URLhaus Database

You are currently viewing the URLhaus database entry for https://enews.enkj.com/wordpress/h62/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	585942
URL:	https://enews.enkj.com/wordpress/h62/
URL Status:	Offline
Host:	enews.enkj.com
Date added:	2020-09-21 12:34:18 UTC
Last online:	2020-09-22 02:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-09-21 12:36:06 UTC to ipas{at}cnnic[dot]cn)
Takedown time:	13 hours, 53 minutes (down since 2020-09-22 02:29:50 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-22	1Pzoh.exe	exe	b9d9b0d20f28414d90cdb87e33104e9c914242d7ab8f87b709d6b2f3fb32b47e	n/a	Heodo
2020-09-22	4LFtsLtqfHzH.exe	exe	542c9390cde1443866ee84219568eb13533b7aa3b3abca3e727b38540bdc0670	n/a	Heodo
2020-09-22	t0x9KU0xX.exe	exe	5667b5265ed5ba40bdb3e8d38760ec59f9a3fe1d5512d80e12a17c778b4759e5	n/a	Heodo
2020-09-22	bjyk5.exe	exe	d10dc7559a16a15d50566b345a021b806c22aa0a47110ddccfbba6a984293849	n/a	Heodo
2020-09-22	DLXlOpU1.exe	exe	f717c8be484cfcd039d3bc9f50587b5a166d84125187ffe436d00a119625649b	n/a	Heodo
2020-09-22	9kf4pRP1WNxWy7hZL.exe	exe	a5364d7e69c74e81f0c9a858e59a201ca8aec285341d3368023552066c5847d4	n/a	Heodo
2020-09-21	PRVOGC9.exe	exe	774c92bb2fc47a777fc1a8c5e33b91a66c57dbce56b3b6c7a2110b9c43936cc7	10.14%	Heodo
2020-09-21	50uyDUEdtE0r6rW.exe	exe	e81a3f4f1d141bc756831482f5d6e39a39bf51c4b0f2bb10bbf304ed82b3edb1	8.57%	Heodo
2020-09-21	I.exe	exe	c611618a69428a631b98b0fcc6e1df752e4b811af75df2104c4ff2cda56716aa	n/a	Heodo
2020-09-21	Zyb1bV.exe	exe	7b9d9a7ba8170b7c0d510bbdbf7a28bbf96e54fdab7b39f87d24ce69a56a813f	n/a	Heodo
2020-09-21	iOn.exe	exe	5fbae6650d277b743a205237986910c4e661a6ad5459eb8bf8478cb6d570888c	n/a	Heodo
2020-09-21	ayXgq.exe	exe	5a95fe527d94fb9cb1a63b23d3e76362c91b8f5459e764fa7326369fab2d9b92	n/a	Heodo
2020-09-21	8.exe	exe	3b3f385da7fa12c97e2aafdbfedb7bdf800834daedb38995f6596995fe5e8a8c	n/a	Heodo
2020-09-21	JPgpdkZNwGcV31K.exe	exe	73640ae8cbf0909fec3631429e848c851a8b0b8ff1ffd78e24266874aa049c69	n/a	Heodo
2020-09-21	h288wG7iQQqF.exe	exe	9770923822973013c660031031c2185592c4a700bb13d613ea7600701cb0abc8	n/a	Heodo
2020-09-21	CzCRW1g.exe	exe	a9a2c766460306cdc24ffb18fd4c30467ebed446845e94092d950b5369d09e6f	n/a	Heodo
2020-09-21	RUdpBrz8fe1TrkxbyqS6.exe	exe	b800acb40a6d1080b92183b0782f3b4d773de548db85de2ff047501c283c9265	n/a	Heodo
2020-09-21	81vtZiVGYu1Ylw9LN7.exe	exe	f3bac8ee323904ea451fabd23163b130e7379cd33a7d93f9e8498ef8d863bead	n/a	Heodo
2020-09-21	eEGVPSSHeg8b.exe	exe	9c2710e3fab552f40a0f17899f5bf2fe506eb897be7ec1c4721503259ae72188	n/a	Heodo
2020-09-21	6Z9G3adDLp4oc4jpD.exe	exe	aea74736317716981f625b3be8eeb78f59792e5f7b371337169362bcee3dfc41	n/a	Heodo
2020-09-21	ihdwwaUlMyEBRHJIrcJ.exe	exe	93122d4212125c05c3dfa971595d6b087b492d12d7ead2828df6e97685465c45	n/a	Heodo
2020-09-21	xyfyQzxvlt8LWLbbifew.exe	exe	64c4095d87c493bec0d165b77569afd986449ae1bd549937432e26d8c414ccc8	n/a	Heodo
2020-09-21	Epy.exe	exe	4b659e86684fa3a758dabeba9ee6005822588316384ab224ee2a4a7e3ec0d337	n/a	Heodo
2020-09-21	Br87eMTdqNQZG.exe	exe	c56cf7f31cfdf19ef831430c32975e9b5a8871b9420b7119a2c71a3294806b52	n/a	Heodo
2020-09-21	jP4c9PmRdmPg9nhitw.exe	exe	8110e7d2fd01cfe4001116ad28937c676bc74f4c16e9a22c64124e91e0c3d330	n/a	Heodo
2020-09-21	ciIrJx.exe	exe	140d910992912921fc6363011194470b9ff4b43ceb6a202bd92c73fdb2b09494	n/a	Heodo
2020-09-21	JW5Pm4FdLdDk3Qo.exe	exe	68248177a9dec38f73c2a5bebaf8ff80e1ad3d75d8f17e11b3858022997eed2e	n/a	Heodo
2020-09-21	YFvwnqql.exe	exe	e58f22f97cecbc382f6063f0d1c9ac5e3ba64999fe4caca2586ae13623c04ce4	16.42%	Heodo
2020-09-21	UOgDJ3VGOV.exe	exe	888f475934b9ed04ccb6e849dea0d2f323fbea9ec4a15e0adc7957bd9a44c233	16.42%	Heodo
2020-09-21	CqFxt3bzZG7iQ8kgN.exe	exe	5f5a7c83c333d942e8141df19e56368d23d7421da066d4e24996fed155047b38	n/a	Heodo
2020-09-21	msb.exe	exe	0d30f684bdc62baeb83f7b8c732b569dba460774a3e16e6960fb3dd6ff013fa5	13.24%	Heodo
2020-09-21	CmflQgDDYoE2gA6m.exe	exe	254251b0b7e3dcc360b063c38231fa80ef078df3d285f3c1ec73e114f11a5851	n/a	Heodo
2020-09-21	fLDT0as7g9wncD8I.exe	exe	2514b38fe135d8d3d1ac3191c7100c58c80bb24296b62d9729aa1c555830b0e6	n/a	Heodo
2020-09-21	ViRnikEnYLFx.exe	exe	4f93684c078c36cb5941e511e8346af2de2be24e48e7a5aa471f0e3defa49b42	14.71%	Heodo
2020-09-21	he4aFiInPdKHpnyW8O.exe	exe	c58dce27cefc6c41e92a0172c269c56c1de36f03d6425f0ede3a34dfa5aba146	n/a	Heodo
2020-09-21	N4yvwFtblrhYjOn.exe	exe	e4e46bc59f630c7a659add7d3489a4366aa7769eb99d9d00a840643987ab7077	21.74%	Heodo