd0da32cefd383ae1eac3	12.50%	Heodo
2020-01-23	yv.exe	exe	b4b6bb885f838be7fab46e10eedd56e6324422d962f44f57db6b521bfa81e825	9.86%	Heodo
2020-01-23	2a09adUWQi6bjC11bHa.exe	exe	a2b89349aca99e683f5a14bd58c5964028842115e1497d01e255f225945501df	8.45%	Heodo
2020-01-22	BvdXrOy.exe	exe	fc8fda6bff63ea8cdf3c7e0fed41046b4b4570c50ec012cea42b51bc1e9b0758	8.45%	Heodo
2020-01-22	vtHP5TyFRSVD.exe	exe	efc6939db8bbb34c247915ca49c92a1e65eab1dc69f89f89933c7bb6928a4a62	n/a	Heodo
2020-01-22	iDhpjthv2QVbms1v8.exe	exe	5006e7228e0480948e4eef65736b01b1b7b453326beb65edcf371947a76b25b5	12.50%	Heodo
2020-01-22	bfyo2.exe	exe	73975ba71279c59f926d43b022ec695cffd1e777024ec9893a9c42ebfed3e80c	n/a	Heodo
2020-01-22	SfUoKVnTKmTZk.exe	exe	f02f4e90748bd3755c5f9586bea51010748894fd41a7662d969f118dd7b67ec3	n/a	Heodo
2020-01-22	NzdF.exe	exe	d4760eb755f89812b7448b6eb1cb7cc03cf5d9f18981eb3e82fcff8128bae7dc	12.50%	Heodo
2020-01-22	eEbQOt8x6K23iqy.exe	exe	981ded76f1845a62790716c4f38aa730559eb03a1a7dc385b3eb585662a6725b	n/a	Heodo
2020-01-22	hMBh.exe	exe	5336d54699c5f21886c781439f09251b6c2cfc6f88f7c25a8ef3bcfea62ccb79	22.54%	Heodo
2020-01-22	zgz.exe	exe	d45b94ebd758c9656242d3fcf9c0ded2a4b951f178488c05afdc12c990287fd0	n/a	Heodo
2020-01-22	HOgef.exe	exe	d7b5f98e6a288f5687e390b0d7b51baf761c06df5e9140bd8f90fcde2c5ee42d	15.28%	Heodo