URLhaus Database

You are currently viewing the URLhaus database entry for http://weierstrass.de/Elch/file/XQrH/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	451213
URL:	http://weierstrass.de/Elch/file/XQrH/
URL Status:	Offline
Host:	weierstrass.de
Date added:	2020-09-01 16:19:05 UTC
Last online:	2020-09-02 11:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-09-01 16:20:16 UTC to abuse{at}strato[dot]de)
Takedown time:	19 hours, 15 minutes (down since 2020-09-02 11:35:16 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-02	7nfRnG2Z3.exe	exe	163f628b2d8973ed7b5c6b6008cabd1505c80c443f31be6837d8e929fcda65b3	n/a	Heodo
2020-09-02	194404548135Mg.exe	exe	afa376aa0cfb79a674b0e929c3273326e506b421e47229f98ca94e741480fa19	n/a	Heodo
2020-09-02	0003295778639978ZZkxSvHH.exe	exe	2c3be15ce2772eb50cad6dd53c552d51dc5630200a3b4303ef54991b32994055	n/a	Heodo
2020-09-02	O8DURpxTM.exe	exe	45a00c876a2a1c5bdf6338953271d2824b9684d70b31e8e69ad89b0a1f78606b	n/a	Heodo
2020-09-02	0002606466289798qZWwbN3JGfMT.exe	exe	4f4bed582eda430282e27b0c5ce6c4f077a217b300b935030af7dd7731c4ad51	8.70%	Heodo
2020-09-02	pSjvyU8.exe	exe	9f8ed12d2e58e8a71cf1cb84753b0e12a25298d5bf0c23fb1fe91cd0b3c40703	n/a	Heodo
2020-09-02	BHYo61.exe	exe	1113b673e01b2e1a2e813294d17088ef460dd8fdbc2f173c3a036f350e339be9	n/a	Heodo
2020-09-02	00006qmmLpxJnBc.exe	exe	55924c218ba39cd5a032348fadd73e368c7969a432c8512bbc59db26e833a6d7	7.35%	Heodo
2020-09-02	00742MA2XTHVHfn.exe	exe	bd3dc4657de66d33ce2f2cac43529cef3d5da66258c992cb8d9674f957e84473	16.18%	Heodo
2020-09-02	0007166812684.exe	exe	b6c7c65fcf04c8cbc8b9be5e4e6cc6948239df9bacd6230d5a22a341e5066c9d	8.70%	Heodo
2020-09-01	000004ix2N.exe	exe	b9cae66117965dd38dbce964d87c11899129e576754f98af23af9f8d7e6266c7	7.94%	Heodo
2020-09-01	SLa47457241202.exe	exe	43f9eacf99a6289eb8d428ae5ad0af1b0964f13c84b562de78ef47b8d6591ca5	17.39%	Heodo
2020-09-01	03673791912.exe	exe	26d4a82c5a19487e93b62e68dad12641a31b027f6af32bd1d4a4a57ca5a8d540	10.29%	Heodo
2020-09-01	tRFZsfn34tJ.exe	exe	f553f60e4724de9b81f960e7423dee729e0ec1d9a43b8789a05e39f23730960b	13.04%	Heodo
2020-09-01	YSjQPOWW76862187.exe	exe	640a9c62fa0f495ca092cf3da22de32c7ed2606e343f7f3aaad5687f88a772cb	n/a	Heodo
2020-09-01	fE396733348682.exe	exe	d04fbbfe344e95efe5b3aae285fa7f93a364c3a1d2f0eaf8dfadca34d08f331f	n/a	Heodo
2020-09-01	H8V00607927016.exe	exe	3f518a4a7d041ec23ad6eb820af33b90e967df7ee2c5c9d65b197eaf48628bb3	n/a	Heodo
2020-09-01	000492320743399aok8VTV88bs.exe	exe	5256cbfe92cfc22c0e8e960fa2986198fc742e0dad551262aa5001b9b1044e5e	11.59%	Heodo
2020-09-01	JJ4lzSrpR45296932.exe	exe	c7a0d48e0f410656554c00c7d90ddf61a906a4bb1c02994f620b176a7529def4	n/a	Heodo
2020-09-01	000118573939.exe	exe	0c94e30c3f327a01293a4fd155c129dae8f5791bc7d19a939f39bba552019713	n/a	Heodo
2020-09-01	OJ8205.exe	exe	bf8ba68b02e15dff0303a717de1d3d76c3054cd39f516238ee87ce379e0ce572	n/a	Heodo