URLhaus Database

You are currently viewing the URLhaus database entry for http://lansec.com.br/rkz_wgz_2mw77xw/NxS/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	433692
URL:	http://lansec.com.br/rkz_wgz_2mw77xw/NxS/
URL Status:	Offline
Host:	lansec.com.br
Date added:	2020-08-15 00:14:39 UTC
Last online:	2020-08-17 16:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-08-15 00:16:03 UTC to abuse{at}lacnic[dot]net)
Takedown time:	2 days, 16 hours, 27 minutes (down since 2020-08-17 16:44:01 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-08-16	al2wd0tj97743871.exe	exe	7c97930136dc70320974eb97633fc17b19ac4e97b4d22050d452ad4a884466e7	n/a	Heodo
2020-08-16	nz24304.exe	exe	781e363f9a1aec6659cdc44ffb4a162c526a428e4fc4e17f449f3ecd12e4c523	n/a	Heodo
2020-08-16	0z606.exe	exe	beabc6e681d1ff0f36e500da39f3afc801400080629e1e5ba36ee093cd98dd78	n/a	Heodo
2020-08-16	odufz6wy514723.exe	exe	89ea373c39e71830a9d28430a490a3ff5d566c3e22bb7676ca64da45eecd437d	n/a	Heodo
2020-08-16	xaott69w82412705378.exe	exe	35409e7a61401a41d1edb42de79ad7366263be7e4fda98d507e90cb24f52e560	n/a	Heodo
2020-08-16	s8qzyn2iy6.exe	exe	fba948ec0b0bd63060f5f8c396fb86c7447af36f946aef6f2e1481b30d8331e9	n/a	Heodo
2020-08-16	gao29905287.exe	exe	b323ec76ed095c63f8ec9adccebc889003aa99bdce69e0ccc9106a582ed7633b	n/a	Heodo
2020-08-16	h4yf14221510.exe	exe	b3a7604e89a688f80d0694846afb0947f948c86a0ecaa644a081a9eaad43bc96	n/a	Heodo
2020-08-16	b1n09.exe	exe	f0aa904ec35bc9baf14e0baf8221d1155127e210768022583f616c2e5a688a4b	n/a	Heodo
2020-08-16	5fi7k2712812.exe	exe	34d9f49e6ac0b099be3fc095bc59d9b3b52d03814561d9b79fcb5f1c470b8c59	n/a	Heodo
2020-08-16	pwcxetfxf44985.exe	exe	75e961a00f2930c4e3ed9ceda4dc70b0a1424c98d43d3b4ab4bac08039caf445	n/a	Heodo
2020-08-16	m7qzrxy9w737.exe	exe	7f047490322a11f6d32ce5d1f6f5918b056d91c24535e156c6d0e0d7fef8746f	n/a	Heodo
2020-08-16	we9837294716.exe	exe	f6479ad7deb7b03cd258581610bfe3a730239d6269c47292b417b897a745d5c4	n/a	Heodo
2020-08-16	xf58c633.exe	exe	9a04eee48835e2ec728e0507cd8b320acc96b111f94b6a8f719b3c9b1979566e	n/a	Heodo
2020-08-16	ah89kd877554780.exe	exe	d270a368567d7886d8b89425dcc94738c91f2564d92456b4e5fcfebc664e7dc2	n/a	Heodo
2020-08-16	6iufw8vsgo3601923822.exe	exe	798a15db0e2461ca4cd3ab18e1716b349f6492f26578d7ffe225dc22876bcd8c	n/a	Heodo
2020-08-16	qx21197042.exe	exe	254688b4621e9b4703480e398098029b3e51ab7e54a71e38809f6cdda5fcefac	n/a	Heodo
2020-08-16	d5w4637170071667.exe	exe	c93e442b00368f42112c80acd6a679d976c23258a1bf3cdca8d821d786f68969	n/a	Heodo
