URLhaus Database

You are currently viewing the URLhaus database entry for http://luxuryflower.net/wp-content/cgNoUgY/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	300879
URL:	http://luxuryflower.net/wp-content/cgNoUgY/
URL Status:	Offline
Host:	luxuryflower.net
Date added:	2020-01-29 06:34:08 UTC
Last online:	2020-01-30 22:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (Ticket DCU002284097 created on 2020-01-29 06:36:05 UTC)
Takedown time:	1 day, 15 hours, 27 minutes (down since 2020-01-30 22:03:20 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-30	r.exe	exe	66343531b93fc8127d72b827c20b53c80aed8413ef80b2ccc6611550842bd5fe	16.67%
2020-01-30	vfBvS45Xva.exe	exe	4fdcd00e37fd92466f46d1ca5a36ad4216a6476335d66bb0c7b05a33a66109bc	16.44%	Heodo
2020-01-30	ksai.exe	exe	2745c334ea2b868cad39cf26b7efa29e5e6cab8de3ae19f7c64a93b171c4c91c	26.76%
2020-01-30	y.exe	exe	79567dd789ee558fd60540e1640c4c0db335495c84c46c37f71ce73839431230	n/a
2020-01-30	onR.exe	exe	3bbe129d0a9fb94cb6b806528e6a7366a8861df27e0d27a32eb87e96eec8fd46	26.03%
2020-01-30	GGOD63T2oqsmjsb5.exe	exe	0f3952a43692fc744e86f3e5aac77d3ef683386e915bc02b92e9f35edf54a953	23.94%
2020-01-30	CxskapeemaHnWOCL.exe	exe	3adf456068d0ec95979d2546934685234e05e6788dd01f431d5c1244d9311fa4	23.61%
2020-01-30	H9aUYUiG.exe	exe	d419120361cbc70cc3b8b00b4a31449060185260c6bf9cf8bac03cd09d108ef7	24.66%
2020-01-30	Jaah.exe	exe	42a0d4c28fab5fb0bc46c8344669d6c76f3d9440811209cafec503ddc49be348	n/a
2020-01-30	lQSVcLBV.exe	exe	940b66a221696baec3af1b37df3fef80bb57b5139736e3407d0c47c212173576	18.06%	Heodo
2020-01-30	DPgnHYYkpzFMFlXh.exe	exe	b015902503cc42ef8484d9db640c04000028fee7b6371e791ab0d7bf66f926fb	15.28%	Heodo
2020-01-30	8J9Zkb1hvn550.exe	exe	0b127d33b217083ea7d009ec00208e080d39437d229b7cfd04b327fa102f3076	n/a	Heodo
2020-01-30	MAtta8ettuU9yoy.exe	exe	1bea6e0e41f0b80585ce713f459c209125c94495888fa14956e3969588087926	n/a	Heodo
2020-01-30	MiP7LR7j6iHctxanA.exe	exe	8f90526ff9b1855407d9e152dfbc2ebfadf95d63bd5df48bb6744bdf12e90796	13.70%	Heodo
2020-01-30	5v5.exe	exe	ec33d8384f3fd6b0f665fc6c1e489791423aabaab16ba01cacfbe86c2eab4bf0	18.31%
2020-01-30	ol4xyGNJ192jB.exe	exe	ed55f215231952c00bccb067621295c01deecb3606d7af2eb9c96d2f6e949b87	12.50%
2020-01-30	cI9GV.exe	exe	292230934181d70772edff95b5d55487ccbf2713c2d4b791e79ba2ce3f3cda91	10.00%
2020-01-30	m6c.exe	exe	99641e3eed840d1edb7e650270145fa841af3458c90e013eba8f558fceb53b2e	8.45%
2020-01-30	hbjHqY65Vzu.exe	exe	bc97ba813ace5faddc64fdd65673acbefe4222981e4da8c6154aa9159f8858a3	n/a
2020-01-29	I5Og2xBKP8DUKDV44Ppv.exe	exe	777d5999435bc306ecef429d7c3353fa36944e0b9911e03d718433edd504d6c7	7.14%
2020-01-29	xFi4a6lxjh2E.exe	exe	abff750cc9d33fc4e5e1f16f0c1727359fc9eefe0d9756f26f276dd63a7d1151	12.68%
2020-01-29	OmLhpcT5z6Qvtwbd.exe	exe	caf31546a7ae90a62b71e1e91424a48b59b53c71e39bebe4529222e9cc066164	n/a
2020-01-29	Uoqrx25z7qrfbPIJrKD.exe	exe	5b26e6e78b78aac155d8c650e000287c3b4ca5d4e4aaa0e398ba1459b83419c6	9.59%
2020-01-29	if9fYnC1vv6Ua59.exe	exe	41df912bfe48b4625de0d3e895f6d806d2c56d4f5de47d5e9556f22a735018d6	8.45%
2020-01-29	zon5Gb6YWjUehcAg.exe	exe	25049dad6df9de531c3a0e7c97892db235a2155094824e09354be95266e8e68f	n/a
2020-01-29	5tsLaOnTjuWWVsY81k.exe	exe	e2352d1d82a674d8f1a5c574b44b7159767ccdc53b96b0b797068c81a5eb4313	7.14%	Heodo
2020-01-29	L7QXZQg7rT5MyFobo.exe	exe	eec8f3af53078c0b78902710c735d4c50f7c9f12b5bb54f316b3700183843292	8.45%	Heodo
2020-01-29	dcYpTs.exe	exe	35093e53a9f03bae23d19cc644652feb69d9f0e41c4a804db7a5d2831c3acc83	9.59%	Heodo
2020-01-29	fQBkxq84.exe	exe	ac390ec30a61362b58cd28407ff5aef1380a67173779f3e1a9e731aaed6b4169	9.72%	Heodo
2020-01-29	nGYy9MKqpaY.exe	exe	19fbd0c4d767c2f517afe23394269c27fce3e93e4c56eae931677795667b6aeb	n/a	Heodo
2020-01-29	kQlTEOaajA.exe	exe	403ea9ef11474aae2296ce72375ee8acd520f9eccd8f52698cf1e724f822160e	n/a	Heodo
2020-01-29	yeTLsWCXeD.exe	exe	f564f37be23f46b572047420f0e414ab936489f0c70407d4956b0bf40b52fdd6	n/a	Heodo
2020-01-29	Cwxj4zzrpd.exe	exe	a63f5fabe50e37059fa9e51f746d9cf2ae06ef13bf724c245878f070c97d7642	4.17%	Heodo
2020-01-29	foDsXlXgYvzS41.exe	exe	50265fd4821eb5a066b3b346adc006134117da37d86d089f6f2757b439a750ab	16.90%	Heodo