URLhaus Database

You are currently viewing the URLhaus database entry for http://tecnofrota.net/cgi-bin/1_9alwl_mg9i4/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	432942
URL:	http://tecnofrota.net/cgi-bin/1_9alwl_mg9i4/
URL Status:	Offline
Host:	tecnofrota.net
Date added:	2020-08-14 07:15:02 UTC
Last online:	2020-09-06 10:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-08-14 07:16:11 UTC to abuse{at}ciberconceito[dot]com)
Takedown time:	23 days, 2 hours, 57 minutes (down since 2020-09-06 10:13:33 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-08-15	WW830PE5amzG.exe	exe	f044f4382111b0bcd2902cebf6fc85ef0c2f343286fc7385620a2900d93650c8	26.47%	Heodo
2020-08-15	lfJeS.exe	exe	286beda321d9e7280e4a0434d6d2c22874bbdce1ee3fe394c294f8d6c35b6f3b	n/a	Heodo
2020-08-15	1cCJUbHcUv69tFg.exe	exe	376d6b68b528d7db1a2f30d6a31d5875db409d5c7a3260b0d0aa553ce13b8e65	n/a	Heodo
2020-08-15	iDRzQjXZ.exe	exe	0cc269240f2b0214d062367ec3584b5fef893f4fecf4af5296e448b20b4651ab	n/a	Heodo
2020-08-15	09NGBksZ.exe	exe	ef3b9fcef8826ae1c7077d30152b85eba0e19b042cf60ca7bb22b6c84c617cdd	17.14%	Heodo
2020-08-15	aV4V3xVYaeVpOlPo.exe	exe	90dd014f7e1a1c93cafe3d9b8724832fc44cb1930a3a5abfd8c9c3f4e3c4d3b3	n/a	Heodo
2020-08-15	4jIQ5jhpX.exe	exe	483e68029854d9258cf054c43e26f5495e1a70a0fdae83aa2f5a6c601acc4cde	15.94%	Heodo
2020-08-15	DuWCLvPf.exe	exe	bb8d5e95c6e13efa07b2c8cc68ee17befd198ef7c73378c385ff80051d631282	13.24%	Heodo
2020-08-15	ChCRwalllewBgFTgH8B.exe	exe	b9d5ad2af42ec141363b0644904e4a880b7964fea6c5350a0296945b5e22406e	n/a	Heodo
2020-08-15	FMx7yOGRO.exe	exe	915a2eebb318dbb6a484a244e3f07d16fda9110edc556b450da1142428b1d0a5	n/a	Heodo
2020-08-15	YBiOcFyNkRJCb49OdTHZ.exe	exe	29498d331c13be24744e0edf187b33bfa54f8597b4d926b35d024b0cb9a6ef5f	n/a	Heodo
2020-08-15	PPA3sB5ASnoSzc8.exe	exe	74c444088bf158e579f64f55527001130883201a3599a68bb78c31c90a77334a	n/a	Heodo
2020-08-15	OTG.exe	exe	982c353d307c41f95780da61cfb628ea6ccf7002a7471cc17e88e561dbe2b136	10.45%	Heodo
2020-08-15	P58YACTVfNhbp4d60jD.exe	exe	6b42a80f71598ea4b28c70ba02b676957eb9fca1959e03fab7f4c56e46eb9c7c	10.14%	Heodo
2020-08-15	htED.exe	exe	2d011ba5b002110de798367d7fdd9f574f7891b9eb71abaf20931039d90f8802	n/a	Heodo
2020-08-15	cFNV.exe	exe	b9e0f102811eecc80bffe121aa851ec0f3088356d68e3ce13ff6b7fb2ded43de	n/a	Heodo
2020-08-15	Ckc.exe	exe	467b440c7c505024c8bead3538aac77e3ebeba9aba0d177e0dc2b79efbac8dd4	n/a	Heodo
2020-08-15	zeYCwn8.exe	exe	6200587529c187841a46d9f08e9f8a1958ec181274598199c26f29e04f4a4f01	n/a	Heodo
2020-08-15	3dmCL.exe	exe	d927a4d4a29bf0d8a9e7e2a826170e797d661ee19ac181b91771742e7a16d29e	n/a	Heodo
2020-08-15	Os.exe	exe	f325cc8c85c0b1775dee5ce2407ebc572bf26514e27a38ae69e424fa857f121f	10.29%	Heodo
2020-08-15	Df4P8HOwomot.exe	exe	be53d3ec8b7cf73e04b0155b57124d8905956b313a1ae1bcc4365c05639d6da9	10.14%	Heodo
