URLhaus Database

You are currently viewing the URLhaus database entry for http://ingridkaslik.com/Vz6UYhGl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:53926
URL: http://ingridkaslik.com/Vz6UYhGl
URL Status:Offline
Host: ingridkaslik.com
Date added:2018-09-10 11:25:14 UTC
Last online:2018-09-12 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: ps66uk
Abuse complaint sent (?): Yes (2018-09-10 11:26:03 UTC to abuse{at}cldr[dot]eu)
Takedown time:1 day, 19 hours, 49 minutes Poor (down since 2018-09-12 07:15:14 UTC)
Tags:emotet link exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-11InR5qSQ7XCU.exeexe d019bd79565b70b243288b83ddd26509bffb43a3be2dd758c7bd986b33a6f2afVirustotal results 26.87% Heodo
2018-09-11OHLND8rn.exeexe 6d57b02a0b4b8ad9fed6812fac60e77c1c6d1f01675b009fcd28719a12521b2fVirustotal results 19.40% 
2018-09-11tl9ovvoeBJc.exeexe c576537d0c981d0f2c958f119b2bdc39c445ea17372215f1a22bbf793c301db4n/a 
2018-09-115odLHpSlO8AQ.exeexe a8ab17880a20c0dce291c50cf533e311b4cd3c5bb3270466317e6e100e0c4bd2n/a 
2018-09-11JPVDLd2Ykh.exeexe 2dbff5e59d76080e380afec2a128a2134f4beda7e3871fb82f131fa8dfe23d60Virustotal results 15.62% 
2018-09-113oNNwFBEzsL.exeexe e70297a69ad9fee7c20a150b0a50860345c698dd61a219cafa3fd55a2792420bVirustotal results 26.87% Heodo
2018-09-10wKqssMlb1.exeexe 1ac4dedef9901ba26d589bbc4fcd10b769bda9fb4df1619ac00873adb7812d3dVirustotal results 27.94% Heodo
2018-09-10XG8Tgx1VgksY.exeexe e9f1637e0cd3f1590ac48592d21fa87a1f50c43502061ba847bbf3ab8c0e5533Virustotal results 26.47% Heodo
2018-09-10UREOg5NC.exeexe 67d0a298d0edb87306ddb8122b1f4a1e2f43f153195f6e75ce5cd90fcb7b3ae1Virustotal results 26.87% 
2018-09-106J2Y5ByJUUlj.exeexe 2373c0c77d9177247d183e1075537e1e1be2092f580765260b080704c63001cdVirustotal results 23.88% Heodo