URLhaus Database

You are currently viewing the URLhaus database entry for https://www.kunstefan.de/cgi-bin/ZwGV/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	450898
URL:	https://www.kunstefan.de/cgi-bin/ZwGV/
URL Status:	Offline
Host:	www.kunstefan.de
Date added:	2020-09-01 05:02:06 UTC
Last online:	2020-09-03 05:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	gorimpthon
Abuse complaint sent (?):	Yes (2020-09-01 05:04:11 UTC to abuse{at}strato[dot]de)
Takedown time:	2 days, 0 hours, 13 minutes (down since 2020-09-03 05:18:03 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-02	QRrkjLOo7LIe79.exe	exe	d0ebb0103ccb5be299bfc6765ff7c04b08f72fd315b6fcad1985a466606a53af	n/a	Heodo
2020-09-02	1.exe	exe	afb93c1de1f9ae5dd726150721df384819c533251cb57649bacd69a6e35b700d	n/a	Heodo
2020-09-02	H2XC7GzdF20181569582.exe	exe	efd98eed8c0e6dd1dc3058dffef1c37049625bd656c33861c9f0bbaa8972530f	n/a	Heodo
2020-09-02	PbrgqgkEAo.exe	exe	6516e181e8bba5d43aa381715b2ac86abbe1e69be0917149a3679bde8f56a301	n/a	Heodo
2020-09-02	092225LXR4yndMe.exe	exe	f49790b4c8f5cfdd961f6838bd0ad6ad9e366d94e5be076603a8d9f16dc520e0	n/a	Heodo
2020-09-02	IVi808264478663254.exe	exe	ac6c416d8b9004aef510c95c32fdf9f45aff550dca9246177f0d2c8089a0c5bc	n/a	Heodo
2020-09-02	asf0207692.exe	exe	e4c45a28b05a55b998346dcbe9f7fb7c2281883119d8dcd033b2883c81b66c5c	n/a	Heodo
2020-09-02	BR23782618.exe	exe	36b0bb064f6815f339480a1f52b88dabb0ea04f3c30b5b408039c1babc60fb54	n/a	Heodo
2020-09-02	Eu2V6jCyVJ000681129.exe	exe	11da060ae813a9103273a87e546300bbcdf94ec0caed8fc0c9062c4ecf5a08e7	n/a	Heodo
2020-09-02	WxVUe0948664730.exe	exe	c26134d16cbb69a41d67715b9198a81c5d78e446357662bc1612621555dd0aa7	n/a	Heodo
2020-09-02	0006545896390GJ7Paq.exe	exe	ffadfaad1fbc72da0bb97456ccef1bc38aa276eec20a2b50fadb8a86799f1732	n/a	Heodo
2020-09-02	0000294312487439.exe	exe	657d29356c09410e1e0f30066635a5456f4cc43be5fbc87993a24184e2208c53	n/a	Heodo
2020-09-02	Qymtjz8s1513148.exe	exe	d45af3e871dda58ba4a8dcf8c669060cad4c83b859c6379dc9dc0f7c7e53a75f	n/a	Heodo
2020-09-02	7xAjuIb40Yrr.exe	exe	b39b6e245fad3bb18763e8fdaac0cb1e48b68d136ce00efee135fdd767215b35	n/a	Heodo
2020-09-02	000136.exe	exe	10ec82d988b15d13c78d0d1aed688f02c148f45e806e3ebfaf053ce3dc05991a	n/a	Heodo
2020-09-02	00482011123055GL2laWAyi8z.exe	exe	748c7789a73c09570bd98d128bc0f00eb5b885f90b4baa8637c8b55437d0ba00	n/a	Heodo
2020-09-02	rn059958880.exe	exe	e027076f7936ad022398e3db544b64a878673abb36804cd2097a2400c62e8af5	n/a	Heodo
2020-09-02	DH00043.exe	exe	7e08b4b2f17845f2c49d46456a8bb5931a505e3c6690299b25d125367016a514	n/a	Heodo
2020-09-02	4RSpTjqi.exe	exe	875b3da8e777760e22c81125c424aceedcf33b207f168987c5a85a79549f65ae	n/a	Heodo
2020-09-02	fLKlei6LBiu098229615.exe	exe	e18912fbc29ef6ad9402aab00285cee6c4adefe11995de83777a5924b366f921	n/a	Heodo