2020-08-15	rckuyHOq.exe	exe	af585781fbf094110b7d205dad39cd7a5a4785b5b8149c59a1cf97e9251a91d7	10.29%	Heodo
2020-08-15	jVGQsbRdW2R3gYAEbYi.exe	exe	8bca1fd1cd37d6894f363984d2d6e473ec95dec5016d2d85bf5873f35fbc5ec5	n/a	Heodo
2020-08-15	43HMSXL1bOUPqh9.exe	exe	1f3ba919818a146ac4ac97c150f7721e58522a6c51ce0f073c92bd88981c449c	n/a	Heodo
2020-08-14	NN.exe	exe	ec7fd13251ba6c9481bb989fe77ba2ceb16062cb1637f35c1bc306783cc61420	n/a	Heodo
2020-08-14	dBHPoSDD.exe	exe	ffafc5450087de27a4fbdb1258a26a63a03a1ba5b8d826a4ca37f281f2b3b5db	9.09%	Heodo
2020-08-14	SccU1XCQmT.exe	exe	ecbf8e5d7bd745d9e23fa7fdc316efa3f37ab4a158297d9c2411cbadb01c4f4d	11.59%	Heodo
2020-08-14	k80z.exe	exe	39e6aed896e5bdec31467e6d78bc829487415b6bf33b5bb9006ff6b0aa780caa	n/a	Heodo
2020-08-14	8eEtrmUNO.exe	exe	3d5c6815e0c370aa0ffccdf169c59ea5f43b8807bebb1e8169ddb73464acd05e	n/a	Heodo
2020-08-14	9uthUW.exe	exe	c437b80ab5357bde346d3c5b0f4e8757d2eca8a3d37f2ac0a94eeccdb300c63f	n/a	Heodo
2020-08-14	tj.exe	exe	572e376da60b6afc0a3fbf48dca84c6c16f220554de576ee50786598ddfbf556	n/a	Heodo
2020-08-14	JNUufnrL2Mk.exe	exe	0ea6c99c9ac294c9c22ecfae177d563af0a49f890e331f71e1e508cc179ed228	n/a	Heodo
2020-08-14	eplmA1B.exe	exe	3d84811ec52875e0cffc8781a8406008b3091d87c7e815351652bb6f59b041c9	n/a	Heodo
2020-08-14	ySfFJ4FoqLo3H7uE5.exe	exe	df49cbbdaabe00e5d32fd173bd0133c12fb0257ff5b04e1f52221e1774f96d62	n/a	Heodo
2020-08-14	ukX.exe	exe	ebc6ab6da5509a154141e9a6051b1c9c70121c5c1389d67e5eec0ba9725e01c9	11.59%	Heodo
2020-08-14	qdTRHz0zf8e.exe	exe	83ae502861a5dd0327dc934d60ac76dfa3c4b5a257f424b23243aaa1b21037ff	n/a	Heodo
2020-08-14	yyjk.exe	exe	28d4ff08b555b287995a12879a4cbecbb5b7b4b3f1dec0cda0bf9f14dbbd5255	n/a	Heodo
2020-08-14	TOaH.exe	exe	344fa676fe830ff63999d5eb2825b63e7fe75ba61dcc5cbc30c74361f1035a0d	n/a	Heodo
2020-08-14	y8yDcLyo.exe	exe	e71506c1d335ea543cdb739c4d9a10b264d87943e911ba586c36bf9fb5cba9d8	n/a	Heodo
2020-08-14	LkD.exe	exe	c9c1a5fad71a51d4f75df814898a67ad551615e7727b4226c823ae308842fe8f	7.25%	Heodo
2020-08-14	yeZOqWmqav.exe	exe	20c61a079062063f7baf3ec3ed7ec54a1fdd5d723084775be19e6fa7d32c299d	n/a
2020-08-14	Ci1gf1RUoY8TsLjFr.exe	exe	2187d9e7e315cacd6e471784e72b3cc6f42238619e70f95a3c756d076739e8fb	n/a	Heodo
2020-08-14	t7ZIYQ.exe	exe	3b5868ac2bb572a58bd4e313383d393e51c6c1c478bde9260879deba851af643	n/a	Heodo
2020-08-14	Aq.exe	exe	48ab59dde4193f307528ae252eda1401ae566598d0b436bb96052cefede80495	n/a	Heodo
2020-08-14	T.exe	exe	932783fc2c2a6631c7687f23ef4d98a5e03536b41d8135705e7d8c1752063a52	n/a	Heodo
2020-08-14	3zcldYoKMBEpcedhk.exe	exe	917c101e1bf80fb3835aeb3dcf645e375937823a21c24904691f6d21c17cae9c	n/a	Heodo
2020-08-14	ucI3P8cJvFSRLm.exe	exe	673a0a22b597cbf007a83fe43648f4573d4f8717083db90bc8190e35c49800f2	n/a	Heodo
2020-08-14	zU5.exe	exe	9a13385df2b375ab1312dce633e1dd77317e9768b6700841f78edd5ecc13582c	10.29%	Heodo