URLhaus Database

You are currently viewing the URLhaus database entry for http://lennarz.org/cgi-bin/XRW/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	447486
URL:	http://lennarz.org/cgi-bin/XRW/
URL Status:	Offline
Host:	lennarz.org
Date added:	2020-08-31 16:06:16 UTC
Last online:	2020-09-02 09:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-08-31 16:08:10 UTC to abuse{at}strato[dot]de)
Takedown time:	1 day, 17 hours, 25 minutes (down since 2020-09-02 09:33:22 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-02	VfD76Ho8Gx9P9hq11.exe	exe	6dd5d673725341b0790fa4f3bed96e49d656118994b0b19c38e62fd53defb39d	14.49%	Heodo
2020-09-02	5zJ8IFrsbkyoNTj2j8d.exe	exe	598bea746526d6eae854e126eac4b4b22e1023363875c53142ef4b05491fdcb2	7.35%	Heodo
2020-09-01	myGomxiD2wIaRfUFon.exe	exe	b6f2457e50dc2fdd2cf809ebf63577c7277e0e26bf8e87188572c01d96d48f97	7.35%	Heodo
2020-09-01	BjeIKJ2bwcipjNI.exe	exe	fb13df8b0a039ba2084a3a5e4214347716b56fdbd7f3c708717bb439acce3656	20.29%	Heodo
2020-09-01	rxlBrb91iwVU4WFW.exe	exe	ab531a85f9cd8dfe045c6653fd19d386eb4d380f5051cb8171362a7c11abf369	10.29%	Heodo
2020-09-01	6hBkmDSfA85.exe	exe	f110cead36ce69529333fa52eb015836d4532db514dfcd94cf86c9f3d2f254cf	n/a	Heodo
2020-09-01	0BTEDNybPtGjE7s1.exe	exe	2c1686e759dbbd5bc9d8ab2e42a0f4ba25864da3a8070e96c9d5267214b0cb05	11.59%	Heodo
2020-09-01	8F9ox.exe	exe	cdde68356e406b3cbc4ec6b4115e1d39500b1cdff3bfae70a80571e22e60007e	10.14%	Heodo
2020-09-01	lenq.exe	exe	70fb173d79d46a7d93995eb273a9f5ea8b094d1d7170267304cf2af9f60f45ce	11.59%	Heodo
2020-09-01	ibpbVALj.exe	exe	a783e6d04e03f59a8700ab7f43f6fa2e0c766cad8636b26232d695a73ffce7ea	n/a	Heodo
2020-09-01	fGb9qK9Wv29m0NHi.exe	exe	0fcc4d8e44bd9befd0e39b6509cae0f9ab1a96ed6faa69efa591f5365ef7b78d	10.45%	Heodo
2020-09-01	hAlQiOGbrPwYHUN.exe	exe	f08f87bcf8e0a6c3e83f4225c524f64b65166ea3d98fbc0162c4d4f98eb03760	10.29%	Heodo
2020-09-01	1XNyX7F8V0cJ3yQ.exe	exe	30f394c5a4330f0c285f6c9860f354b569b27eb3c808587ddc22380683167dfb	10.29%	Heodo
2020-09-01	mKEVQ8lIq2.exe	exe	7126c88e921c10922f86ab8318ebca51723d95bb99ab4482b8501820f6ae5582	n/a	Heodo
2020-09-01	cbjr.exe	exe	3f4690cfd69f12cfea4d2f06bf4bdb1a82bf5f6a743a36cb58a27f4f153a0be8	n/a	Heodo
2020-09-01	LHK6.exe	exe	785c23bf6f8216398ab8db531f523051614348215d6bbb3596d17858cd614d62	n/a	Heodo
2020-09-01	Ae0Cyd52oZBpy1rATv.exe	exe	27827ee9224ded5877035f0a89ad499d953c48c51516f123403916c23bfa5f06	n/a	Heodo
2020-09-01	Sa487NZ.exe	exe	7344f185b59bcba3a74ccece98d0bde3414262ce98d13e7b8ca8346077e09818	n/a	Heodo
2020-09-01	U41lLP3u.exe	exe	37ac2806749250e326ba770de88aaddb7e6264be2b60603c80fc03d06812c5ef	n/a	Heodo
2020-09-01	Vw26HFjTUKORss.exe	exe	d85a3e4f9c1537443434349685b34b7432172592c93d55de871fa6cd087a1c4b	n/a	Heodo
2020-09-01	UgYHjTRphPZ6V.exe	exe	7271e6ce824688d65bb99149f558f7d195a12bf7d5ce62fab1dcd2eebd120fff	n/a	Heodo
2020-09-01	FLstNUwbF1t9XwMTEZ1.exe	exe	f42b38b74220cd621e2922ccdbdde5b2ced3c7682a020fa2f1cc264fd96d5224	n/a	Heodo
2020-09-01	p3cZniHMJlCvWjl.exe	exe	3cb36715b4646e8ec823546811db52b56ca6abdadd07354bb0ed94d702bb442c	n/a	Heodo