2020-09-02	032481.exe	exe	93b56ac18c84f2e245232dde186ee7b48b4370b7b394485efe7c0369f80589f0	n/a	Heodo
2020-09-02	hlvqP80003135.exe	exe	aa04112de6a5392deb56a3fcc5ecd74eed1f0128b58d26f2174f384ec1d7eeca	n/a	Heodo
2020-09-02	0000380lmLB.exe	exe	08595b5100d01b9d459a1fd2c2d4634bfcfc9bb0fbdcde807a592e50f24fa7d2	n/a	Heodo
2020-09-02	OEqnlIJ2267.exe	exe	73a7d7cfb9b691707bb6e964bdd79ca367e99685bd9d5db9dd719504c271f623	n/a	Heodo
2020-09-02	OY1gTAfga00005354.exe	exe	b94ec12448c50b8c415304d9e89c4850c9b81f1b3c32c7a37e99a738006c9d2d	n/a	Heodo
2020-09-02	ouPmc2vk000563.exe	exe	f5141e28e56962eab67c43c0f476a622397bd058c1672209c059c510189c843b	11.94%	Heodo
2020-09-02	YFIdNlv.exe	exe	fd6aa95c2ca7a2d0a07384882ba1bb5d4ecb642217ffa1bc1eb4e77dac3ec8a7	11.59%	Heodo
2020-09-02	X13n7I8sk98678976466.exe	exe	79ff4a025b28a0a478aff973ffde760de6a10848a40da0da68c63ea981550d60	n/a	Heodo
2020-09-02	RGMhu005960072899.exe	exe	be3f74718fa3f3d384fdfd27612147e6f20d956fc83fef490a4871331b5e9c6c	n/a	Heodo
2020-09-02	0385561353GOXCQ6HA1Y.exe	exe	54fc3e499fb00709e2c7575a42c4dd566a5277f2dfb8549442a193fea6e8c928	n/a	Heodo
2020-09-02	0000362s6VoSyoUs2f.exe	exe	6013b7bfb1e90d9be3409e31de8ecfc399bc048917e05d4522ce12162a1c571e	n/a	Heodo
2020-09-02	zZ119222.exe	exe	338e41b44eae9f71e1b12133673ed02a390f370f579a19827ce3595b820cdfac	n/a	Heodo
2020-09-02	1L1970572174776.exe	exe	09086b7bc54faf1156cad421be690312928bf71276af5adece3b0f2fe17f5044	14.71%	Heodo
2020-09-02	M3EpK34LcF464.exe	exe	1d333238d0ab9e6a77631ec4ea0d3ffdb2c471b8cfd677bd4f3554c8d40d6894	12.31%	Heodo
2020-09-02	ad001411448.exe	exe	cab1e64b39d5bb8eaa49a4728daea97b684b5802115171887e3407cdbafaf1a2	n/a	Heodo
2020-09-02	qXcq9713318.exe	exe	f0b8b22a369a554c21cf1ee80451a88849f495c1d9fd006e99ff0c56125a95e3	n/a	Heodo
2020-09-02	000009992261LMsZf.exe	exe	3874173c275f09977576433c267a083e02f5b7e260b73eda2634ff249205ea36	n/a	Heodo
2020-09-02	eO2weEqjrg09.exe	exe	3f023b144b88726eef4625ea117646c3129ee504e1094db1c125729de9a28a8f	n/a	Heodo
2020-09-02	fT7VFjJV6l08.exe	exe	efe9c2eb09227a52f96723717c906123ad731d9cbb6ff4fbb7fae2de7e6a7834	8.82%	Heodo
2020-09-02	0am9968973161253.exe	exe	5589b33413f9dd936edd48a8c37c2771b1f76495a42934d8571db8a33689d63d	10.14%	Heodo
2020-09-02	68hPI99697.exe	exe	2870a0b3cd2f5a040436c3d33b559ec5af220009c29b15b316ebc2aac8bc423c	n/a	Heodo
2020-09-02	0096351553529803r2kjIMBPF.exe	exe	0826ebee3538968f2bec472f65dbb9d592db1010aa69af2d4f5577da18c5846d	n/a	Heodo
2020-09-02	f8NcVTeGfd0792018566.exe	exe	44cafd6002f0adf39a5c8b7f2ec0bd31ef715bb2057ba9897af96cce34ce4e51	n/a	Heodo
2020-09-02	1953202472862.exe	exe	ef816ae922fb2f3834f3633c424aa7c3aabc3d6e9dd594a2bf5b84ed519b60cb	n/a	Heodo
2020-09-02	2KcSo00253358803.exe	exe	b2f68bdd4ccb6978f8228cb18a3fad958bdfb602f0b6fc3e6c5a5111afc0fc8d	8.82%	Heodo
