URLhaus Database

You are currently viewing the URLhaus database entry for http://blog.jheaps.com/wp-content/KL52/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	298824
URL:	http://blog.jheaps.com/wp-content/KL52/
URL Status:	Offline
Host:	blog.jheaps.com
Date added:	2020-01-27 14:29:12 UTC
Last online:	2020-01-31 04:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-27 14:30:11 UTC to network-abuse{at}google[dot]com)
Takedown time:	3 days, 14 hours, 10 minutes (down since 2020-01-31 04:40:53 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-29	LjY2m90Y3w.exe	exe	edca6e7b77f8e5f0cafa03a5386d65d08e14907939dfb6506269b0c63dfd31ee	6.94%	Heodo
2020-01-29	LjY2m90Y3w.exe	exe	edca6e7b77f8e5f0cafa03a5386d65d08e14907939dfb6506269b0c63dfd31ee	6.94%	Heodo
2020-01-29	rH1XQwXGAiJWIH25UPTD.exe	exe	9efd3277c65ce50e44deac29bbd5da3a31d823f043dc677fda9c3c0913dddf75	11.76%	Heodo
2020-01-29	wMz16xUcyF9.exe	exe	32d28b9ab5392c15aa8b6c0340595a6e83de0f2ad3afa4c87795ac20b29e7d89	9.86%	Heodo
2020-01-29	Bk7KMVQQPrCAjb.exe	exe	86a9f8dfe8209bb93dbabef1cdf568148cfc3176a14d157f632f389304248d68	9.86%	Heodo
2020-01-29	h9pSs6qfrwGWs.exe	exe	290f0fd8e0189e869f0e59354f95d5211d73759b067093b8d296b9f846e7b9ba	4.29%	Heodo
2020-01-29	eUv10YWllvudVp3jl.exe	exe	0c690545c68dde82e33f07fe6ada386f2c9b119d5048fa835d8bc9910c6971f2	4.23%	Heodo
2020-01-29	haJ3IPR.exe	exe	292f6929d799d35e9edf7ca4b1404262227bb2f56738baee4b7b97cb2edaee6a	4.17%	Heodo
2020-01-29	5.exe	exe	167d83689540edbc7a88caaf05b7bacdf9bc6d55182de857e0bbc6f7e7a5fee4	16.44%	Heodo
2020-01-29	t.exe	exe	9253058ee611cd0f710b81386f43985d3b78878957b465e94545d8d93af490bb	16.44%	Heodo
2020-01-29	WNRJQoN4o8b2MbiQKDMv.exe	exe	86c49836b5438860a147850b40445fcd1204d5247113d268102443b90e41ecf5	16.67%	Heodo
2020-01-29	21MDadGeE.exe	exe	4d65e28204d34d00c0719e529cbff9651ecaeb0c5258a09a7939321cccf457d7	12.68%	Heodo
2020-01-29	rBeoUO3OGLt.exe	exe	df23a5d4d938196e44d2824dd62a4262c040f25b5469e0e9ca722cb0c3024aa7	13.89%	Heodo
2020-01-29	ZwnnPO1Wthl7p.exe	exe	252baed101c658eae929f34be2de59156ee68c262280400ff4ace65ac4a903c2	15.28%	Heodo
2020-01-29	5tF.exe	exe	688542dc4d2618a7a1a580d5e3d5c9ea9d5e14e50a305f2b78998b0b35dfaa35	13.89%	Heodo
2020-01-28	w3RbKVqjUYiKI.exe	exe	9b1794c6f85ce53fa29119d908d9836cc4cd222e0ad106df76cbf50824b461e2	12.50%	Heodo
2020-01-28	gAYOuq.exe	exe	00592df02f0611075afc243edbc27e434ca3bd5a190222f2fe950c1a6abefec8	12.68%	Heodo
2020-01-28	QYFEh7WuOsU5UUvgaW.exe	exe	c0b6f3a2363d35629937f78e5af4cd6177099f4bacd06a6ee428e12e9d053754	n/a	Heodo
2020-01-28	NT5O2gPFeq25PtOaP.exe	exe	438ca3f087af9c6a015d362d986da85918a31a3e72ac8c07e64f47ce56acbced	12.68%	Heodo
2020-01-28	VMysiWH8LCP7aqrj.exe	exe	16fa06390c90750e90fe76bf0bc59127d4d71cbbb7cbc9841ce894ed4a9db183	n/a	Heodo
2020-01-28	V6hOiJ.exe	exe	ee2c1d1c57cd6b6b66755832e317c83ccdcdc222ee1abbf290b7f0d6c961200c	9.72%	Heodo
2020-01-28	AqKi2d.exe	exe	2660133cd1227f4d3b9cd19671d7f48c464529a56750de175d41eca0bc820725	10.00%	Heodo
