URLhaus Database

You are currently viewing the URLhaus database entry for http://libertyaviationusa.com/wp-content/XQ98614/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	309178
URL:	http://libertyaviationusa.com/wp-content/XQ98614/
URL Status:	Offline
Host:	libertyaviationusa.com
Date added:	2020-02-05 16:05:16 UTC
Last online:	2020-02-10 21:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (Ticket DCU002298911 created on 2020-02-05 16:06:05 UTC)
Takedown time:	5 days, 5 hours, 35 minutes (down since 2020-02-10 21:41:36 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-02-07	iiYSA5tKaFkx.exe	exe	4ebe60b05162d6264ec0034d02e3ab01e062510a0f4344abbdc17524242d9a73	18.06%
2020-02-07	eASHaYK5CmlV.exe	exe	3bf99b2b2ab03c01fd867586920622b62c2d7a083fe084fc312fd2f8964ffa52	n/a
2020-02-07	NyV.exe	exe	7a9c97fc1518cde188eaac3212356ef9724976f0581ae9edae6e40785d4ec12a	n/a
2020-02-07	A8JTsG0ySfSCgZJ.exe	exe	ba997f0daab79bf5616667663c20042949f5594c8a9d3c1d156d3d7b9f462972	13.89%
2020-02-07	EB7.exe	exe	4ad5b0fc7112c483540900694844c31941c3a3e166fddaa3d2e7a0a02f2f56ca	12.50%
2020-02-07	9OUw0s7bDXd46x6FI.exe	exe	82b6c0284ccf488cae33acce80f3953e7587609d3823ba7f5890136973e3a0b6	11.43%
2020-02-07	3ik.exe	exe	46e692cb18350d85f59c49e099eddc3b1e30eed90c5112de2a992ff85980ea9b	12.50%
2020-02-07	M7OQkkSKO0i3GeHyyQcYR.exe	exe	e80c82a6a9d79f0a042d6916fc099756431fb1521db9feae8c9f0608c5479673	9.72%
2020-02-07	dYW.exe	exe	45d80ec0e629d7e641e18e4ef17e076b4ba71e86d9a2ac42a3cd27b085f383d2	9.59%
2020-02-07	Q4HrWZ1A2JmKkQss.exe	exe	3ec5e0488c9a8690fc91bb94898a4006da7e62205c633a632de5eab011fd1a4d	9.59%
2020-02-07	sNvBBgRoR1.exe	exe	c23f70cd37d0cb6bf0fae123a473f38595ffd96a360b299f22d7e2310ca2634b	8.22%
2020-02-07	yjuyis89blq55hf.exe	exe	9973b7805dfd87e1e82fbb8b7e07ef39cf51acef1a4ec64381f4fce9e7f29d4b	6.85%
2020-02-07	kwNpYBoqJHKCIJi64Rl9.exe	exe	af4a7f248c106eb018568fa6901aaedac071141920d612d7f7f29c2539cfdfd1	n/a
2020-02-06	IuM7NVpn.exe	exe	fd9626dbf5bfb911527626c6c95418708a83a5529e049ab2c5a6bf675c0309bf	10.96%	Heodo
2020-02-06	o5pHbGO27ySNtY8.exe	exe	aa7dfc52edd887fd4bbe436ac73834d8452299bc1c40f5398b4d124fd907bf1b	8.45%	Heodo
2020-02-06	ZKlgG8mGndQmgiwfETf.exe	exe	bc988a065a30a1378467c53b10aca7dbdc57865d82306b48c5ef107edec3b807	11.11%
2020-02-06	ZjmjdLb.exe	exe	c18ca862b23c802a66742bbd4fe4e1fc7211b899d45bdcaf965281af3a9588cc	n/a
2020-02-06	oE2Q3KUlijGlzMid.exe	exe	a9c94de8e545452dc88809fb3d153f8baf703e4f42b344b31429a9518409059e	n/a	Heodo
2020-02-06	1Bgf23IznYx.exe	exe	5f7575e24b34d1f0f1495925d57b4202219d0949ad53ffae87a22f75a3e3a113	n/a	Heodo
