URLhaus Database

You are currently viewing the URLhaus database entry for http://da-industrial.com/js/6GGA48AK/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	549335
URL:	http://da-industrial.com/js/6GGA48AK/
URL Status:	Offline
Host:	da-industrial.com
Date added:	2020-09-18 00:01:17 UTC
Last online:	2021-02-01 22:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-09-18 00:02:04 UTC to ipadmin{at}teco[dot]com[dot]ar)
Takedown time:	4 months, 16 days, 22 hours, 29 minutes (down since 2021-02-01 22:31:52 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-19	yCS3xzUWb.exe	exe	91d99ea6c7a21e74e5840aca2acb2a58f6e3c3e234ed851b327ceaf39c4fa070	29.41%	Heodo
2020-09-19	57xDMcOilaK0n.exe	exe	939c770df252fa63e64682b4a82d6c4d93ac6ccd52d3512582a703f61b9981c9	29.41%	Heodo
2020-09-19	9ai1xMyCLbQFwntOjtJ.exe	exe	6eaa9c7221cdff918bfde9ce37fd3a9c6b346f4183c75bd8087f9593236eff7d	n/a	Heodo
2020-09-19	1ohZlZSww.exe	exe	63f8ce9bed3fb5fc0f33bd24b9eee5e5b030d6075d7f1faa4e3cd7eb2af9a948	n/a	Heodo
2020-09-19	pkcX.exe	exe	4c57c92dc6c9b5041096cb9d05ce3148aa39cfbd85bfb1e242051b53a5c1b6f9	27.94%	Heodo
2020-09-19	4jghU2l4IyDceQjsVQ.exe	exe	fe8aea47c77b48f6c83f32c9c41f00d292ca828e02bf6a03a53ff8758b8d4f26	n/a	Heodo
2020-09-19	urLM.exe	exe	6e07e26389d24f1dca86e4a939d870452c66db4f232264010316f369827f57d0	n/a	Heodo
2020-09-19	sfGfPrnEW.exe	exe	82cab2c9aae62e89e9850a4bda9020c0390f7da212ccc7d8f8235b1ee324b9c3	27.94%	Heodo
2020-09-19	ytWHn.exe	exe	60e937cdedb204e01c881ed7bcb1ae438ac76c6540dc4d1c6783dfffd28c2130	n/a	Heodo
2020-09-19	fr1zmD3.exe	exe	fdf382aeb120317a32a2a93c2a3f5f60785f86be0a8b1df1f1703399d3cce17d	n/a	Heodo
2020-09-19	i1rzFyeYxWPguIR.exe	exe	0d3a91a40e92006123167e6893527e7572be0b82058a4af765e4fcbb41f49bfc	26.47%	Heodo
2020-09-19	J1rKFD2PxvP9S7EhSQ.exe	exe	4b6f359f1663dbb657bdc02d60d64f58738230cc71a7999581794c9cc38d633f	n/a	Heodo
2020-09-19	0w6Rkspj94D8XeC.exe	exe	92a2d54cb98a910c02928e6aca23c1fa607c8c05bafcec24998019c33f054df6	n/a	Heodo
2020-09-19	aplqu.exe	exe	31e776039b05dfdc13532f372fe78c9f0a7b579f5be3b703eb208a1b4088a5e0	25.00%	Heodo
2020-09-19	5.exe	exe	98fbe16f271bed69432ba49db07a8d47abc5805ab5953ef42b0c24007e6f7b97	n/a	Heodo
2020-09-19	MYzvRVlhJD4iorVJFoX.exe	exe	3bb40a5d3df51e6a661242c162f227396e78a7c3a2b0bcf5b5d983ba64e0d50c	11.59%	Heodo
2020-09-19	tLpUY.exe	exe	24e6c6c36861d3f0e8ed955913d1a83eb634874971962331d6ddfd215212f939	n/a	Heodo
2020-09-19	aS.exe	exe	26e41214dae763685b0374d14f5ceeff177c15da59c5fbff6a28b552363b468e	n/a	Heodo
2020-09-19	TXlS.exe	exe	c8aa23bdc56d863ec5ac180e7785139d4ce74ce2582ef97c1cd838f7d468298f	n/a	Heodo
2020-09-19	VtDW42Nv3EE8Lk2.exe	exe	9e36f022beed7ef19acebaf996dfe6c3e3edac4cb2a51bce235e9db2f58eb29b	n/a	Heodo
2020-09-18	MoN5VZRT0Ot5.exe	exe	90ea10454b3b7d054e8e97ac8728bc6958691e07ebd194b2ea43cbe9b1f962f5	n/a	Heodo
