URLhaus Database

You are currently viewing the URLhaus database entry for http://www.ballfeverls.com/wp-includes/ludq630466/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	301817
URL:	http://www.ballfeverls.com/wp-includes/ludq630466/
URL Status:	Offline
Host:	www.ballfeverls.com
Date added:	2020-01-29 19:53:05 UTC
Last online:	2020-02-01 15:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-29 19:54:05 UTC to abuse{at}cdmon[dot]com)
Takedown time:	2 days, 19 hours, 49 minutes (down since 2020-02-01 15:44:04 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-31	Xou9fqkDFrfD8q0.exe	exe	15f8f1ece966426f0cd630b6c08ddba3c02307eac4dc053e662c5e6d17ff8125	21.13%	Heodo
2020-01-31	RyoG.exe	exe	f39ab1bf97d9acc03a33a2032de8f856a2e0ebdfe4e933f82e39abd095c1710d	18.06%	Heodo
2020-01-31	1lCt5ZwpH.exe	exe	1bfd703ff7da092b0fef20b3091d0dc95d0731e03dfce53eb9e6dcc9a296eb56	16.67%	Heodo
2020-01-31	hQJu7Er7q.exe	exe	7ba0e7ae1438018c72a8e13c471547c05f0312f14b888f3ae6b2c1980692b9b6	18.06%	Heodo
2020-01-31	3JJf.exe	exe	fd8213b82bce41fefd68d3f851477ce5516b91578357fca7ca5b9d2c360c771a	13.70%	Heodo
2020-01-31	4LY2dQrSyHYw2.exe	exe	88df4f7b57d586cd881782f40f6d9e0916f0dc442a2dc1d178e990d4c2ee85df	12.68%	Heodo
2020-01-31	YhFqiteCd66XMSp.exe	exe	dd13d54ee85f31187a6440f21db51ef80df868939d6c9bd542b2cd3ba27e7340	17.81%	Heodo
2020-01-31	jnnAYckMFZ.exe	exe	f34d95c098f031069d6fc48484be088a9375426e6832ecaa34bc5da81df11098	27.78%	Heodo
2020-01-31	nYOT93h.exe	exe	395c0613518c8decf1d178fdfc048e64c0278f11f786b23858eebd4617cea828	n/a	Heodo
2020-01-31	oN5YuazYD3mKQ.exe	exe	e5363b75a74eaf9840090e0235177597f99c8eb9979ca6ca0f1e5c51a3629b27	27.40%
2020-01-31	Le5BJ7.exe	exe	88145014d2e2bf361ad448a137107e7f03cb85d4aa63211f573cc0d3c1edccbc	21.92%	Heodo
2020-01-31	8A63n8BT78.exe	exe	3ef3f40e35f6bf5ad7df37e7bc4d446e90f42a63e7f869b7b8577bf2be1c70bb	24.66%	Heodo
2020-01-31	ytbFwFoxi.exe	exe	1dc6a20c2aa10fa80d525546326aa1026bbbe6cc3e53a5a59cbae909c2a52a85	22.22%	Heodo
2020-01-31	NYnEAHKP3e4bhIiCm51.exe	exe	5f1f61aaa1cae49612ed230120ec5f869aa63981547f00c169d89f97ce69148c	26.67%	Heodo
2020-01-31	bVV9.exe	exe	f12d63d54fc40ddb75e8dfa5bd341b4b9f156867ada1e021877ef902d62ebc61	20.55%	Heodo
2020-01-31	UWuhNh2J.exe	exe	f4295c1e1158978ff27a49809f8676d7f1f215010efecf8ec3f040c81f56d6d2	17.81%	Heodo
2020-01-31	5xmf.exe	exe	4bfe37cf3373329ee2927964b9155b500bc12ba31176455d10ac34a94b37aca3	20.55%	Heodo
2020-01-31	ECUbmJnJcw0KGg.exe	exe	e02ffae79c8de596870f2d0e218905e1907110b5d513ccbd7053bf4a897b2515	18.06%	Heodo
2020-01-30	0snXXY8H.exe	exe	8d2e10026b099082a1d7d2899e31d7c32904aacece91596310fdbe5f1c6facc2	n/a	Heodo
