URLhaus Database

You are currently viewing the URLhaus database entry for http://www.xnautomatic.com/gij0w/dxr-fqb-008/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	294971
URL:	http://www.xnautomatic.com/gij0w/dxr-fqb-008/
URL Status:	Offline
Host:	www.xnautomatic.com
Date added:	2020-01-22 15:32:41 UTC
Last online:	2020-02-19 10:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	unixronin
Abuse complaint sent (?):	Yes (2020-01-22 15:34:10 UTC to mazhiqiang{at}yunify[dot]com)
Takedown time:	27 days, 18 hours, 29 minutes (down since 2020-02-19 10:03:15 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-02-06	jz8.exe	exe	f817a6b223bfde2cc33ca36d13bbb32d57d73f5c889db5ebe1793bdd083b1b6f	6.94%
2020-01-24	jz8.exe	exe	f825123d184df9fc3a9bae7f5dea8462b6915746d623d902b6ad5e52fa96be53	11.11%
2020-01-24	w9osi44.exe	exe	ab459aeb7e2acbbdc92a28500ec7234d91682e97b1288c091b9dadd52505f380	9.72%
2020-01-24	kas51ue2y9416227.exe	exe	ac52a0c8b093182fd5c8cb062b71f28bf6c952536443b36de92eb1316d8932ab	15.49%	Heodo
2020-01-24	pu596161807.exe	exe	c2ed1e5a4c9bf4b5fabbe397982dbf2bb6136ec30f6fc028b2399cd00a9ff8d1	14.08%	Heodo
2020-01-24	34d60663254.exe	exe	0e25c75a97af044f142acf094fe150e806d94ceaf2cd1119b932df1b9fc6bdef	11.11%	Heodo
2020-01-24	4kql6goa00711650083.exe	exe	e192061d600e8f6ced2d48c26b32af2fcfa18cb97f564bc1d3d71e7456a4ee09	11.11%	Heodo
2020-01-24	j9w8ue86480391220.exe	exe	7a0cc4f218bfa0095364430a194dbf830c1f51801343bce436deab0783a197b5	14.29%	Heodo
2020-01-24	niambb270414.exe	exe	b134523478f20656574bca96ddc2924520ca9785d9cab8b6b15f872d3a10b389	12.50%	Heodo
2020-01-24	x7na29.exe	exe	bbed4cbcd570d202c7168aa298791e8e832d6d077c494278f88fdeba494f2d65	18.31%	Heodo
2020-01-24	gvwxsiv1a359.exe	exe	f2de10b51f4e7cffabf659fbcec529c5b3f0ed8f48625e1b37180e76a1aa466e	13.89%	Heodo
2020-01-24	ju78441449.exe	exe	e6d61a3bd74627bff83f92c4518c264fff6eb1d1f42c732835c37c3af6015b09	12.68%	Heodo
2020-01-24	b9y4sovs3287462.exe	exe	4de0745dd2884414dfd5384ea1c773a4644751d90a873361399de98d7a6d8958	n/a	Heodo
2020-01-24	xuwrz773.exe	exe	9871ef0139be5623f9a580a385a18f7b58428407c9867536db8ce375034c1277	11.11%	Heodo
2020-01-24	8nweiik7ih957.exe	exe	6c83890b19cddca0fb68f988d7c669c57cae4628252c6685cf70fc876cc6f255	12.68%	Heodo
2020-01-23	ckqxkakb472849367.exe	exe	c253fc144fcb7ce7842381015537252adfbc80b5af583e17206d55e54c8c69f0	n/a	Heodo
2020-01-23	plo4sf5074040078.exe	exe	c17b52a1fa5c66bc509e0def3fbdad1d5f2082a740eb727e45423ac69ff63cc8	n/a	Heodo
2020-01-23	yjku63v1wf589.exe	exe	b1a113c6d70cfc58cf40b4facfa93e909eb7219c4265b2294c1c9f63e06377d2	8.33%	Heodo
2020-01-23	wimevp0mc20252.exe	exe	cdaf24694cbe6c4b0464228a19d456afc49b5535bcd6d9805d99da9b221b02ee	12.50%	Heodo
2020-01-23	jkcugih1s6475229783.exe	exe	ec09ac3ebc4f08670d33554162a7119c150504892d150873b9c85ceda952deef	n/a	Heodo
