URLhaus Database

You are currently viewing the URLhaus database entry for https://ir.aihgroup.net/wp-content/Cya8Ku8je/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	303992
URL:	https://ir.aihgroup.net/wp-content/Cya8Ku8je/
URL Status:	Offline
Host:	ir.aihgroup.net
Date added:	2020-01-31 12:53:24 UTC
Last online:	2020-02-28 04:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-31 12:54:14 UTC to abuse{at}alibaba-inc[dot]com,intl-abuse{at}list[dot]alibaba-inc[dot]com)
Takedown time:	27 days, 15 hours, 7 minutes (down since 2020-02-28 04:01:57 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-02-01	CM9.exe	exe	e208f36c523f344b81474e05991070cd906e7f49b9031b9bcd2c8e7c117d4914	40.85%	Heodo
2020-02-01	A5zmHH6j2AWeOQF3O2RlN.exe	exe	7d9c030e44f4b97776d5609eb991f8c5030fa2e66e6380d44ca724097931acf7	n/a	Heodo
2020-02-01	e694sJmKRy0.exe	exe	41be72948b364a145bea2060f8911e755a83136cd15d4496dd0c186b6028d44e	37.50%	Heodo
2020-02-01	a4hdkVba.exe	exe	4a13c0bb6583680635dffd16255c1006ff72f716cb90fbd1fdc31ca1414b4637	35.62%	Heodo
2020-02-01	l8Be.exe	exe	7470c9f580e58ab46fd40c9cb741be7d0ae27f13045c8355da53f4b104e9e27b	n/a	Heodo
2020-02-01	bRFbJAiuV7z.exe	exe	85083f132ebc1a351285198235698ba199f8d94f288623ce22f4ee500424b594	31.88%	Heodo
2020-02-01	hIa3mScDXVh.exe	exe	c4962cbc3fdf9287c70f2481a5250a7911bfecd361730ffee204b6bdb0066388	28.77%	Heodo
2020-02-01	ur2tu7U2XaWvFvoohqY.exe	exe	696476d0a174f3bdbb32b84478e62379f76b878ca9641376c88a21200010d621	18.06%	Heodo
2020-02-01	Yckg3qZqx3CdtJ99.exe	exe	dbe27ec53fbc98efce705b7b1736208aac4c9dea5d991511dce48102db3c36c1	15.28%	Heodo
2020-02-01	sZZqqWd.exe	exe	3c6be818ccf1de59ec69557aa8667ba385db357a8ef8a20ae3e1fa369994e678	14.29%	Heodo
2020-02-01	xd9Up779uLkJSCwdoETtz.exe	exe	8fcafc142255b1498bf5f3734656711996a586a51591a9dfa6dd2a3cb13f79b8	16.67%	Heodo
2020-02-01	2ZLLhXa.exe	exe	b91e640b9712048aac4ede7a25d5b5442c95d11fc73c116894dc030ea87657bd	13.89%	Heodo
2020-01-31	RF7dLXPe.exe	exe	c5a76793c28a38a0434d84025d340df5b63100313e9915bebd58722f8fa07067	12.50%	Heodo
2020-01-31	D3kQ.exe	exe	02e1d3d9b835636671fd20fe4092657eae1b358f4fb962b5d4edfb8e113df1fb	n/a	Heodo
2020-01-31	5CVfs.exe	exe	6c1781806e34330a4e2c89a89904245ff04382ec536ec2cfd67c22ea74b3fd7e	n/a	Heodo
2020-01-31	jGWkDEtPA279nxp1Jl.exe	exe	219d34229248f46137b1abcd7b75399824b8af86ed4022de12345fa7b20d5b8f	n/a	Heodo
2020-01-31	WrnXHRI0SEsP4.exe	exe	93685a5abf8ca5f8d33f343a68c32ac1c4ec2d25e920f017f9837d2b323be424	n/a	Heodo
2020-01-31	vZEjwgNolUpk95.exe	exe	536223343bfcfaacfec0d3498f57758786a53c6b208726db1524999559d0e1da	n/a	Heodo
2020-01-31	NaJ11n8Mtcpz.exe	exe	63a0934eba09a9a6726dc3b73ba4d04d1657b2728dd760739d9c65503e57bc8f	n/a	Heodo
2020-01-31	51ylaHPXkG.exe	exe	3a8f1e5929dd0572478da9576af351a6dcbf0c8eb21cb2fdb0d007b355e6542e	n/a	Heodo
2020-01-31	ysP2mcw.exe	exe	5bdf911168999f9dab58df8bdf9fb3a871aeda296f98e76389f8f51a4e235ffc	13.89%	Heodo
2020-01-31	ddVWK6jYWgDCdtKV.exe	exe	678ad34b66037d0cc68e34b6f254dad9f754c80e6a1dc8f07b2794464667ee28	n/a	Heodo
2020-01-31	4rgTIZB.exe	exe	997c702f9ffa86ead265bfc4e55ec760218498b171b7876d55787abbab693cc3	n/a	Heodo