2020-09-18	riJYYFtnRRUCd0WvWREV.exe	exe	f3be60a4ca2bd11c34f16e0b7bf092d6b502e868fb6d3983b81d44c4bad1154f	n/a	Heodo
2020-09-18	klKAiskrq3TMAKH.exe	exe	5743035c93117588a725a498e8710f41ea168e8e77c716961286aa55e35a73fe	n/a	Heodo
2020-09-18	E.exe	exe	45e97c0d71c19914222650e0b40b7d5b482af6b63127ebfd522007a7f04e2701	n/a	Heodo
2020-09-18	mWRbsC.exe	exe	4a0026d2eac4cf663853e64a4b123efa0d59c9d519e2fdd695158198a07741b7	n/a	Heodo
2020-09-18	hMScJAPg.exe	exe	8e91892b3a477540f588b1494a1c1a76e263f66eaaeabd81b83228c374bd9df6	n/a	Heodo
2020-09-18	I.exe	exe	bf3d15e2154cdf760753aad93ba26755bd271c585163bc63be3032353bc39146	n/a	Heodo
2020-09-18	cNXeslr6tfxsHvXgAr.exe	exe	05d15ccf1dc7bd34d8cfa6e72c905294414a59b0f789a72b9407d8bfcbef6002	n/a	Heodo
2020-09-18	rXGfB8qfaxVLz9lhJ7.exe	exe	169ca8cc1afa3c3ea8b53f3ea96629721d260206f624afe89e73f87c9fb137ea	22.73%	Heodo
2020-09-18	LOA.exe	exe	e6892cfff7d0a2ce4574930947689f0596c15ad9b85f1095081395348e7f552c	14.93%	Heodo
2020-09-18	S8jHW33QU77gLz.exe	exe	6cdcb4bcd9fc9b92edc54ca20c92ae06ac60125adf6c60f5a43627a848df7221	n/a	Heodo
2020-09-18	IRa.exe	exe	470be1062e285f2616835652c5f811322a277420dea5140cf524cc85e7989be9	n/a	Heodo
2020-09-18	5.exe	exe	5afebb0cf65ca61294beaf815393ea00879fb6a405b0c84bb4079780f6f59d57	n/a	Heodo
2020-09-18	hlFx57YVdC.exe	exe	8089b13506a37bd6d4fe8d92c0c67220dd2af9c203e80a5513e7eb74a781b7ca	n/a	Heodo
2020-09-18	zj3N0CT1zYW6y3ur.exe	exe	8744393757137fe9d37619802bb9af80a5738f29b53fec676a5ca99a2cccd0a6	n/a	Heodo
2020-09-18	xfc6PjAT.exe	exe	6308dff009e61faa157c60f07f70ef047da301eee6905d62aefb5165d79b78c7	n/a	Heodo
2020-09-18	SR.exe	exe	a735c058f5e8f8e1e7ba8d4f85de158da7ebec9a41361cd28357d67656a0bfcb	n/a	Heodo
2020-09-18	JXypb.exe	exe	d2ba45886f8b594e701acb2a66d94235bed2474bd917d22f088db87f065fd44a	n/a	Heodo
2020-09-18	xE8ivztk9t.exe	exe	0bf7f5dbcb207fc6f178fd43cbd5271354468afe2f88d748fcfb62eb56736dca	n/a	Heodo
2020-09-18	eFz5.exe	exe	38cd3ad10db1cdada190d98a5be48161ff09fc4b5fdbaab85dc7387bb3012756	n/a	Heodo
2020-09-18	ZB9GEurkVWWFbpILM7qR.exe	exe	57452bdd1255d51890c80620cb738cb2755c78e44559613485be92c2a588d61f	14.93%	Heodo
2020-09-18	dV4DxRxjQxCCGlRmZx7.exe	exe	6db42b22e29afbe1fc3a3f746c6f18568c6f54d6dba92785d17af0bb121bef92	n/a	Heodo
2020-09-18	bi9EXZIdOO2B5.exe	exe	4bd4177c79b9fcbce85377652c2ff2b58982158615c693b7808ed608c3f97d86	n/a	Heodo
2020-09-18	PzmTRKP4.exe	exe	bc4d0d3ce55703d256352224c3c80711e67baad892046d5bd0c9042a2c910c67	n/a	Heodo
2020-09-18	IgRRxc6cNETT29vkpj.exe	exe	0339f08aead9e22db2b4e32357be7daa24654a2360294329641bbd736e8354cb	n/a	Heodo
2020-09-18	sYTtm2fVXmnlMIQmEU.exe	exe	c7e6de6a6d5559be3c837a9d2169cfdc0c5c5f82298b1f48d58b086ed8f264c9	11.76%	Heodo
2020-09-18	8AEybnuYJ0e2X.exe	exe	1c7d77e0a0fc9d5dd67f489dce74b05e78908a7ed6256185ffee329091aa190b	n/a	Heodo
2020-09-18	kDYOVp3wwdT7.exe	exe	2fcbfbda3462058ea8fb1c0e88f5f2475289d27c5f9786d3565f46a1d7b27e50	n/a	Heodo