2020-09-01	RRNnNN.exe	exe	ffd738b9352c11c5d53583c2babffaaa598e959e3c8d1281b5da4a46d1316189	n/a	Heodo
2020-09-01	dtS.exe	exe	32df4b0ba13d96fd249dde7e303fcf9ab9116c6ff871b96266bc05924c1baee8	n/a	Heodo
2020-09-01	xBkPoyGd4PVXJ2r8Nkq.exe	exe	3a1b04e761a3aa14a531876a9fd5620cc20a704c57bc9fd3f00491655eb79eaa	19.12%	Heodo
2020-09-01	N2ATD1hm1wzvS10c7vR.exe	exe	c67601bd787fc7067ed7e37e82a5493a831d3eed8d7325c83ec2da1d1cd0b7bc	18.84%	Heodo
2020-09-01	dmff4GLp.exe	exe	0fc82c2a808895f9ed708ba816d268a9f7f793182a2dc769f68b17454730b421	n/a	Heodo
2020-09-01	5rjCMn4.exe	exe	584d67d500e4201488d6a9ec7c0a2667af8e7f1663ba2e5b126f549451173c32	n/a	Heodo
2020-09-01	45q.exe	exe	454d403ba17aa58726c18a6b8c60bd0d344f131ce7f8d5f5008aa0ad29514cce	20.00%	Heodo
2020-09-01	Acc.exe	exe	dae01ebbf46c3ca0d003e0907d87334e21653b59a091f4c30d79a8cdc9c2d493	20.59%	Heodo
2020-09-01	nYjHb19Emn8lp.exe	exe	ee9ec7393dd2797f59357c3f5a52dab0e4ed424d88a11c416e242e6032cd9e2d	n/a	Heodo
2020-09-01	GMsvZ0wQc2JjrStk7.exe	exe	4930169bd82052d6f89ffdf79787c7b3e969adebb486e3827a80ebe14cc11c0b	n/a	Heodo
2020-09-01	zxt6u.exe	exe	eca9f8a4ab538969334839d8f60675dafded964a0b5c46425fd82c62a92fbcf6	12.86%	Heodo
2020-09-01	GuscGsacdHYf3pTm1.exe	exe	b637e2897a433526e71c97e75b7a2054021240ddbc29830ed8522278210e913e	n/a	Heodo
2020-09-01	yU3EwRV.exe	exe	3b0fcf6ea6c799df29751fa8089043194e312b07fa9e80f51e29376057b17df0	n/a	Heodo
2020-09-01	Svg5QUS2imf2IUq8jKjw.exe	exe	5730958c17aae1f826396c7e1d32437bfcc39f087627fa3059b9357e932d750f	n/a	Heodo
2020-09-01	yXJSaL0yxUjOr8bKBe8.exe	exe	4e3fb1fea7000d551ab0e758e600c67215b34106190b0369ba6188f287ace1c5	n/a	Heodo
2020-09-01	dLBwO0WH7YCJFBtA74CN.exe	exe	d4b63eb330dcd2cdfd77629ee49e3bf7f3a20c4f47801059adfbf7ddcb269ff2	10.29%	Heodo
2020-09-01	j95WUq5MYVFcKJqLU.exe	exe	28d2c3169c6ed9d514546c51eaabc1de70773e2ab67f89f530cc79779ebd6a5e	n/a	Heodo
2020-09-01	9awY1VSO0N9aWujjw3zT.exe	exe	ff65bbcfe09035fe43019f9fde6edc954730fe43cab3643d7573da006e5ca867	n/a	Heodo
2020-09-01	WclCTF.exe	exe	4b4df15f29709c3a3f7eb38b19406f85d6ce2142e64bc4bdb649f092b7689934	n/a	Heodo
2020-09-01	O4vQBb8Qs4G7JElU5uGTS.exe	exe	c54055c362c3ca5c559c832f96a5111c73bcdeaa07734b029a64672cced53120	8.70%	Heodo
2020-09-01	QagtWDidxQ.exe	exe	554e872959ad3b6bc990796c3fe92df2bfc029b0cca023788088938243e2ba57	8.82%	Heodo
2020-09-01	q975VYQEttVl.exe	exe	5ed4ba643a325a0f51e028599e74594215cedf5b65f5a3c8d977297c03713e0d	n/a	Heodo
2020-09-01	2YkB1465.exe	exe	5b693aec596b3e7408fe37e2300c5681c70c5a08ed4506c936a63a4507721b95	n/a	Heodo
2020-09-01	FdddA2OpOMNK1i.exe	exe	752d7637cf1b7e8c77f338144c1f0b76ee6a32841d3c09c0320dd5b443fb2d5c	n/a	Heodo
2020-08-31	CLZ.exe	exe	2db0758d60d1e61b6c69778283df5dde77c84cc771b29953c9821433f348b336	16.18%	Heodo
2020-08-31	BL28q.exe	exe	efedcc357becbda9b72bf2ce4c4886bb66c4a7560a60286961d39a5e28db46c4	n/a	Heodo
2020-08-31	Vrt.exe	exe	ea17f66ea1428d971e73160197d768fd962328761e683b29a222b76c3fcf7649	14.71%	Heodo
2020-08-31	PeLj.exe	exe	b7f07a690cd50f5f722ef1b5a7a940a5c64e341f6a46f94c4dcbe10f18d6b516	7.46%	Heodo