2020-02-06	xJt9b.exe	exe	7165fe26f712cbe0145c889810e7985fde3964bade2d3a1f87d7e2891d673b9d	n/a	Heodo
2020-02-06	t1c1m5MEpxzgVd0q77.exe	exe	078c9886cacb0074b0ef820fc35bd5c2d1d896eb762fd2450b72af51ac1fef8c	10.96%
2020-02-06	7m7f9NVYo7yW612G.exe	exe	1f8cc66d347cb8265f2163ef517131b8d8eb0ecfeabf4c2209582ff99c87043d	12.50%	Heodo
2020-02-06	fsvCeP15ydPC3rANQNi8r.exe	exe	85bb32288665aa5489f90b74301a77db5df5e4cbf3a41c63ec6cb727cddcb901	19.44%
2020-02-06	qdAmETrZmzhAWlngpgx.exe	exe	4b91f7b0b2e65553eba6686b9a9d2ee8887ef0ea2b9e9c62365801f89ada1ddb	n/a
2020-02-06	j0J5Z.exe	exe	54eff096167d41c150a7b3e14537b697a8a4421dbdb4d1e63b5f0f95c4c95707	n/a
2020-02-06	CfPjwLT8g4.exe	exe	9d6236639097e7e0332be3ca4800fa007ce0ccad54ad8bf667b7a22b47116d4f	37.50%	Heodo
2020-02-06	IO8UW90nUcywknZ.exe	exe	b3d200ec51fb6d01acf2ce3fffd67f09abcd9d9dbc97c03d0273128e0dc89fe9	n/a	Heodo
2020-02-06	P8l.exe	exe	3ac3b992bfc3f40230d815549ad911c7a9785abea99a9ef33388ed7e8a9d37f7	n/a	Heodo
2020-02-06	E1tIsim5oqD.exe	exe	34b57f578d9c28ae799b6802a4e6db1ffba940ba0c6b20a1fa25a723875d7317	23.94%	Heodo
2020-02-06	Q5CVfs5VLmAtHi0hw4ZWn.exe	exe	d3016792affe348b19e220915b0fcb6e67070f5d7c8fd89b0b609f98a1e97afb	20.83%	Heodo
2020-02-06	M8iBgb1rBUPElQpqnOS8.exe	exe	b54fa61850eb229f6e1597180a23b6607f8c967b0daf8656b0076fb88c365198	19.44%	Heodo
2020-02-06	lah.exe	exe	287a28e80031fcd9453ad069c9ecea7a3efe34fca5edd1a36c3f6f2d38086d06	14.08%	Heodo
2020-02-06	VzWr2IiPAgThgaO7Rqaa.exe	exe	20e0239c5bf1bac7bd363d63d3fa4ba7227548bbaa04311f0574b7790bab0e83	n/a	Heodo
2020-02-06	Ctphw1NzXtNoE.exe	exe	7b5ccf4e01f3f1f1815ede0d1370d28f1f65fb6d44c99b33df2e33c46b88fb80	12.68%	Heodo
2020-02-06	cdrj8Gd9IcYLbDAS4.exe	exe	8065c30e2b3696c3c0fd301f998910f1f351af0c58baf2188e7634ae6bd98151	12.50%	Heodo
2020-02-05	lhdC.exe	exe	891ff873a0b4a6394848c884e5a5c320608bc640ddb84d54e283fe6ec2f91b3c	n/a	Heodo
2020-02-05	Cd6tMbZj9vw2FprlPfov.exe	exe	481fb12203afd5ccc302bfc0db213e3d18dd6d5d3d0e85de1947fd514c922f53	15.49%	Heodo
2020-02-05	BNhn.exe	exe	ce0d7f2b64afa3ae59b4c4974f801632bb7bbb43bad33653fa4c716d2599a0ed	n/a	Heodo
2020-02-05	L8y.exe	exe	5bf46ac5d85ca66bfbfaab45256729ceab6ad79eb169117cee2060db9855041c	15.28%	Heodo
2020-02-05	flTqljMofDjOO9.exe	exe	ca67078d384154dce171953aa27ad6652a13db10e77a1744338ec562259d2856	n/a	Heodo
2020-02-05	HXijLpPKvTdz00P.exe	exe	4c600769351a71d22119f06512d1ef1b300dd34d3b67767cd868bacfcbe0808a	n/a	Heodo
2020-02-05	PQ5De7toAcHNzUI7.exe	exe	6ef2d4bc2a937513b6e176ef284833a529aa6afd14d99101d48b8b4d2daa090d	n/a	Heodo
2020-02-05	NkUoqdQywVsB5.exe	exe	b02883f6a97e4c74cbbc271b7c4686106ff2946de5a6f3f74be14be2324f318f	29.17%	Heodo