URLhaus Database

You are currently viewing the URLhaus database entry for http://125.99.60.171/cssi_api/1NswnK/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	301821
URL:	http://125.99.60.171/cssi_api/1NswnK/
URL Status:	Offline
Host:	125.99.60.171
Date added:	2020-01-29 19:53:40 UTC
Last online:	2020-04-02 13:XX:XX UTC
Threat:	Malware download
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-29 19:54:04 UTC to abuse{at}hathway[dot]net)
Takedown time:	2 months, 3 days, 17 hours, 9 minutes (down since 2020-04-02 13:03:53 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-31	h5oLjP74nR8DBeoa.exe	exe	1dc6a20c2aa10fa80d525546326aa1026bbbe6cc3e53a5a59cbae909c2a52a85	22.22%	Heodo
2020-01-31	ZJAvybYglBZDlQ.exe	exe	5f1f61aaa1cae49612ed230120ec5f869aa63981547f00c169d89f97ce69148c	n/a	Heodo
2020-01-31	HSqP1jNWRRAmV9Ap.exe	exe	f12d63d54fc40ddb75e8dfa5bd341b4b9f156867ada1e021877ef902d62ebc61	20.55%	Heodo
2020-01-31	xab0wX00bvF.exe	exe	7d1ddd80083ea5caa12beb9270573d33a6f54b90d6414793d188cd986c27c08e	16.67%	Heodo
2020-01-31	VaO.exe	exe	4bfe37cf3373329ee2927964b9155b500bc12ba31176455d10ac34a94b37aca3	20.55%	Heodo
2020-01-31	KscJrw7rIZL1d9hYop.exe	exe	e02ffae79c8de596870f2d0e218905e1907110b5d513ccbd7053bf4a897b2515	18.06%	Heodo
2020-01-30	eHs73YT99HocdKS3kL.exe	exe	8d2e10026b099082a1d7d2899e31d7c32904aacece91596310fdbe5f1c6facc2	n/a	Heodo
2020-01-30	Y94eeWDKkvnQt7wg.exe	exe	feaa553e07229443960a35149e2b86c890f4deb7b8b3968b019ff4a0a5a2a89f	15.28%	Heodo
2020-01-30	hzT0jW0p3KZYKQPuljNkw.exe	exe	aafeda0aef6b3fc3f2257f6bc0a68446b5dc1e71203f3c13c699be87641d5394	14.08%	Heodo
2020-01-30	XV3DL9qKPdhKrKhKRrtc4.exe	exe	37c596e799aaaefb6dd642ed04e39a8b3a8a3fca9e24eac4c8cbd48424cabe72	14.29%	Heodo
2020-01-30	OuJC1qM1raQfi784FKH5.exe	exe	92cfd5bcba550ea8123d41b5d686a335720d419197c6d7d0940a6d47e875b593	12.50%
2020-01-30	fXK.exe	exe	7bc800d4057ea192b66fe0df2ee52014d735672eccc6f341cf19c2a65c23b9e8	n/a
2020-01-30	4gpCA0I.exe	exe	1bbaa3c9ebcef88ed1f01c9504f62deebcbad0f97bbfb27177a6e93e1a066f8c	n/a
2020-01-30	wwVLQd3ckul6gx8.exe	exe	b8e5f37b3d89f0f56b845b85ce6ee3477ee6692f13200f86a704466bd041cd3a	11.27%
2020-01-30	q6ahrVVXI7wBqZoVFsT1.exe	exe	fb82b0eb5deccc62a42ddcb29dc0870b7276a78a0c4940d01491e01ccde92aa4	n/a
2020-01-30	6caaRx9A.exe	exe	b4e7e97430b31b675df1e98405c0e80fa70f11af4dbd55af7dd0eb6063d3501d	22.22%
2020-01-30	ogSyCfi5F.exe	exe	de90e63c81ce7e384d81488d4dcacfe854c0e4d4455338e8499c39a52d1d7ace	18.06%	Heodo
2020-01-30	EJ2.exe	exe	db1e5a009ee5147dbb078821a0e6a7230566372d9529400c00565857bccffbb9	17.81%
2020-01-30	N78pC4Gq8vG.exe	exe	355be6f6a83b96d139b379da1f2c67326cf4ef512ae5e03241b66b0733b38084	16.67%	Heodo
2020-01-30	y7hx.exe	exe	5e65076a6c6eb539edb578aee34d96567a09540bc9d50a734d695908db9ad234	n/a	Heodo
2020-01-30	KgPO.exe	exe	241d9830363d9392afb60cd8549532fa8e2814b2185a776f0ab0a05675fdc0e9	n/a	Heodo
2020-01-30	r1l5GIsAm.exe	exe	2b423d563b8b1fff508f9c9d9dc3da7d470b2648080b031cdd6dd0bd697737c8	12.50%	Heodo
2020-01-30	akGS0RJvotE.exe	exe	f919c1f476ffd8c8e2753ddc4014a19bfd5a465ac22118da9e488ec49023e60f	12.33%	Heodo
2020-01-30	pV52j9KMtc.exe	exe	c82cda60ac731c2d74a0517dee46626de7bd9f2c11df267ca29aaf9add17f004	11.43%
2020-01-30	SJKsFk.exe	exe	d71bcd304795e7d6df3d0a28642825377b5b5e922ad593eb316a646859ceb237	11.11%
2020-01-30	bHeQNGkxQs925.exe	exe	6518e0e181b199fc14c29811f194cf58595249db8c1b474f17555a2dedfe4e7f	9.72%
2020-01-30	46JcOSsHAqO6x.exe	exe	4ed92961a83b6fb5b72dec6fbbe3b7e2218e879e113a8d9e9cd8b6b6d5ca4086	9.86%
2020-01-30	XQBmSbPE0.exe	exe	88223e5d0accf9cfbbd5af7f4cc0a3467a84f77a207a7de3722b88f021e77313	9.86%
2020-01-29	cCcY6MMmHk9SnwpVIolx.exe	exe	f574ed26be7b818799ab1c8f8c8925b4c65702dc4af71732a48e4411d55fcea9	8.45%
2020-01-29	mF2B4FqI95D9YnKs94ev.exe	exe	dc27ba9e59ad84f9a5147796caf4ff7e49522eb1ca02e949c14164567292e8b0	12.50%
2020-01-29	bOqVF0DLTwh2s3V.exe	exe	180b86586ebc0378f5f2d3d461f3a7d02bb95b471e599a26bd2cce266a5b6f0d	n/a
2020-01-29	Zg8v5DEZAF5zN2.exe	exe	e7e09923ce0ede4ff36ffd159d903d56bf37f384c4bdbfbff8525124db66b7fb	n/a