2020-01-28	93JEpBTke7FY.exe	exe	759f7883e4c3b89845eb278a73e0fcf36301354913d9fab3dd5383682d9f5fde	18.06%	Heodo
2020-01-28	HKmX6H.exe	exe	28fb6b671d5efcf9fd0c1478280e2a8a8158ee8db6a8f3f200714894be242ab8	13.89%
2020-01-28	TnRGItu.exe	exe	bce99f7c5e60bb8a4cb8eeff5f8080ee221d8b29c64023d86fc0fc9fa410e54f	12.50%	Heodo
2020-01-28	VY4QbDrpft7ffHewHM8.exe	exe	591dc8806ae77f2c92243188eb317d1e3226782e82a6f1ea245de0d8e351e022	11.27%	Heodo
2020-01-28	XLLZSAQvvTKiK7jW.exe	exe	3e9f6a202a9cc81e2df0c4c9eafceea2f4be322f2279f905ddcd12fa4b1d26f8	n/a	Heodo
2020-01-28	fSJ9SSutThIW7WGexsw.exe	exe	11e51f8397979e2abd34a60f5c78679475790bb6412b3d476693848b29bc9e8f	9.86%	Heodo
2020-01-28	qymmpjJYOZpwhBaa.exe	exe	77029aa643cbff621f642519d58daaf7fe523216cc933a1ddc6e485293d10f26	9.72%	Heodo
2020-01-28	R2eQSO.exe	exe	5d1d9c83357ff59be19cb43f27d1273e6032f55527d348f85aafbf5e94cd3eb7	n/a	Heodo
2020-01-28	pFiymxoke.exe	exe	64803d85f1cac3b1d4bc2defa3e4f0ee2dddd95eacbf0ad693d69f9a770f1874	5.63%	Heodo
2020-01-28	5dLv0rgRiq67XE9.exe	exe	b9b2560ba5b3c7b3e0f2104d9f64f6940c2608be3bc45f490688bc0a24a69869	13.89%	Heodo
2020-01-28	pjkk.exe	exe	967d8dae5b4560a14ee53ed2851596c886e9db1d76b01b9ac2d1d49fb54cc2e2	12.50%	Heodo
2020-01-28	ODyGtL5LDhT0Wpwp.exe	exe	010fd1c3aff9b1ccd1ad11edb2e0a2ac424def4ffe40ef8f70aac725618e3837	12.68%	Heodo
2020-01-28	Ut1k6UL3Cl10TFVBLW.exe	exe	256b5ebbe58b4c1c97a653e6d32ecd60cbcff53fbcb07d50c9160ed837540abc	13.70%	Heodo
2020-01-28	ACv2.exe	exe	beeed0edac946e2b79fe424dd31f1c6807ca97bb00730e10637249106d465a8f	13.70%	Heodo
2020-01-28	0WKXZWWqTmOaj.exe	exe	29db8fd647dac3da6a4864b8ab016f421ab449c296bd5667541dab46f09d5ed0	11.11%	Heodo
2020-01-28	laNALYuqqAjWZ.exe	exe	551bf91c1acec2fc5cc0f2f6c517eb7e789c88151f9acd274a7042f7222caaa7	12.50%	Heodo
2020-01-28	iCK0ZgFb94vp7ocjaGfh.exe	exe	473c1c6104440e3bbbe5e451f0a328348195a9e911f34e3aaa1622dafcc9532c	11.11%	Heodo
2020-01-27	ooOWbRcmJS6Uwps.exe	exe	d6f32add2a9513245c917513ab29b5adac3953899724fc2c69213248d7352866	11.11%	Heodo
2020-01-27	PbZEragoT96gYKnkkiUV.exe	exe	cf758aeb03b274534f77f8c65eeb20275c099c62c43d470bbba1d43dae95e62d	n/a	Heodo
2020-01-27	80UtYzCGNKDsDN3TwR.exe	exe	3b0014e226e16ef642a69ad3235582f69313000a1abf1c626d8f7e34108265a1	n/a	Heodo
2020-01-27	77ZLkxVI0S7xn.exe	exe	3ffbd72304bac582096268e2f741a393f1b7a85394082402647204cf8fc15c6c	12.68%	Heodo
2020-01-27	E9uBRc83BKj.exe	exe	917559463b7439ab685fb0b10b3da65137ecf5e3f7c0468ee7b33a5db27e632c	12.68%	Heodo
2020-01-27	3spN6w42d5AcVE.exe	exe	23441c3f7b3de3fc7722b69f71fe8fc461e1c275bf9b985c4437d4220f3aca41	15.28%	Heodo
2020-01-27	1PdIDSsigp0EJje.exe	exe	5327e491498beefe5971c175804adefdce68f466e8fb788b85cfe63d2c2df586	n/a	Heodo
2020-01-27	Af6ALTM4ZTV91s8aMoza.exe	exe	c850c2f45d9ee79e913ab05c308ec364495bf287a99311601c983364f80b348c	12.33%	Heodo
2020-01-27	G7MofQc0.exe	exe	478bdb31c809154a089131df36f6448bfd3280c203aed30bf27fa03784354aad	n/a	Heodo