URLhaus Database

You are currently viewing the URLhaus database entry for https://www.ujzuopinji.com/wp-admin/Z7vkqGwdev/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	306854
URL:	https://www.ujzuopinji.com/wp-admin/Z7vkqGwdev/
URL Status:	Offline
Host:	www.ujzuopinji.com
Date added:	2020-02-03 14:44:09 UTC
Last online:	2020-03-23 02:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-02-03 14:46:04 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:	1 month, 18 days, 11 hours, 21 minutes (down since 2020-03-23 02:07:45 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-02-05	6mPcHDthDjD1h.exe	exe	fe5f08e55eed4dc6f42008163439e214ba84393b71af7ae1a34f8f303cf8cc34	27.78%	Heodo
2020-02-05	CrvYjLNNqHCiSIDt3.exe	exe	b038e07f6aa61516facf1744c98bafd2c5fc002b60268daf7bff6c1655cba32c	21.13%	Heodo
2020-02-05	OvCS.exe	exe	a5e38d30a92e53cb31829294d750d0265f827bd60249d9bc8808b98b55a1cb9d	19.44%	Heodo
2020-02-05	ZGLKS5.exe	exe	3938615f3fcf715a5f1d1232908f0698c74859c9d0fdc8e99062b672c1546c1c	n/a	Heodo
2020-02-05	lSRTPWz2jQQ2.exe	exe	b05c97f06a66f564d47f812d68cd0e55f9bf83ccbd1cc1fbae64d41ba8791c22	29.58%	Heodo
2020-02-05	YOHCidUBTzyEUuXSzJ6d.exe	exe	f29c4255ee46b65af126663daf4dcd56f576ec84cfe81971fd3f2a2104341822	29.58%
2020-02-05	lUZ072z81ITXB.exe	exe	1358b4735f5cde2245d4b69d3351ea6751fd9267009161911673c4f31e2762ec	26.76%	Heodo
2020-02-05	H1CQzIvi8Tk3BN.exe	exe	7679048d8846f5a6c964581cbadd262ebdddf60487d601ce3355430362ef473c	27.14%	Heodo
2020-02-05	JrVS2Jz1oQXi.exe	exe	4a2274ee98f0bf4b3a03caf05d1c563d101f97e20aff6fb02b86c2543117f52f	23.94%	Heodo
2020-02-05	WzqUwqmGtOEaKF2EXX.exe	exe	cde9804388356d26baabea8ff65d2c96898bd03ceaad05f27adb35bac5a9052f	n/a	Heodo
2020-02-04	m0r9.exe	exe	655e4304bc64f2dff623621dc9b111a0f257dbbeeac6e2ca793d06ca50df5057	21.13%	Heodo
2020-02-04	9vVKQqHR.exe	exe	94923ab74b9987e7312513fbe8b937f698381ecf37f79226e188b93012c67ba6	21.43%	Heodo
2020-02-04	N76AD2Dsfam5qI1rxZ.exe	exe	5a562c45a1f8ece7a3ff35588156a778b4be83419c502259b9d65c9eeabdec72	5.56%	Heodo
2020-02-04	mghDHX.exe	exe	454f865fabfb44516d67f6479b6a31d2a1677843d33b1ab2de3c8fefb17e1404	5.71%	Heodo
2020-02-04	ja7sCk.exe	exe	d1cb9837f65ff3afc723d30ed817a9a3a1107890c4f41d44c92bb62eba6f0b37	15.49%	Heodo
2020-02-04	YFD4xzM.exe	exe	9ed4fad6dafd13d2be5a7809808311b9034ce1781fbf5d4a9154fc18dde00920	16.67%
2020-02-04	4c8lKcen5h0TfFkK0f.exe	exe	30beaaec512efb411da9a75fe334161cb1a7df499a0ebb6a605c6ac034c359b9	n/a	Heodo
2020-02-04	LoIDoW.exe	exe	282f2c04e2964c3557b93ab2fdcda6190b964d43d491d110cf8e30579eb09b1f	12.50%	Heodo
2020-02-04	sc2znONZEgTLtdx.exe	exe	7b783552a270ab8f95e065ec84596f4b16d07f94cbc38f1f8f969148cae655bc	12.68%	Heodo
2020-02-04	gurkzB24nF6xJHRMj.exe	exe	d16d247b65be90e211fa6f1de1e024921a6cccf143a86ad744d3a9e78fd2b9ec	14.08%	Heodo
