URLhaus Database

You are currently viewing the URLhaus database entry for http://wolfbird.com/wp-content/2ddcr_bqmi2_d0vmdgu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	426228
URL:	http://wolfbird.com/wp-content/2ddcr_bqmi2_d0vmdgu/
URL Status:	Offline
Host:	wolfbird.com
Date added:	2020-08-06 11:21:54 UTC
Last online:	2020-08-09 22:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-08-06 11:22:02 UTC to abuse{at}asmallorange[dot]com,eig-abuse{at}endurance[dot]com)
Takedown time:	3 days, 11 hours, 9 minutes (down since 2020-08-09 22:31:17 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-08-08	7NaTq.exe	exe	e49bf502f77c359b683946f1ee3fe74953577742d4664623d63bd01d87c84f3d	n/a
2020-08-08	2HIN7rhsat1llHXhK.exe	exe	76b8cd952ad23d7ee4c52cae40875ba292c916d4996000b93d376f9dbc9fc6e7	n/a	Heodo
2020-08-08	Vo.exe	exe	8bd1ff7a7afe16ebbfad89ddef5a1dc63d393f2bd0fce3198a8914f05f6af070	n/a	Heodo
2020-08-08	bIJnqgBuI966Qoaw.exe	exe	8e3213c560fd338099c7ba62f7d1af1dc531e0e1ce54c367045956b2940f90c8	n/a	Heodo
2020-08-08	S.exe	exe	451cb7e0fe494b2a030c3d912d531440b5f3944df1441d43c7e36a722f7c7054	n/a	Heodo
2020-08-08	2DtHLuKJpDL7.exe	exe	42416f4323b2a243e5c5b6204c01b26382acd35f1dcf183824cbb0eb0dcf8997	n/a	Heodo
2020-08-08	Ix.exe	exe	c56d1e5bd2641c292c6b97f0a3e7e9ff8a7ef4e656c36e97d967948da5946c14	n/a	Heodo
2020-08-08	ksgs5AQkjDbGMnUPB.exe	exe	fcbef252a578a13cc20967ab4adc5f2ea88c59cce3de07040255604db64cd9ca	n/a	Heodo
2020-08-08	GAY3pyBEmPo1NCWlnSLc.exe	exe	46dc32a821e70d3aeacf75fa4da73ff5aa7b2e0fe5c87d2ca03fe19dfb851665	n/a	Heodo
2020-08-08	qHziwNnnvcvBTdS.exe	exe	025a0be33202be099bb7d6fa05165295e63752eb55e4acfff8a9a73c9fdcbc41	n/a	Heodo
2020-08-08	sc2DHVW6T.exe	exe	1b28e3375b71e284114ed54f7beb8504da536e808b50212f0db374d8446f9dd6	n/a	Heodo
2020-08-08	y.exe	exe	ff57e48c092b0ed8641d9717807eb3146a56f16fcddd755e9d0dd9cf03a41ee1	n/a	Heodo
2020-08-08	v9uYq6XaF36CK5ME.exe	exe	e54d9a089c06a3946dbbcf9b0de318f22bb66fad1547d0a566ec76dcfcbf3fea	n/a	Heodo
2020-08-08	ryqSnbzPgfAAd.exe	exe	e58ee5a763ab180d9c99024dd94bb0700b9303fadb0dd00514ac9372355075cf	n/a	Heodo
2020-08-08	8RiEIb2dfOPs0hiqxF.exe	exe	89c7523c26d49280e8d1a8c53b6c59cf1a7cd2616781ed8c7d13b3fe985a1598	n/a	Heodo
2020-08-08	KvQLBa.exe	exe	751d447f0eb9c2e1b721cb2368a3334a9193f1693526f60cd566abb417651d55	n/a	Heodo
2020-08-08	Dhi9O6iXaP1yT3ceK9G.exe	exe	0ee4ef9ff8895fac5f916d5b78b20fe90f5b4623160cc0a4c086060a653207ae	n/a	Heodo
2020-08-08	VK.exe	exe	d17762a7c7598b431c61eea7f16148a71ef1352aaf1bb3f91a150d9f66f4e908	n/a	Heodo
