URLhaus Database

You are currently viewing the URLhaus database entry for http://wemax-ks.com/wp-content/ibDhQPG/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	302882
URL:	http://wemax-ks.com/wp-content/ibDhQPG/
URL Status:	Offline
Host:	wemax-ks.com
Date added:	2020-01-30 13:15:14 UTC
Last online:	2020-01-31 14:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-30 13:16:05 UTC to abuse{at}godaddy[dot]com)
Takedown time:	1 day, 0 hours, 45 minutes (down since 2020-01-31 14:01:44 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-31	bHvQRnqSq.exe	exe	997c702f9ffa86ead265bfc4e55ec760218498b171b7876d55787abbab693cc3	18.31%	Heodo
2020-01-31	edHPtCpuf7pSlNmoA.exe	exe	f34d95c098f031069d6fc48484be088a9375426e6832ecaa34bc5da81df11098	27.78%	Heodo
2020-01-31	vnpc.exe	exe	395c0613518c8decf1d178fdfc048e64c0278f11f786b23858eebd4617cea828	29.17%	Heodo
2020-01-31	B8wQgr.exe	exe	27b81d6e85c56eb86c83639bfebae1dbe958de003500a011a2242c9bbb741dac	24.66%	Heodo
2020-01-31	YMETGJSDzofwvsBw5CvR5.exe	exe	9b50b2ea7a48984053759eb8c006fd30fabb6e620a142c4b989e79e477263446	22.54%	Heodo
2020-01-31	k1w.exe	exe	830471aa79174dc45b88dba2fe1f209c8927ff0251da09bd8ccdcff8d8978c16	26.39%	Heodo
2020-01-31	716kqq49umS8UmGn4nS.exe	exe	1dc6a20c2aa10fa80d525546326aa1026bbbe6cc3e53a5a59cbae909c2a52a85	22.22%	Heodo
2020-01-31	31EqxO5xfTxEC0u.exe	exe	01be74fe4d2de40dcd2c7ef5e7247e32ba5b392dfb861e52db884babaff6a5cd	20.83%	Heodo
2020-01-31	KZ12zaJtt6rDDDcSOl9.exe	exe	bf0a2de760ddc0327803c63e97d6c5cc628a3871aa9ff29bcfc81c43d2eed691	19.72%	Heodo
2020-01-31	lnePWH.exe	exe	f4295c1e1158978ff27a49809f8676d7f1f215010efecf8ec3f040c81f56d6d2	17.81%	Heodo
2020-01-31	4Q6.exe	exe	4bfe37cf3373329ee2927964b9155b500bc12ba31176455d10ac34a94b37aca3	20.55%	Heodo
2020-01-31	YucR1Oe6t6JFReYW.exe	exe	e02ffae79c8de596870f2d0e218905e1907110b5d513ccbd7053bf4a897b2515	18.06%	Heodo
2020-01-30	ydY5pTTge5zz3.exe	exe	8d2e10026b099082a1d7d2899e31d7c32904aacece91596310fdbe5f1c6facc2	n/a	Heodo
2020-01-30	OB77gf5jT5.exe	exe	4c1342964f8b45059900110e9458f93535d75842859dc241c0fd02b7ec08d68e	n/a	Heodo
2020-01-30	2nkaJW1KyYLx3PzqAsAn.exe	exe	aafeda0aef6b3fc3f2257f6bc0a68446b5dc1e71203f3c13c699be87641d5394	14.08%	Heodo
2020-01-30	Pl8YJBlNSO2.exe	exe	6ef7901c8434ee338365914b432239b1a28f50ef8832cb963ef87648cb52d892	n/a	Heodo
2020-01-30	ErRFlw.exe	exe	df9459cf7a97f1d59ec62d000733d7e0ab85a9b54e4257d64582de250effa498	12.50%
2020-01-30	DMp.exe	exe	4d9eee19710ad1fee3345df72543c8e8dcea2b7543ec9c7e7ea8a506a62c5c6e	11.43%
2020-01-30	Gc4PqkR25az.exe	exe	924c482322754b89a37a184a08f4e7effd42bc0672071aa4d8f78f2fe6901317	11.43%
2020-01-30	5NgDpSbtb.exe	exe	d3ee20acd14eabfcc5f5c9a948eb2796151bed016de3356b878565f5f35236d3	11.11%
2020-01-30	SpVBezd5TP.exe	exe	b4e7e97430b31b675df1e98405c0e80fa70f11af4dbd55af7dd0eb6063d3501d	22.22%
2020-01-30	Iwz7xLCC.exe	exe	39747120cec47967260653c6f5fb31ece21ab85eae17979e941cc44f66b3ae90	n/a	Heodo
2020-01-30	o1ryc9GWee.exe	exe	a934ad7b12920ffc814cb842d07a24c68b0c1e5074ab825fa045440187ea70a5	n/a