2020-08-16	ipjel41289937.exe	exe	ecb939b41daba37176b18825a7f8f8515a08fd5e7ad788b69b64a0ffa8b429c6	n/a	Heodo
2020-08-16	j1ehs9782.exe	exe	ffc6edaf1848cf280787081752034070ce5404000637b7108c8da111f5b5fdff	n/a	Heodo
2020-08-16	kzb1vmf23858.exe	exe	dd346fc5ae6c4f2c88bda99436e1139986b0366ee6f13f0f0e8d5b6a9b6f2c60	n/a	Heodo
2020-08-16	0il853j215.exe	exe	faeb01adf896022a617815b1e0fb77207218a1069459d399196ff6e1938fd8b8	n/a	Heodo
2020-08-16	hpqmirsn40132.exe	exe	9427bbdc11b3800e3b51948fa1e6f2fe70fba639de62e912d4712fbba65b1c41	n/a	Heodo
2020-08-16	eaoiihlk343287050.exe	exe	2fde6998e0c71f7484a1e2668a08938dc736de02bdf6c72bb3044ff856c147e3	n/a	Heodo
2020-08-16	tr4pdwgf2881312.exe	exe	bc42ee36cc7f245cbb52587c6a4592738a8a325cbc69b719e3921f8141651a06	n/a	Heodo
2020-08-16	nlb9g74798924.exe	exe	38e502d435819bb6d5057c6a0c679962ded5fee75356b68026dee6568dc7830d	n/a	Heodo
2020-08-16	ugbu5.exe	exe	eab4534fa246b2465fc5c1c33de8b77b65fb365c150e7ae90ad70a838a0ea527	n/a	Heodo
2020-08-16	b30j225118.exe	exe	fe2529c0762ccd3cb2346af933e19e65af4b4cf323f58315a16f282478263bd9	n/a	Heodo
2020-08-16	l4t6kxo9661589158.exe	exe	55e4a84d14dd0521472d0056d9c5a3024127d01e89cfc5b336c30947336bb255	n/a	Heodo
2020-08-16	u2t31.exe	exe	5c04a80b1806e00b70885a4df92ebf06bfe9b1e8d6b7b3e540f045ea5fde96df	n/a	Heodo
2020-08-16	wwktz7b881.exe	exe	b4b6be8221c42670b9ef8cd758f3ea154f52e211cad87f61473858ef9ab3f95a	n/a	Heodo
2020-08-16	qi1924905.exe	exe	29e573142c102a09828d42f17161e5b6c55ab9dd53e94d821f435bfdc66b9f90	n/a	Heodo
2020-08-16	gk2858.exe	exe	895a296892f3446e31d715f57705767d81226ae18fe05796d51136f065cbc6fe	n/a	Heodo
2020-08-16	z6aap87bk74353.exe	exe	401e58390e8ece5532399cdd069eb48271485cddb69d81f3b9d2a5665e405b5c	n/a	Heodo
2020-08-15	jpdhi30ot11503666.exe	exe	44e14245d86d0fdd21b4afc1094a34752323ca15998f085f5646801b8f078c9f	n/a	Heodo
2020-08-15	zi8elxcy0896.exe	exe	3fb63ece70c646a8dcc84b598566f9b5ceefc305a674c39a09f5196b232c81ab	n/a	Heodo
2020-08-15	755rnw7.exe	exe	87b84d0749a11017198104573732d438dfb32bc96a08cf0a4efecdecc5271318	n/a	Heodo
2020-08-15	p5t065377.exe	exe	d9594c316370a229abf9d63c45f4f87cf92431b93531f9cc5068b75afb2f582a	n/a
2020-08-15	wljckiv422100.exe	exe	2472f2156efc4b00b797310b43e89ba3c43f9ca0d85e540ae520e6c22238442e	n/a	Heodo
2020-08-15	ppgnh25596.exe	exe	988cbf949367be6b88ceed73cd48eb4da4eec21606935e70edb5afb797a67737	n/a
2020-08-15	iwgmhibv325.exe	exe	9e8792588984c908026a5db05926db732cdf57511da0d9aba50ff23255dd208a	n/a	Heodo
2020-08-15	s7sg8c413187.exe	exe	ed276836fd97d755ed4e903ed8f539395d649b6d14c5717faf80c365553494df	n/a	Heodo
