URLhaus Database

You are currently viewing the URLhaus database entry for https://vierakimbo.com/cgi-bin/5sl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:445330
URL: https://vierakimbo.com/cgi-bin/5sl/
URL Status:Offline
Host: vierakimbo.com
Date added:2020-08-27 17:08:54 UTC
Last online:2020-08-27 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU002895444 created on 2020-08-27 17:10:06 UTC)
Takedown time:6 hours, 28 minutes Good (down since 2020-08-27 23:38:44 UTC)
Tags:emotet link epoch1 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-277s8stltJly.exeexe 320b32588747e724f53815de8f561658d73d2ca012aea9b1385ff822aecc456en/aHeodo
2020-08-27cbOAmob5g47Re.exeexe e8e27e01004f09b91ea9d55404010d31c30ba7372abb5936b79ebe4dfc536e4cn/a Heodo
2020-08-27afX.exeexe 102143296449feb0b1a80eec2da87681fe03c0f5bf3f97d685716bc43efa8fddn/a Heodo
2020-08-2760NbnCWdaqGo.exeexe 220b9d1dcaf66b758f376b8659251cc74ab91c35a029bc182ded0284b6d94cc1n/a Heodo
2020-08-27beVJzfm.exeexe a1902717fdbbf995e3157354afb23fe7ea72b8927fde58562e386f3511e75f3fn/a Heodo
2020-08-27a20CFK2nfM3wRwP.exeexe 8adf032d6f1a61898ea8cff4d013102ee5808f4e6f0764e962b99fd62fe0c490n/a Heodo
2020-08-27SAvP69xSP.exeexe a461153fde43df77ccbbb5bcf0b963a43e89779beee4c68694b405d253f0ef8en/a Heodo
2020-08-27xB8bIWf6h.exeexe 16472cf25ce26fc5919acdd3962f6797aeeb4ea9d92ddba7dc4d51c46a11a6e5n/a Heodo
2020-08-27j3VES3bN4FXyC5cYm.exeexe 3c2894ed886718320776ccbbc4f839eaa5d2b0c7b987471856527f4ec5df9fc6n/a Heodo
2020-08-27Xd45bkwrZ0sUO.exeexe 1b88431d7b9a0cbadffa36214c6422d2d36135ab5e4d7111258530faa37dbfbfn/a Heodo
2020-08-273LK7JTW.exeexe 83db3e1d9eea5918e630560192dea064e21eafe0b8979bcf3a04f87ddd062152n/a Heodo
2020-08-27GCteNlUDF5S.exeexe edaac4b22b676d4ca62bc6e773fee81b22b881bf3c96fe4661a044221052e587Virustotal results 8.57% Heodo
2020-08-27CFtYVhvG1t69rmWkw8Yl3.exeexe 2cdd97924ce8dcaf73567bad03e3c8ca83bd084c683ae6471d3d44ffe52a975en/a Heodo
2020-08-27ekvbDOHzK22lwHCYGDL.exeexe a525c488ac5df9ed5f39ec8e713c94cae6420e130f7525e24a1ed3c55e51dda6n/a Heodo
2020-08-27XHDnt7p3wmkrkP.exeexe 6ccfe4162ae5ad7d3223d2051fe311ec040eface52b8310e2ab85e12d59a047an/a Heodo