URLhaus Database

You are currently viewing the URLhaus database entry for https://www.trustlancers.com/wp-includes/certificates/qzafEEIk/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:428921
URL: https://www.trustlancers.com/wp-includes/certificates/qzafEEIk/
URL Status:Offline
Host: www.trustlancers.com
Date added:2020-08-10 23:19:04 UTC
Last online:2020-08-11 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-10 23:20:04 UTC to CloudFlare Anti-Abuse API)
Takedown time:3 hours, 23 minutes Good (down since 2020-08-11 02:43:07 UTC)
Tags:emotet link epoch3 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-11cs5079282.exeexe d354f18192b45300f09421c9f20c53b86db7c640bd526045d57bf08a1e1f59e0n/a 
2020-08-11xs5xvsh8c47539.exeexe 867a6b26082f33b7013bcd3caf5302a5cdf38f7c9df66075cca53484422aea7fn/a Heodo
2020-08-115i892344.exeexe aefbe4b6be16505e6a45590010f6ae853e80d2b30147c716af31573d386feab0n/a Heodo
2020-08-11o9phy5ey2.exeexe e08a96fb7de50f99b58f5af75eed84a4005eee01b4e423764123641273d9cf0en/a Heodo
2020-08-11obupt15221911.exeexe d409092f1b7ed6c5bd33802b5ebd6944e09aec308927342676dfb932e9cb3d53n/a Heodo
2020-08-119tki1056483.exeexe a5c940c1aeaf3c010aafef866c112c8a6b85000f37a5358afe5927162ef6f2b9n/a Heodo
2020-08-11hq636577978.exeexe 565c3885d512e747c589529df90cf2a4aed2661715d26b56ce171a7ce77e00ebn/a Heodo
2020-08-110en0p1.exeexe c6de8e6b3472bb92cfce628df61b50ccd44846870c36ada011a22b01d91b138fVirustotal results 14.49% Heodo
2020-08-10uks27y3oq6288820.exeexe dcf33cf3dd4629cf154f5fdc28e1a05696f3392d22746e3fbe012fa8d6099603n/a Heodo
2020-08-10tzfhk51fau553177.exeexe d75e733783552b0adc97b0a2b878b2441cff8a54462dda955e025cb1a00e7625n/a Heodo