URLhaus Database

You are currently viewing the URLhaus database entry for https://zubk.net/wp-content/plugins/gallery-plugin/upload/files/vDXbZpIep/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	433687
URL:	https://zubk.net/wp-content/plugins/gallery-plugin/upload/files/vDXbZpIep/
URL Status:	Offline
Host:	zubk.net
Date added:	2020-08-15 00:12:08 UTC
Last online:	2020-08-16 04:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-08-15 00:14:05 UTC to kdenisb{at}gmail[dot]com)
Takedown time:	1 day, 4 hours, 37 minutes (down since 2020-08-16 04:51:09 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-08-16	w8328.exe	exe	a16bca66acb55e4857d76d3eb01ed1d9ea20445fb9648e0a5b74d0eb494c7b13	n/a	Heodo
2020-08-16	nrygtpxrn01611725.exe	exe	5b08911db993588517755c48993022120e74d3bd79c1056d9be1aa9360089246	33.33%	Heodo
2020-08-16	c3569pw66177.exe	exe	863f651df354c5fd7d18b600b9524e65d13a9b4365792eed5ce4f99b1c867bce	n/a	Heodo
2020-08-16	g24019.exe	exe	716e37bc272c1d26e4329a2cfdf06ead0cbb569a156628d474301a4df0dde785	30.88%	Heodo
2020-08-16	i1vu051.exe	exe	a97fdcbda893d6fe08ed8503b537c0e78b8e583529cea6d5bb8b71378f2ffc19	n/a	Heodo
2020-08-16	ydvruo8585479499.exe	exe	8f50fbf9b169c730578d204dcf563f5369bd6a1975b7236304341ede2931c7a2	31.88%	Heodo
2020-08-16	osm4t94fyb470415.exe	exe	ab8b4153fddc19fb44f6d71e4f886bfb3edd15a0c0ed3e4e5e091c93e07ddd6b	n/a	Heodo
2020-08-16	ku98.exe	exe	8ae7c5605a7ca34d6576bd93beb63b7c674eec511b8b919b466e231e58c55577	n/a	Heodo
2020-08-16	v17o5516.exe	exe	83b2d3d8938b739fe73a241ca594058b842370d4fdcffc85a71fac87b451367b	n/a	Heodo
2020-08-16	gi83593.exe	exe	52aae247e198e918e6192efc1ce5d7f6dee3a0cd43c870e06ba74ca115b167fd	n/a	Heodo
2020-08-16	v1gz8t44394.exe	exe	bfe24ed8296733bec3728dad9b774442970baa74a1070bb66da68d551bf7f54e	n/a	Heodo
2020-08-16	0rq7ssxu5842.exe	exe	4b542b6f96ca01c6409d2aa8731a4ff1ec4d732b0f1f287cbe75296ed30a0cc4	28.99%	Heodo
2020-08-16	j1076.exe	exe	73966426fd3872d9e796b2cf50aaa8b7148642b3140838d91284b8cf7da3038e	30.43%	Heodo
2020-08-16	jn121.exe	exe	df255d175250d7e322aebfcf6a9bfa0802fdfcb3725071ba862e5874c71afea5	n/a	Heodo
2020-08-16	dktgm0zky734067119.exe	exe	87bbd67b3a9d8d6a24271ace2aee1baec35e3b992a4ee92839d91fc489b334fa	n/a	Heodo
2020-08-16	3olg4045965974.exe	exe	04fe500390d4ff74f6af49227f6059ef71e166e465509ab693ba7cf9f7646ac5	n/a	Heodo
2020-08-16	rfp70h97030370018.exe	exe	2c9623615dcfc59aaf05c49a909a9d015e5ec65399e27a1ada7a1b54d23b9df1	28.99%	Heodo
2020-08-16	t56jmv7sf00196172.exe	exe	c221b9dfa35a9cc8913f8f8b31ca1d3e8d40ed511dc2d4ce057a8ee2ffef02d5	n/a	Heodo
2020-08-16	r0b8045559.exe	exe	1f1d7e43a8104b5333d8e54ca06913aec2165ba9bcc4a3d07ffd7ebd7962f2bd	n/a	Heodo
2020-08-16	f9aksthx592165.exe	exe	6fe194b23057d5b65297b966c6267a30ec6ed7d96008c4a25f806c4989cac59e	30.00%	Heodo
2020-08-15	teqjig8u8k16216.exe	exe	757d060a616dc6a9e4678f472849c411ac33606cf47c6bc3538c8b6c881206ae	n/a	Heodo
2020-08-15	ha0.exe	exe	feb82d5e2218c3fd1cbc6614e7aa6cf3a2e6cf982b31af839d30686af8ce7d96	n/a	Heodo