2020-08-08	B39mM0NQEBW1v.exe	exe	872fe87f26dd7f6c157c5bafca9fe6501df7fc06497d50735ba975fa36cc86c0	n/a	Heodo
2020-08-07	WeDzP4p04IrQviwBKS.exe	exe	6d17a6909affc320e8e50d0bfbaba3004c452fc32f5388b4b032d7b9dd641574	n/a	Heodo
2020-08-07	zpVzPq9ObvC8UZ.exe	exe	3fdb0fb4dbbc7538bbdd805b859c0517837f165bcc99f00be65c4eefb3b3cc9a	n/a	Heodo
2020-08-07	zRH8yyBfH35ibKEw.exe	exe	0356071968336f4f73bf69ee0a44077fd6ae7e84ea163f9ad4e8169217ce89db	n/a	Heodo
2020-08-07	E07HJCJe79eTmRmvd.exe	exe	8a88d81537ced626331d582724c587eeadc68753070ab14dd6212a88be023476	n/a	Heodo
2020-08-07	UzsDRmYTWKH6.exe	exe	63c956a49e6dfcc1c15570788db982e65ba7d31f186046e163f5a409e996b687	n/a	Heodo
2020-08-07	E.exe	exe	175a87e74e861145a9c4d00a54a43cf6f2d65f993f8919cdb3c2032b894ac472	n/a	Heodo
2020-08-07	D.exe	exe	ebe7328743e76de32030d5e044178f82234430db7922b46c9f4aad429b159aaa	n/a	Heodo
2020-08-07	wIqVV.exe	exe	ad953e2da66890b224ac7d19b292ca9d483161ad9622b96ac9debd7826fddad9	n/a	Heodo
2020-08-07	oASWjQeruvjiQOziZwLa.exe	exe	6dd5a469ec69c616e024beb947e815bec44a922e5f681dac03e7ec90abfe8c38	n/a
2020-08-07	YNlHb6tVNQjfzq.exe	exe	4f6a0f8b48cd0a371ec5e42799fbc5126f3f8e7d4c3347959ad57c4c3484a80a	n/a	Heodo
2020-08-07	Lcf2.exe	exe	36641684212a9404db9a8e9219ee2f3024f3354599ec67a78afa4879108bc57d	n/a	Heodo
2020-08-07	pIbWEHfgP.exe	exe	5b450aee9a5641c273b916f90f9611f37e8866e726ea13c9efec9f55e8291e41	n/a	Heodo
2020-08-07	WnUQqPiVzmKbbnl0e.exe	exe	0f0fb7d24b6c6f37505d6f507dbc854aaf485ce9945cc829d1a9894776c89648	n/a	Heodo
2020-08-07	ev.exe	exe	99b37177200f683905ef82f993b0f2ed3da420909cc331a07b5d9b609c258b7f	n/a	Heodo
2020-08-07	rO4tUjUXJhpURf.exe	exe	6962445df677ca2e907d6494ce76324fbea7e0895fd46701654d4687cf0aba2d	n/a	Heodo
2020-08-07	IOlDxb8VwREN9U98V2.exe	exe	afdb44fcdae7f260c487efb62e8d7db7f213b25f2ff3b04ce803be9b300a686d	n/a	Heodo
2020-08-07	lGhnk9RoNQ98nYU8jhQW.exe	exe	236675ba89ddafa677f591ede76cb1aca2f74ff6211f7cf95937d22640b321e6	n/a
2020-08-07	TP4SZxEB5.exe	exe	c4567ad64494bfcd265b71fec126b1103e801ad8e55e0de54c381c949ef5800c	n/a	Heodo
2020-08-07	vEDdFKFZeANYHDRNdZ.exe	exe	86174ff4ae793e97278798995464922c0f5ddeeba101cf86ede9e684c1a7aa6b	n/a	Heodo
2020-08-07	0X3Kz4M.exe	exe	e51fb273ad44e1e54f2aa64e6f07a7f9d979b981e3108cba35efbc7c871ea086	n/a	Heodo
2020-08-07	0nEKwkoyvzq9tbOPw2E.exe	exe	a03f64368018ee670de1905c3bb2f4fddbebd135d21d934ef8a6f497d78d8e78	n/a	Heodo
2020-08-07	05dNO7U6kMqUhIB.exe	exe	b762bf632006b548df026fd5480da70baaaa06bb0ab7f65dfd091a46a5023335	n/a	Heodo