2020-01-23	zyi9p5114816800.exe	exe	a6d4cd67be9a74dffa41ff5a319883ebc6d3c0aedf1ac2810785e114e5270953	18.57%	Heodo
2020-01-23	qelk029004.exe	exe	66df4a289f6b88f81d2d34386341ebf4012525bb1280e52b3cb0e0583b516410	9.86%	Heodo
2020-01-23	5e69.exe	exe	dcd52666549489f076804e67acbc3ade801e245c4f94a8b229772109d9b9fa55	8.33%	Heodo
2020-01-23	ru6dj82.exe	exe	f5631042a3bbf8fac13a7c56d9cec6c0190fc5e858f89eeeebba84d1deaaeac0	n/a	Heodo
2020-01-23	gzhncp8w6489.exe	exe	22eee98f509f24084137c26a2336cd10fca55d0964f67145b98ea93b923d4b40	7.25%	Heodo
2020-01-23	6lj3apd9j0567515.exe	exe	e142ab09dc6021c9ff0409bae2adcdeccf7d96f9b0d79396b9921650a084cb0d	14.08%	Heodo
2020-01-23	hl319357527.exe	exe	7ae91f32cdca7d854d19439bcff58e2707cfa3cabe1483a16892464dddd3adfe	12.68%	Heodo
2020-01-23	ye1bj0415058.exe	exe	83a9e359dc4322c75bbced3b9d9c254089f1afe739f31b7fcf8641b2e25eea3d	n/a	Heodo
2020-01-23	gsl4.exe	exe	5fc2e928851d6c7dfa044450291a49b44add7fde0101bd372771ec65cd384b2d	15.49%	Heodo
2020-01-23	4ds4.exe	exe	29eac70c84e19b37ba04fa6f67f5dd177bd42956baf399573db11bcbd817d2e7	n/a	Heodo
2020-01-23	kwzz5768409666.exe	exe	01d1e9cd7a00b5005308558f14ae6b27f452840238ce3f4589f9f99c9c143f5b	19.72%	Heodo
2020-01-23	bm5326.exe	exe	0189037f4d398799e88abfbc8c2721bb9a749c4cf655bfe4a429dbaaa8ff1eb0	n/a	Heodo
2020-01-23	m89g83055.exe	exe	b6f2283951ad3704839d81f4712bdce0e3bc8ee6d2e93c3dab9d8d0976f6622b	20.83%	Heodo
2020-01-23	rqi6.exe	exe	c344dbdffad5a8a65d076dd7576c4d676ba15e94702b6b8969b148217dbceb5a	n/a	Heodo
2020-01-23	sdrhyxey24250351.exe	exe	7f9f9ad54683cfac6df8d51d095bc0b762f55404fa72a208e538ecc27ee8a968	12.68%	Heodo
2020-01-23	n75342168388.exe	exe	c6a669bd011f41ca3a232b7227b1e1185bd312a88b07308849ca63852e5f3c1c	11.11%	Heodo
2020-01-23	x1n42364.exe	exe	a181697d4bd677882c89c2846d73d933fcad7d0155b1dec9d39da60539d83cbc	8.33%	Heodo
2020-01-23	8qzl05apf4666254.exe	exe	731ccc35d35caed665a73e0a053ca03010239982dfbdf84b44d5d622d92dc028	9.23%	Heodo
2020-01-22	yjxkp4550767.exe	exe	43b518227ebbfa6eb0e867315cd8ac6ab92db9f522c67fcc9abc1b688a5db14d	11.11%	Heodo
2020-01-22	ds9jn421221.exe	exe	eaa16efcb17c901e25feebd1589baaac7c16a11da24cc0d01885ec590ce0c911	12.50%	Heodo
2020-01-22	fmqzjy9137796449.exe	exe	80fc0617f2d846571ec3b3e5de540621ab02a494300d4ae17a03bed54c102b2c	12.50%	Heodo
2020-01-22	xpj1th4264752573.exe	exe	16c8d42770d6a7937c69b5c45f0df037e6a15f9e812c2143e6daa3925ff1840b	11.27%	Heodo
2020-01-22	x2lvan639053.exe	exe	3bbe7bae6378b40205842cfb01f80e65003de826e2bd98a41805164d30f481c5	n/a	Heodo
2020-01-22	vwne2d2cn737544856.exe	exe	211afeb4add87635edcf39c359cd8df51e3fd54ac97ad7cff75f1bd1d549c0b6	n/a	Heodo
2020-01-22	80uv9e57680587.exe	exe	ace59c27ebb05c1ccaa4ee588adc94d7ac31dabf477b0af8ae540b2e34fb8ac9	n/a	Heodo
2020-01-22	e715157768.exe	exe	e7bd1a79c06b3896ddd971d17d69a7655891b1f6550fb1ca5534f4e65902e227	8.45%	Heodo