2020-08-15	t5p43281415.exe	exe	0797561f3f376a9905f2679425afb04da3c9f6a6502775547308552ca8384bf8	n/a	Heodo
2020-08-15	avf4krr2893.exe	exe	e9df11d5b5d69c474e9bd5ecf074645da66782b6cc4599133ac6d9c757340959	n/a	Heodo
2020-08-15	rmq0597.exe	exe	78f15ab29355b2706d033ca11185d91059678d9133b0ca2ba68e11a7595bcd86	n/a	Heodo
2020-08-15	turg41.exe	exe	2999b0523a8218b8cbf3e756d0aeb4c8045a43088e4545bcdb6d5968d0713a89	n/a	Heodo
2020-08-15	ihlbqqk50273782.exe	exe	1a0e45ab4c8929c8a6f111a7ed73c8cdc34e9ec205fe2a6108060cea1ee3b69b	n/a	Heodo
2020-08-15	i8093420538.exe	exe	307249c0102419b9c6fdffe9c6933d22c66e4b4cbf2945b9c1d0074cdf6ad8ed	n/a	Heodo
2020-08-15	yesx534875.exe	exe	a2ea3b303268e582d6a914f3b29e36cf115162301172fc6a4738da7c9f3a6afa	n/a	Heodo
2020-08-15	kiq2021354826.exe	exe	4b0eedd78c6d0a3de6016e3285278c7b4c7bed92e17eadd1d1dceb4842ea36b2	n/a	Heodo
2020-08-15	9ow9opkfl235312.exe	exe	8a9701756c41a814f7ddd97c9d3e8cd015ffe323fcf5a61b0f79c3df89738c9f	n/a	Heodo
2020-08-15	h1062306.exe	exe	8b44627340881eb8aee62b580cca2c26be35555ac7161627309c520b965333ce	n/a	Heodo
2020-08-15	3prdh8gt948490.exe	exe	815d5d9c664d8a7180d3795bd2cef33da80d0b416bf759ac163ca9b48bba1447	n/a	Heodo
2020-08-15	dndjaj04.exe	exe	adbbd06774716a14d69ab2ba9c05e28f003e5fe7167c1c3bd4978ee37124808e	n/a	Heodo
2020-08-15	itd74.exe	exe	bde87f6dd9c24fea8be20ace7f034fbb938a61244780b97fb6172842b06783a2	n/a	Heodo
2020-08-15	rbowf7f2643986027.exe	exe	db5fb4b1b50d75cda5ade66d64750ed8eda59c69845484c468c3821edefb50c9	n/a	Heodo
2020-08-15	qexc93.exe	exe	5173bac575cb57a599dad6b1953da6a24faee0530dea27721750348d7b55955b	n/a	Heodo
2020-08-15	u71uswj4975.exe	exe	536b6a7441483fcf26ae51ecb0eca53a2e65460f8983814cd55a20e509a55a27	n/a	Heodo
2020-08-15	pf168915.exe	exe	c8aec7ac6060eb3e72523a4a5ae6832907db226a52b2e420aff1319edbcd8696	n/a	Heodo
2020-08-15	0e7979560136.exe	exe	53f376b6c957483af5440a3077591ec796cb5f5cd39c30acc80b9f786ddf7065	n/a	Heodo
2020-08-15	7ct3278.exe	exe	d0a367dd0fe5dbe5ad6e4d6ae5732ef5d01161586b4081848b7dd5afdaaf917e	n/a	Heodo
2020-08-15	pj8y37410490668.exe	exe	8c2ac04507892f7d840df444c111e92f7f42227b88d8cc7d4698a56e795b5134	n/a	Heodo
2020-08-15	6k4c6txo5082.exe	exe	077a7eea8d770c60b543685e33c31600780b9507956d1e8f34dc434d4d429da2	19.12%	Heodo
2020-08-15	1ktqc47712.exe	exe	91f4f9c34b72525fc839f5a9a0f6eda97d820a6016e910f9773a51721f23803f	n/a	Heodo
2020-08-15	8o8b66.exe	exe	7a63d38d4d41a3509433070317f6199f98ebc5acc6475ce1186ee67f102c8688	n/a	Heodo
2020-08-15	ipnqu69187.exe	exe	43cfc0938a0c6d12b55fdab5ed955d3b4a4cac1cc87a7748234b288e37dcffd7	n/a	Heodo
2020-08-15	2fz4424.exe	exe	d4d048c66c2aabad6992065da8adb51416846e9c2a90f8beb8a64b32333e777f	n/a	Heodo
2020-08-15	6wb0315304050.exe	exe	95133a07b35fc9e68dc183700601f102bbcbf315629e43d1d1b80a0e642806dd	14.71%	Heodo
2020-08-15	k854276362.exe	exe	8243bf16d66bc40fefbe156475b973c2fa8f0aec56af57cb8eb6c82475e69e09	n/a	Heodo
2020-08-15	1urf4nc8429653537.exe	exe	6e51681cee2bb475a2abe49ed54f63c94e86bf5b94f075790ac16e12e3031a5c	10.14%	Heodo