2020-08-07	lfw9MI5cRdDo3JZi.exe	exe	8c7c1cab62170cf4f6f84bde4347ac82c9c0f95b20d6e0a101397838c1ed1d50	n/a	Heodo
2020-08-06	Yi6ZwFBJug3jyhuyi.exe	exe	6edaff4cf1bf9e5fa68a388853f093ca52d6b20c6adb3e56ee349b383f8d5165	n/a	Heodo
2020-08-06	gNS9.exe	exe	82b7e8b1592285ac504f3fde37a37eff1774c92522ae685ddda9927231e0f17b	n/a	Heodo
2020-08-06	rpLip.exe	exe	f074e1eca761ce98166fefdf6f5a6cce6f8da64da4dd0d686811e78ab3d54a98	n/a	Heodo
2020-08-06	EMMO.exe	exe	86b50c376106209fbccc47362602539b33ca9d0f11d8b48f2a8ba80c3ce5a48f	n/a	Heodo
2020-08-06	gvcHJZaDi1z.exe	exe	c3d747f0a21837842dee25a7d7a141ad5e2f0d83ec5a6fd76e0cce175717a22f	n/a	Heodo
2020-08-06	nxKggPPRBCf.exe	exe	ce304bf49c55af511f8a17d6ff5fbf06e82c3d403e5175aaf39aef58bb0b69f4	n/a	Heodo
2020-08-06	AKKcuKGPU7TFpI.exe	exe	2d032b994b7423890a66bc403926592ad58399288924bcbad03f7a6c498b87f2	n/a	Heodo
2020-08-06	4gaeZekPSE.exe	exe	da930d52967def0005c8c2024bc0e55b194437ab3e86bee21ffeee8dffd89b92	n/a	Heodo
2020-08-06	NuXGBXIPQnbmSVqGcK8W.exe	exe	41e5f88db4bcf5bcb2247d4501390d080d821d7bdb4eb434348c9c8fb61f9db6	n/a	Heodo
2020-08-06	qToohMtyL.exe	exe	3b27bd67e95469036c73f9c383e13b6f5946cfd185535617538e70545d6c74c6	n/a	Heodo
2020-08-06	Xqcupd0eW.exe	exe	80f34a4627208600f9761a218c0228ac08e5c4ab4ef4c852cc00e03ce8684c2a	n/a	Heodo
2020-08-06	jgEeVp.exe	exe	76d0f9d81624e1de2ea44512625465785000bdd120cab4669ad2657cdf5b8c47	6.94%	Heodo
2020-08-06	36coCTuI.exe	exe	d0643619606a3ae6f488d9a4ae53ee41c792442ac2b1caa6d7ed19764c836552	n/a	Heodo
2020-08-06	sIVMMI.exe	exe	ecee093d8f992364698b60cb2fa8b1f97927effe66d8d99e5670520fb98b976b	n/a	Heodo
2020-08-06	hCNzyAU1mD5C4K9QY.exe	exe	e0ab3f516305e9a1ed239810f82bad893c21a2bedef69f7e0cd33a4fb2bd0547	n/a	Heodo
2020-08-06	RtXXZ.exe	exe	b1bd93cc92ccc626e68a060621f57123bebaa2753079c43faf40ee8a80fc819f	6.94%	Heodo
2020-08-06	nnAABOSGR0k63k9p.exe	exe	14c21d71c0104dd7c644097863a16451c7155d33dda12cc43fda3bb457675e83	n/a	Heodo
2020-08-06	tH5aNJE.exe	exe	4ece8287c76985a01a4caa629ee98e9bb5f9508f67283457f6149eda9bf6156e	n/a	Heodo
2020-08-06	R9BVJMio8Tj8DTG.exe	exe	bc611134911aba9ceb8cbd8e9c6e62cab610cf30c5523e79c3887aceb3532516	n/a	Heodo
2020-08-06	ElcCFBJ.exe	exe	254a9e49e370d29219458958de4ed57e0f15427b0d5c911ef8a5c8a01636bf68	n/a	Heodo
2020-08-06	EaG.exe	exe	da25002b3ccda6eb13abcdd00e7dfccf24f5e9b816dcf8eb2987cc01a60f523d	n/a	Heodo
2020-08-06	C22zvLXmBp.exe	exe	f8d9fb0b8212d293a834fb58e47587677bce2660f9495d57a67f44754b27f753	n/a	Heodo