2020-02-04	C6dr.exe	exe	006b0960501432cdb00a9e7a7dbd259f3ed9ccfe16eb7017b7a287d8091c72fb	n/a	Heodo
2020-02-04	hmemLw.exe	exe	4ddbab7080592245803314c1ea85003d4fee33e8944ab7936319fd3cc25e042b	n/a	Heodo
2020-02-04	zmOm.exe	exe	7f64d67b9d9f4e5ebca2cc6d499ae540562db3253b7f257e3ef7a6a53a462f26	30.00%	Heodo
2020-02-04	63Ux4ty.exe	exe	db9d1456041f9ca4a7acf48fbf4071915b4fcceafc52c56e1ece2d7339544be2	30.56%	Heodo
2020-02-04	MWdp288B6X7OsfJRr.exe	exe	efbc09569e716dc494daf69a84af5eeecea368f8c0ecf3b8019e84b92fd2bfcd	28.17%	Heodo
2020-02-04	hQroJEhPDP.exe	exe	e0613d89854e76418b4b9e10e070f787b1455d35c692725474915959c72559c8	24.29%	Heodo
2020-02-04	pBXhGi.exe	exe	3d547ed433d4659bc62a8774cfd6cf827a817d1caedbed194f5dbec0e8757a05	18.31%	Heodo
2020-02-04	RaDJ64s.exe	exe	886c4a5e2c859b400271b30f87cbe22be9123648119f8e7ec4b62308cc0387b8	24.29%	Heodo
2020-02-04	g36ib.exe	exe	d74780900c5d9f2796da08dcf9df3bc93c509d835d3613a199e702aa070b6358	22.54%
2020-02-04	JPs.exe	exe	0d21faf49dc85a8d17e3384f51186028882f4883db5d047d8a3dbfa49d1e7c88	18.18%	Heodo
2020-02-04	X0tDfrXpJ97d9Z.exe	exe	17f5c98ebfa8f4cfe388eefb6889080f99fcfe62e87286d1f1aaf0a10e2996c7	19.72%	Heodo
2020-02-04	WBC21JqoP.exe	exe	abce50a83c999ad2da33fe712a85d0118fdb12e4e4617b55cd838d1bb0aab8af	21.13%	Heodo
2020-02-04	pFWdMM9fsCgQSz.exe	exe	200ae11d75378b6c6ec204998742a65c8d741ec8b5a5398847f6bcc547177771	18.31%	Heodo
2020-02-04	eBWVcAXWNyH3PuC7.exe	exe	93fc54f8af621ea9edc855dec2d25a519cf9f5f10d38f388665cefe9a5959405	n/a	Heodo
2020-02-04	dWzviCQ.exe	exe	227fa73ffa3e08a7f53f10f06e4bb18aa3b7aa6e9aa33ab949b91a9631d9dc86	16.90%	Heodo
2020-02-03	LLEYULVjEq9iCF47Wh.exe	exe	29b25db7e39366cb289b105b22b7c562df6460d9d8c3a17839b896e1a57d8259	n/a	Heodo
2020-02-03	UR2D635c8KqKg.exe	exe	e0a637017ae9e341a5c75d9659d48681bebd899be5e3e89ad45aff6de1d60b3e	9.86%	Heodo
2020-02-03	OyWkCREPoB2csg4Qa4Poz.exe	exe	06be4610a6b7fbc7659ea8c2904b1473a0d2925d225a67a8cc1f61ec8631ebd8	n/a	Heodo
2020-02-03	N8AzZZh.exe	exe	1aaa5d2c9056a07a2251c25a144f63d4d0584c8509029462a635ebe3cc4e3848	14.71%	Heodo
2020-02-03	KF9vxkKA.exe	exe	63c4162bc4c04d8b26744287280b0dea2c52b0649372aa509c2b77cde6aa69b4	12.68%	Heodo
2020-02-03	6vmedh3B1OIgy6.exe	exe	4d7a263c333bdfffcd3a21f7f53ae153c5ddefe13e6da5602633dbc1c022b208	n/a	Heodo
2020-02-03	vee.exe	exe	e755cf64623a451c5b281243a61fe16fc9785c21a1ade37215d1f627976cbfa8	11.11%	Heodo
2020-02-03	iKnTGx4vhmzanup.exe	exe	c58505064a06dfe948f3e415b610a80966ad9046288c32538c16ad716edcb946	n/a	Heodo
2020-02-03	DEXuHH.exe	exe	52b42e44a70ef33c34349b9b903f93bac6baed63d49131ac2f27769b505c4355	8.45%	Heodo
2020-02-03	pJE0o9Cc7.exe	exe	7d13b214ccdd0f59c9bbdaa63ee799fea43bfab5161fc412ca081b5f813ad06f	8.33%	Heodo