2020-08-15	69a27226.exe	exe	730c9c310ac66c6bc00d758f3f83b162e7c78e8a3dcacdfd67dd9491f8121f2f	n/a	Heodo
2020-08-15	ptyl7uk620773275.exe	exe	be79afba241aa6bf38167fa1b90a7614bfdd7725f75b7c991968554cf6484048	n/a	Heodo
2020-08-15	dum6gymt4316689606.exe	exe	f44543009ac5e14aa4fdcd0503e60a4f8972f31dc3a08f450518671106d34663	n/a	Heodo
2020-08-15	4zic3z6i4005279.exe	exe	9452e3994d2141b7200ab579a0c13ee3f7aaf1e8b21a6c6ab6510b7fc387f464	n/a	Heodo
2020-08-15	h3f7nn9696181.exe	exe	43a8485f57a620cc84ec3f186ba949f39f6502cbfe8e25ec34dbaa46edb13148	n/a	Heodo
2020-08-15	ji2or5023382742.exe	exe	6e3d6feba4689a369867fa3865bbb63906b4dedcc4020de2a85212cb76b4bf96	n/a	Heodo
2020-08-15	gbj2yq5p9.exe	exe	db8d4bd6182b48669ea43ba29d33767544434647072315ce4b8d1c329183ce53	n/a	Heodo
2020-08-15	sx46g00677055.exe	exe	cc3e64b96f0fc18530393177e655795e9efe6b8020947f04e21b09de18491abb	n/a	Heodo
2020-08-15	zcww421lwl9691236328.exe	exe	e1330ac6867756d528879cd0f5bfde31666380171cea1ff0de7d47c9aab0edef	n/a	Heodo
2020-08-15	elvev7p4mp39900.exe	exe	9a5b40b3a8ed74ce613c18bd008042a40893f925ebd3b896ac64057896e16121	n/a	Heodo
2020-08-15	urhr375.exe	exe	a5b2c1dea28d62bb604a3ff0c48d94f16072c81af6cd5fcc58d3c56e50b48687	n/a	Heodo
2020-08-15	auq733.exe	exe	0a2c146c280ff786adc495b017f8b04c1e763048c65f2920ea40de76f6648aa2	n/a	Heodo
2020-08-15	c0rkesgcw561502209.exe	exe	5af20e4ebb65bce97bb6be06bc69c98efb921a1d26f05ac5e35d6ce9e629d290	n/a	Heodo
2020-08-15	qafqwoti16.exe	exe	f5922af03a8d6123d3c55108a23e98113caf921b00755a9138f1ff990a2df392	n/a	Heodo
2020-08-15	aft41.exe	exe	3efb4714d20879b0dd10c715bebec4c435461fc06869673b24b2621e3b471d99	n/a	Heodo
2020-08-15	a2yfo095g8.exe	exe	cc3f91e4c0cb14f43261939eb2192fcebf8bcc8c9eebc58bbff15a33d8ed80d4	n/a	Heodo
2020-08-15	fxg6uwkh02.exe	exe	f2a083cb55ea00006fc5718ffefc060dd05932643b97bc1769ca71723038ebba	n/a	Heodo
2020-08-15	zjjrwegtzd276510.exe	exe	b0aa063f6a1a76dcc7043ae0580566b7b771a66bd43660bf97df2fe667d0b212	n/a	Heodo
2020-08-15	c6tv1cd1jg49.exe	exe	54141ab55101037dafcd1bd4691c120d67f349484217bad310272ab9eb71aedc	n/a	Heodo
2020-08-15	yka3eb27010294.exe	exe	1b1e31bb034b17748ba8f94ec5eeb4cda05b112b91d0969db0a3be105b5debea	n/a	Heodo
2020-08-15	oykkk09537048.exe	exe	3c1271f04eb27a5733ca6a6ea30a78633f41d917341aa468f19dd9c547c82f11	20.59%	Heodo
2020-08-15	pctoi9o06783336.exe	exe	83811368abc087057696bb878982dcbb7656ff899f7e8ed64c920cd73d3d5fa8	17.65%	Heodo
2020-08-15	apj0wsc6103495.exe	exe	870491199a3830d9d2f707b22a28f8ef4a51b82738e80ea6246928c81bbc97d1	n/a	Heodo
2020-08-15	9phll69i3711594.exe	exe	efc3a04986688c4666b6fdc436a4539726045b835948701a092f241a7cdf0f07	n/a	Heodo
2020-08-15	gfbi408917223.exe	exe	70385e695a0532fee7555e5b97a6e0b42c2f47b496baa81837fe82fef7080f8f	n/a	Heodo
2020-08-15	e1m193.exe	exe	b091e5ace8fc562b12880b47e192be7199f813df2245211b4395ed2f78e48300	n/a	Heodo
2020-08-15	2u8936.exe	exe	9b31a56b71ccb1294c88817ff119927710390023890189833f1661367d46fd68	n/a	Heodo