2020-09-02	5vO400006591.exe	exe	230652549d19a52942a5d3bfef04ce8c3fbf9c1608ae5c7dce57729056d5d66a	n/a	Heodo
2020-09-02	sFEnf.exe	exe	7a2ebe8464c31399170f56d00f2534dd3d9e41ed868d2aba6dbb175acd6b686d	n/a	Heodo
2020-09-02	m5uwBXQ3Q0882227836358.exe	exe	912241257b81c10a0cb2564b24405f0e6e157cf6b711b98c89b7669260210892	7.46%	Heodo
2020-09-02	m7TDgwfC0Y22.exe	exe	bd3dc4657de66d33ce2f2cac43529cef3d5da66258c992cb8d9674f957e84473	16.18%	Heodo
2020-09-02	00006250.exe	exe	b6c7c65fcf04c8cbc8b9be5e4e6cc6948239df9bacd6230d5a22a341e5066c9d	8.70%	Heodo
2020-09-01	Yan598GPfZ00.exe	exe	b9cae66117965dd38dbce964d87c11899129e576754f98af23af9f8d7e6266c7	7.94%	Heodo
2020-09-01	ViAneD5I8aps31453912779.exe	exe	43f9eacf99a6289eb8d428ae5ad0af1b0964f13c84b562de78ef47b8d6591ca5	17.39%	Heodo
2020-09-01	8UtR341197409024.exe	exe	d919a2ed95a4dbf4bdcfa15f90b6eb1dedecb4faa050be4fae2c49834208f96e	n/a	Heodo
2020-09-01	0000200.exe	exe	28d7d854659aee59cc780247aa484d8fcd66f3047c96d0393d23bbb33dc08805	13.04%	Heodo
2020-09-01	000613.exe	exe	750f6265bfc9fc3f415b76a634f168865cf50823755efba02a3412c63a54b419	13.24%	Heodo
2020-09-01	001251044jn1rVN.exe	exe	fa19b820e18e8e101d8f13b58eddc994037aa963c87283dbabc4758d151a82c1	n/a	Heodo
2020-09-01	PZxwM2W5.exe	exe	f13768f1016312a27917b18062e6b0d670fd55974ce55764bb42cfcc47b4c96d	n/a	Heodo
2020-09-01	0048864aui1kn73u5cT.exe	exe	1220bc615a52f4e704e80d148a65988be6978edf565f1e30f324d33ae83080cb	13.04%	Heodo
2020-09-01	Cl5ppt.exe	exe	bec7c9f40be03a88beda153f1f14b1a6c211c46b41f731788569458628d7bb28	13.43%	Heodo
2020-09-01	odV0865580693934.exe	exe	b8bf6d9e99fc6d9e8d0fd76ddca498c60e7b6af20a7b4d53767c34a782eeb65c	n/a	Heodo
2020-09-01	f600527560.exe	exe	24ee7aaa53f5ff37dac6c0891b8bcdbba934aa2d4fb517d87acee35c00e8ba00	n/a	Heodo
2020-09-01	uuDI1W8oee000039393.exe	exe	b8c57398ba21ba818094abf6792d6cd07b04bbd5068394c905368ec415a4ae2c	n/a	Heodo
2020-09-01	0442221926t1f0Tj.exe	exe	ca4f6983c8290a518aef09e39f19e77ec326a489583e3759071eb70583d0f035	11.59%	Heodo
2020-09-01	kTyf0UNYZbp804.exe	exe	f953fd3f4f985978359cd24df5ced105adda2812671157be072f51151d6e54eb	n/a	Heodo
2020-09-01	000648KEIg.exe	exe	f4414daac7e5c7f1461383d9cbceb0a89f0d7801944d75fff6a3dce35a6029d0	n/a	Heodo
2020-09-01	vD508371324567.exe	exe	0a445833a736bd1b3c6b64156178715184fe9a3ee8f811971511281a7b44b1bd	n/a	Heodo
2020-09-01	OZK636.exe	exe	6d43fe011db3aaa5224a923b0bab2acae897083b33f74d897c1a8ed66e44319f	11.59%	Heodo
2020-09-01	72f3zxfJgEWb12478353.exe	exe	954d6641a4c87690a5c673243f7659d0a172205ea79e9a55d42a2aaa2483a94e	n/a	Heodo
2020-09-01	6tdUleVB65849498002.exe	exe	deb00fab72042bfa89ce74553c3e982c63ec1d0095adda905735e8f4e13b4a17	18.57%	Heodo
2020-09-01	000028326757120dV0NxI.exe	exe	45d0e4961da541aa812f1ed03f676b776013ef192622938b4ea55197fe10cff8	n/a	Heodo
