URLhaus Database

You are currently viewing the URLhaus database entry for http://samatechnics.com/_scripts/DWxipw/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below may have been used by bad actors to spread malware, the URL seems to be clean for a long time. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	451313
URL:	http://samatechnics.com/_scripts/DWxipw/
URL Status:	Offline
Host:	samatechnics.com
Date added:	2020-09-01 21:44:36 UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	No
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-02	RRveHHD9e9P0214831.exe	exe	6ba8be9cf769fcc8f19557451c3052fe7eab8d347f33609d1f35d7c3bc061222	n/a	Heodo
2020-09-02	982Uj72G2ofepJ.exe	exe	da8f90c8cb763513bb65ce85589dc0595d72780186763c9b2d3927bc43ceb1bb	n/a	Heodo
2020-09-02	0149797285.exe	exe	0158ebd4da71c377338e49f491d890a20914cf2b0633ba7eed18d369a45c2d3d	n/a	Heodo
2020-09-02	OCrp17VMpAD592392538.exe	exe	c5ebc5bdc65e526d29c57fed77dfaee3b2dc3c469bf966274cc3627bdb5af2ab	n/a	Heodo
2020-09-02	JDiNofz8inG1379994028.exe	exe	f4e642ce8f6157f842f23dc3201f3e76e4a1012098bd7274790261aa9c41b71c	n/a	Heodo
2020-09-02	54q3vOLo.exe	exe	625b8d7e541e53664ef4042c2ed76c802be7896315dd6b55c3c0cdd0cd2c5400	n/a	Heodo
2020-09-02	0785936842.exe	exe	2c2c8c3d55497720c4b27a58cd345cea9d7cb9653002dcfb2df0793329a611fa	n/a	Heodo
2020-09-02	sA54865843418296.exe	exe	4834505004fcf6b5a1723a331e4273db6eeed17f859c497c7cd84596ae57a183	n/a	Heodo
2020-09-02	KU.exe	exe	9becdac57b85b4d1a62ba00631a9360ae7ca4232b357080bb16004b2f7a5bafa	n/a	Heodo
2020-09-02	LtgFi3L3947885817.exe	exe	8c4d4c0ea97b1a387f5a5dd69869e286578214dd87bb20f9d8f4ba8951fbb64c	n/a	Heodo
2020-09-02	JZ44R4YMWIya0198.exe	exe	cf398f0e22a7be88d25dd71da420f6baf307f460eb2e84f316355fe9cdb230f4	n/a	Heodo
2020-09-02	CBN066906100.exe	exe	852395c3d5bc0f9ef17fbcc52dbba8467d5db152f40ce98bca43fae0d8178bb7	n/a	Heodo
2020-09-02	p6hVxjJvf2808663858.exe	exe	9215af054af0ca130207db46fa3593e04b9ac3785646fae85ad1142a467a3ff0	n/a	Heodo
2020-09-02	2AObaz0ULq.exe	exe	38215cb531c56d3b846feb734eeb9a1b24ce935481cc3842b8fd751c9061ee56	8.70%	Heodo
2020-09-02	LtjTu087600.exe	exe	850b4ba442c97a9f4f41a56c893516f7ecb1cd08f6857664fcb8543a100e82fe	8.70%	Heodo
2020-09-02	537609.exe	exe	2f74fe0b513d54296b13789f413d687836ab37a5db92ba5c6175d442a1900606	n/a	Heodo
2020-09-02	016168794PTl8d.exe	exe	69a43856135aa7b9126b2f5dcbeb8f6c75afb32282c58583e91669622143e91a	n/a	Heodo
2020-09-02	AK9C.exe	exe	9dfc727140f40516e8fc396306e7b2815c47d2719bd7eb1ee8e38dde0d572931	n/a	Heodo
2020-09-02	000059.exe	exe	d1a0cd66f4f06e6c15e2028d3358f3a30cc7e7947bc8fcd86a74b9845339d9f9	8.82%	Heodo
2020-09-02	SCNLdD3AC6E9.exe	exe	96269367ed3d6179574c7e9fee08c3bf545f4cf0ebc8e29a5aaa75829cdfc4c8	n/a	Heodo
2020-09-02	00009.exe	exe	7c891b34df66a3d104ad325cedbbb32d9a5ce6b733003547e74cc24305a143f5	n/a	Heodo
2020-09-02	04017qj.exe	exe	3e5741726c02852a25da0799cc5f0f4c9566fd7a1b8de602e8256d379bc95546	n/a	Heodo
2020-09-02	004403.exe	exe	bd3dc4657de66d33ce2f2cac43529cef3d5da66258c992cb8d9674f957e84473	16.18%	Heodo
2020-09-02	0089975349fhj1qllXoiGu.exe	exe	b6c7c65fcf04c8cbc8b9be5e4e6cc6948239df9bacd6230d5a22a341e5066c9d	7.35%	Heodo
2020-09-01	eX5zaggkErM60.exe	exe	b9cae66117965dd38dbce964d87c11899129e576754f98af23af9f8d7e6266c7	12.86%	Heodo