2020-08-15	s1jm3qf88.exe	exe	a36b3df40cd6fb7867f7e64b8d60debdd861093d471b02b26e9c9cccb5234d4a	n/a	Heodo
2020-08-15	24c7iyb206028.exe	exe	d06281c7aba08d396aafc96a257dc3f05d16e01ccfc802e68b781737c35e1d8d	n/a	Heodo
2020-08-15	nhx77sq63253776320.exe	exe	f57b45f3a77882163e5fc8fb55258829c2edbc5c82d2b72e92487155392df2c0	n/a	Heodo
2020-08-15	69q095710167.exe	exe	e1338893caf61eb7b8fe9784b064035598290d739936015036a5bac64445c427	26.09%	Heodo
2020-08-15	h6e91200439.exe	exe	4260f7a48f1d39b16ddb3e1c0efeb37a14645dc73e5d9c670906e42adcf209db	n/a	Heodo
2020-08-15	d4m1jv2e2x245.exe	exe	c1ae571861782940690ae1642a6b1a0423625b356b372f9a3aca72e2db1b34b4	n/a	Heodo
2020-08-15	fz03ytu30.exe	exe	218ddfd5b3fee3ca70261b5e29ef1834aaf033eadc0f7c8cd3999da4c4043cdc	n/a	Heodo
2020-08-15	t09707.exe	exe	e0be3e7e439a640a92c855b1340b7fed0d73532eb40fcfa6b1ed1f4ef271b5f5	n/a	Heodo
2020-08-15	7iasfnhcrc2229489255.exe	exe	6cc8564083e86c0f87319f60a1a3e2f44491e8293c92b691f5f2001372dae4c4	n/a	Heodo
2020-08-15	jvgzj6f729534.exe	exe	fa6d73fe08fe0053ba931d7c105387398a41302a196f0d8f2dbcbe74fb48e408	n/a	Heodo
2020-08-15	cgfmszo26809161.exe	exe	688d0edccb67867f694b4f681587063dd17481ab178ced05f5fed886d5fd756d	n/a	Heodo
2020-08-15	03ny2ng8i8.exe	exe	c559800124d82cdb9b0f2e05718afd09651e1f85f0dc25b3439d1dc327e115dd	n/a	Heodo
2020-08-15	y9t822ut2841.exe	exe	947d74681e4872cb79916b9cd64c76907a85f11bd1b1bfa20b3588f7ea4c45b0	n/a	Heodo
2020-08-15	t973574752.exe	exe	551c10296756da2513bed8ece37993da2627aad1c9292088d82f16c67b4af122	n/a	Heodo
2020-08-15	2ozcz8c443.exe	exe	11e4c7ff09c6415a214f278877e198f3c9e7a946dafec14cc0ca32bbee57fc65	n/a
2020-08-15	1rkt1x387.exe	exe	205dcc8e25643084bb234d0f3a05d54b7371738b3d7918dc64d260a3562c31e1	11.43%	Heodo
2020-08-15	23uue34710929.exe	exe	37b9a980bddb47faa8acd044094d82c8d58e08d539bfd24a4bfb7e499f535739	n/a	Heodo
2020-08-15	anquq0b5.exe	exe	18be92a5ae927685f503d544ec3deaec520e0f7e9f2fac2b506180a1c597b5f8	10.14%	Heodo
2020-08-15	rrao7787089.exe	exe	84db05770f1a4bd40387dfe7239631627ae9f1817aa4cddc11d9a400cd73076e	n/a	Heodo
2020-08-15	7mkwk32m9v049110.exe	exe	dd6fa4f05893e8b7ae161733ed6b53c0ec1785d64a855aa933f52c030d7afd86	n/a	Heodo
2020-08-15	hmza1zkr012.exe	exe	e62337e0a5afebc4facfd7ffb7f102920b780a4a5344660e64fafa1371d46f6b	8.82%	Heodo
2020-08-15	7q7dia52.exe	exe	be89c30dbaef63ad7cbadcdf36f54c665980b14be27047aa6dc0e36c08a53098	n/a	Heodo
2020-08-15	76v9688.exe	exe	1d7b90cc2f4b9019b41ec3d8a859dbf632d9baf074ad4c58b090cade877458ab	n/a	Heodo
2020-08-15	59xc9022405663.exe	exe	297ff2f3c21b8e4e79486b05c25e5400d79a06a743e49c43ce67ca393abdde06	n/a	Heodo