2020-09-01	00002332919G7.exe	exe	030d47adb70d08e8e5eee829901c525a712f61b608547d59dda51ac66e4bf523	n/a	Heodo
2020-09-01	07594719600382.exe	exe	4daef1633c058677a9805986cfdd835401d3b0d2e432021fa3b1da1ebb3aaf54	n/a	Heodo
2020-09-01	93419271856OS.exe	exe	40928c20e287a7dfa25c03c9f971afef6340cad230579a067644bd1505323968	18.84%	Heodo
2020-09-01	gB6IXAo1xK0287.exe	exe	9121df1e1ff2e6e5e5355b45155edf574ee855ab923c2ef03426e234884d3290	n/a	Heodo
2020-09-01	0067076819.exe	exe	c67f96445c428c27ffc300dfa0f2c2a833b87aa4a56f1d7f8e596eb4f4a5754b	n/a	Heodo
2020-09-01	prb0MBL00033483.exe	exe	38c95b5e6ef7e0577de6bb8c3231e677f058f25cc094e57917b117c5a9ff7377	n/a	Heodo
2020-09-01	BeWidjdq639.exe	exe	01f8c58b6fc247b119aa11506700bae68b3f92b4ba2e7e7a98177149c643172b	18.84%	Heodo
2020-09-01	08860591086vCx0VCiiNMTc.exe	exe	8d30787aea789c2704b73f856898822249734679e9751895e5454150a10662d7	18.57%	Heodo
2020-09-01	9517.exe	exe	84174a0bb921b730f835f21b314de6003d4bbf3f0f0457922a6f33ef87beb1ca	n/a	Heodo
2020-09-01	fQR0008872444665.exe	exe	8c993307882db017d94da7d5d2f06c233245d3059ef653457c05dd03ee4b6c5c	n/a	Heodo
2020-09-01	2966483917.exe	exe	3266993424499a71ad09c2a84ecbb5068a2e2e2cf4fb12d4d601ff56784bc278	n/a	Heodo
2020-09-01	iEoGJyiM50.exe	exe	936d84b247751582fcc7890d4acc2719b7fcc95647ddcf62c6b4fd3de1fcd22c	n/a	Heodo
2020-09-01	563962nJZxep5fM.exe	exe	765f2f50389dcf8ea10d95c70b712b5e449aa47661474a3cc1eca0d90655e98c	n/a	Heodo
2020-09-01	0007737328859398.exe	exe	76efb7157474fbd6d06a4da8f92d2413e8392ce20a42e5f7e70a83ae92485b65	n/a	Heodo
2020-09-01	T9FFooY0009689507.exe	exe	3f7a446e58ec43483bb5db7c96363b561110807cd403cf463b33f16f0a90576d	n/a	Heodo
2020-09-01	09335757098.exe	exe	2d6e3c9645b348517b55e282abd3b7bf33bb479c93b76cfd4e8875ee47d18605	n/a	Heodo
2020-09-01	c0deerQ.exe	exe	0a2e65bce1591739a70461738255b3ab76f4ea9fbfcd296c761b3a9178056396	n/a	Heodo
2020-09-01	0004964979652293L5edvd.exe	exe	bf3f9a36384b526a0287a6a08d5074c8abddbc02d8044167e5f4fb7421935cec	n/a	Heodo
2020-09-01	kjDG7qFfFUFr08.exe	exe	31128065b2be344f607ea88fef0e84176a7abd280443d7842ca4b19c3a993bf9	n/a	Heodo
2020-09-01	W10000815096136921.exe	exe	ea55b56d7ae8874a194f087a58bdbbd62dd57bc406ad42f39770702f06310363	n/a	Heodo
2020-09-01	000344902IfWs.exe	exe	f6e2b69b31ea477984c7ddfdf49748ca8c4e45d780b3205bdfc579b919277c6d	10.14%	Heodo
2020-09-01	iQbbr19790149423.exe	exe	e56bd0b046c8eba6a506b267f360f8f28bb714bae9bb83c52e6462a24d563e7a	n/a	Heodo
2020-09-01	002685430297.exe	exe	c865eece78dbab141b1577da83205365fdf9f1d690b82acd00ef965cdb58fd14	8.82%	Heodo
2020-09-01	00005932978nnH39Ux1HMr.exe	exe	fd2c96c0ce52d20c10a5f97b6824d09f2cdf1b850f12fa204f342f50359f981d	n/a	Heodo
2020-09-01	3F774d.exe	exe	bffebdc528cd9ec678f8ebd7167b822d398534abafca0704669a0f169aff2467	28.99%	Heodo