URLhaus Database

You are currently viewing the URLhaus database entry for http://www.jalanuang.com/wp-content/cfxs40/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	300200
URL:	http://www.jalanuang.com/wp-content/cfxs40/
URL Status:	Offline
Host:	www.jalanuang.com
Date added:	2020-01-28 17:48:43 UTC
Last online:	2020-02-07 16:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-28 17:50:08 UTC to abuse{at}alibaba-inc[dot]com,intl-abuse{at}list[dot]alibaba-inc[dot]com)
Takedown time:	9 days, 23 hours, 0 minutes (down since 2020-02-07 16:51:05 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-30	D.exe	exe	3bbe129d0a9fb94cb6b806528e6a7366a8861df27e0d27a32eb87e96eec8fd46	26.03%
2020-01-30	vg6f.exe	exe	1bea6e0e41f0b80585ce713f459c209125c94495888fa14956e3969588087926	n/a	Heodo
2020-01-30	I8OBzCs0MeHDVN.exe	exe	292230934181d70772edff95b5d55487ccbf2713c2d4b791e79ba2ce3f3cda91	10.00%
2020-01-30	gV1HIQET9Hvr3Ii.exe	exe	bc97ba813ace5faddc64fdd65673acbefe4222981e4da8c6154aa9159f8858a3	8.33%
2020-01-30	RxgJLknvqP.exe	exe	863136b86bacbf4df0b8dc3545a527437baa3e83e0902d12271a21e318d62fdf	8.33%
2020-01-29	AN2S2.exe	exe	abff750cc9d33fc4e5e1f16f0c1727359fc9eefe0d9756f26f276dd63a7d1151	12.68%
2020-01-29	jGQz7KjNFJ4jSjm3.exe	exe	25049dad6df9de531c3a0e7c97892db235a2155094824e09354be95266e8e68f	n/a
2020-01-29	VGbn6w1kpf8LAhCXO.exe	exe	eec8f3af53078c0b78902710c735d4c50f7c9f12b5bb54f316b3700183843292	n/a	Heodo
2020-01-29	jM.exe	exe	f93748ec33b083a0944ce53e07f94d4c8eec5c807d6fde308119f037545cbbd6	11.27%	Heodo
2020-01-29	AOArrc.exe	exe	32d28b9ab5392c15aa8b6c0340595a6e83de0f2ad3afa4c87795ac20b29e7d89	9.86%	Heodo
2020-01-29	3yknOv7keXDbwTe.exe	exe	63d8bbb4e5427165a3861e3cf52d4dbc18f8381653037e0a474b73fde02ba153	9.72%	Heodo
2020-01-29	xfVnPCdo9W8W24m70It3.exe	exe	f564f37be23f46b572047420f0e414ab936489f0c70407d4956b0bf40b52fdd6	n/a	Heodo
2020-01-29	6Cxex1oJ.exe	exe	a8f689d0c07bfe996707fa9d4768b211b545065cdacdc73de1ac0f9b33e9d326	4.23%	Heodo
2020-01-29	yT7LjoHWFQps2J7yyd.exe	exe	50a5f378df4eee8c326b5a81fe96fab21d8f71b7b7237a69264b1e48d9a546a8	4.17%	Heodo
2020-01-29	kxstKK6z.exe	exe	3a921fbb34e4987e8f7e30b53f508c09f456bb94f218356a38a896b51e48cd58	n/a	Heodo
2020-01-29	j7l.exe	exe	72c78b289069b9d7cde81c5ef9049bd82d97d30ff4b98d509db7de241e05291b	15.49%	Heodo
2020-01-29	9jTK.exe	exe	64b52812b11336fbd180a2591956078d361479d7fa27b83e774dbdec3a7ffd31	n/a	Heodo
2020-01-29	DuUp.exe	exe	9021f6312515b96301caf19b556b4538390975fe57e731609286950fe33cf1e0	n/a	Heodo
2020-01-29	T0hL0m09fgGz.exe	exe	df23a5d4d938196e44d2824dd62a4262c040f25b5469e0e9ca722cb0c3024aa7	13.89%	Heodo
2020-01-29	OaUq9ayKa3g0yBBg9isT.exe	exe	677638265076a0902603ae5d5f64c2fed5c5dfd58375030e77b43f1aaeb77030	n/a	Heodo
2020-01-29	uEOOc0r94MDqWZoOLb1.exe	exe	0e960b99ded91f2563e148d355dcd953f3c196360baa5c26fe8e5fdbae6f0395	n/a	Heodo
2020-01-28	sEctG2iyQXtn.exe	exe	9a4832e59fbd792194390744a9545227586529e4358474ddf20a52ea3c0b8eb6	11.43%	Heodo
2020-01-28	U.exe	exe	07c09973d0e8de6a14f4d69ecece6a2df954b42c3427f1e5aac9cd5fec0e59b9	n/a	Heodo
2020-01-28	RqBssMzQE3ONe.exe	exe	c0b6f3a2363d35629937f78e5af4cd6177099f4bacd06a6ee428e12e9d053754	n/a	Heodo
2020-01-28	1AyOrQDFt23bI66jgW.exe	exe	438ca3f087af9c6a015d362d986da85918a31a3e72ac8c07e64f47ce56acbced	12.68%	Heodo
2020-01-28	R8iTHAKzfEFqDCd.exe	exe	ee2c1d1c57cd6b6b66755832e317c83ccdcdc222ee1abbf290b7f0d6c961200c	n/a	Heodo
2020-01-28	KNDuUeGRKaIv9Pv6.exe	exe	9fed2ce18686717d87fe515e0b392635672d27e9828d147759ea4212c8f9cb07	8.45%	Heodo