2020-01-30	99AO0hR.exe	exe	4449638f066a9d33798a94380fd87eca8cbfac79b76068ab389be07aabc99870	19.18%	Heodo
2020-01-30	yz7YRdMTIo.exe	exe	aafeda0aef6b3fc3f2257f6bc0a68446b5dc1e71203f3c13c699be87641d5394	14.08%	Heodo
2020-01-30	CfWv4DDb17e0iJ7GnOlZs.exe	exe	6ef7901c8434ee338365914b432239b1a28f50ef8832cb963ef87648cb52d892	n/a	Heodo
2020-01-30	jphTeu4WCWQpAlnHiEVT.exe	exe	92cfd5bcba550ea8123d41b5d686a335720d419197c6d7d0940a6d47e875b593	12.50%
2020-01-30	oTVXF0Kj.exe	exe	5437a8e9afe8578510af2431e3c0e8be5ac43da96a924543a150b125cdc384c3	n/a
2020-01-30	st1.exe	exe	924c482322754b89a37a184a08f4e7effd42bc0672071aa4d8f78f2fe6901317	11.43%
2020-01-30	scpDla30O.exe	exe	e600366a571de367461dbd57dad86b8250dcb4fed9b71a5bf81dc62a2592a517	n/a
2020-01-30	BwEr.exe	exe	b01b339626d6df3ddce59c1ac039755bafb17e45a5d9cdd707431e8a44f8729e	25.35%
2020-01-30	k7Uwxygu.exe	exe	b4e7e97430b31b675df1e98405c0e80fa70f11af4dbd55af7dd0eb6063d3501d	22.22%
2020-01-30	VGMxgU6L0bZJg7EcO3fGS.exe	exe	39747120cec47967260653c6f5fb31ece21ab85eae17979e941cc44f66b3ae90	n/a	Heodo
2020-01-30	dhyFZEkZn.exe	exe	db1e5a009ee5147dbb078821a0e6a7230566372d9529400c00565857bccffbb9	17.81%
2020-01-30	ABe8gznY.exe	exe	b46d186bbe0d13eb3bd15370ea8f20c6ed23297db94e6025e511783d4916cbe3	16.67%	Heodo
2020-01-30	EWypRNfHMKPh.exe	exe	5e65076a6c6eb539edb578aee34d96567a09540bc9d50a734d695908db9ad234	n/a	Heodo
2020-01-30	r7cM3GCAWWU.exe	exe	241d9830363d9392afb60cd8549532fa8e2814b2185a776f0ab0a05675fdc0e9	n/a	Heodo
2020-01-30	Gy4RigQOm3Ugzrd.exe	exe	2b423d563b8b1fff508f9c9d9dc3da7d470b2648080b031cdd6dd0bd697737c8	12.50%	Heodo
2020-01-30	CM7L1Ns1i8RWmy.exe	exe	f919c1f476ffd8c8e2753ddc4014a19bfd5a465ac22118da9e488ec49023e60f	12.33%	Heodo
2020-01-30	TXqnXV5ybLoSDKRaqHN.exe	exe	c82cda60ac731c2d74a0517dee46626de7bd9f2c11df267ca29aaf9add17f004	11.43%
2020-01-30	HJMt9fM9J.exe	exe	f361ed32623176a64d28a57474c2ce4fa8f5a2763096a93e8a163a50bdb2fe9a	n/a
2020-01-30	S6wL2.exe	exe	6518e0e181b199fc14c29811f194cf58595249db8c1b474f17555a2dedfe4e7f	9.72%
2020-01-30	agHi.exe	exe	09c1a34b2ebf6960d855f2913deceb1d4968f431b610c524a51e91436c27f521	8.57%
2020-01-30	11vG0AiSOiX5uV0PE.exe	exe	4ed92961a83b6fb5b72dec6fbbe3b7e2218e879e113a8d9e9cd8b6b6d5ca4086	9.86%
2020-01-29	WDQ3mPNkGzy.exe	exe	f574ed26be7b818799ab1c8f8c8925b4c65702dc4af71732a48e4411d55fcea9	8.45%
2020-01-29	MTnCIugH.exe	exe	dc27ba9e59ad84f9a5147796caf4ff7e49522eb1ca02e949c14164567292e8b0	12.50%
2020-01-29	PxvYii.exe	exe	180b86586ebc0378f5f2d3d461f3a7d02bb95b471e599a26bd2cce266a5b6f0d	n/a
2020-01-29	v5eSgNnpsQO.exe	exe	e7e09923ce0ede4ff36ffd159d903d56bf37f384c4bdbfbff8525124db66b7fb	n/a