URLhaus Database

You are currently viewing the URLhaus database entry for http://ekinerja.megadata.co/wp-content/VFWW/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	594842
URL:	http://ekinerja.megadata.co/wp-content/VFWW/
URL Status:	Offline
Host:	ekinerja.megadata.co
Date added:	2020-09-22 08:58:39 UTC
Last online:	2020-09-25 02:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-09-22 09:00:04 UTC to abuse{at}cyberdata[dot]co[dot]id)
Takedown time:	2 days, 17 hours, 9 minutes (down since 2020-09-25 02:09:31 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-23	v7zyJMR2G.exe	exe	530bbfede13fdbc64958c7be23c0e4e036310e9c44615e85043a3cee3daa0d24	18.31%	Heodo
2020-09-23	pTcKXE.exe	exe	02dedfc36519c13e7576578cf9e252e86508bf32791ce39ea5220e6781455bff	14.08%	Heodo
2020-09-23	cn.exe	exe	42067c6f7796aa20563de80bcc372ba54f31967f387c025e7a9db470389fb9da	n/a	Heodo
2020-09-22	ZB10K.exe	exe	1b0a7a3ea4f510ed415c28cd017ee493facf9032feaf32b079b4d84aea2f5850	n/a	Heodo
2020-09-22	m89wRz6MPihEvoITH.exe	exe	297298d208567bca136ed801d60f25addaff2eacb507def1bcfe0a49e4d224fb	n/a	Heodo
2020-09-22	gX5uOO.exe	exe	cef5e4ba5e53bf84f886f81eca59721bde2fc7885c85353f662b34e7f1f4be88	n/a	Heodo
2020-09-22	Udig2.exe	exe	3805f2e7185f40656742dc4d4697d80f4dfcfe942b899be33a836478ea083536	n/a	Heodo
2020-09-22	t2ciK.exe	exe	abf8c06f75130b4da372d3d071fa4815cce211dffb886473b6c1ae05e93b6e7e	n/a	Heodo
2020-09-22	teWVwfdBOn4tv.exe	exe	981a47858b8e01fa411134abc5a4d7c8e063d4687e37c776f6d832d4302a1d97	n/a	Heodo
2020-09-22	7yFbukrX.exe	exe	f24e9eda7d192aabb33a17421148234c3a486f13b6092d347207acf0d17163c2	n/a	Heodo
2020-09-22	cl8FpcJQZkYey.exe	exe	5b5c19fd89ad637a73afaef1b8d2cf018e5c6c7fc03d345140e754f1c1085949	n/a	Heodo
2020-09-22	a.exe	exe	f7d47682dedb008fec9d0164820cc7b5d290beb4f6d2d522322bc9c6f6c0ab45	n/a	Heodo
2020-09-22	WHSYUh98IAac1AaIe.exe	exe	64df3aa9c11a0aad6274531467749f969b1648dbe56aa2586d9746dd7a5c90c2	14.29%	Heodo
2020-09-22	Luw2N.exe	exe	4d541621d37476341ab1f1ca05b62d271752d1c746b1b8d729c2e10c678bd4e5	n/a	Heodo
2020-09-22	tx4Godpt.exe	exe	560b5637cb4c22a7cd8daf36d48395daa920c04ee6832f6b527d26054a6ab0aa	n/a	Heodo
2020-09-22	KW3urBgMZp8QzX.exe	exe	2e9c51982ce5d103b100bb696b36afad9e237d8016b68d89269dab8022f13440	n/a	Heodo
2020-09-22	F7z.exe	exe	fe489c69fea0fc9b58f937c4096d45d850ead38f448f9cc1b02b9e7aa4d244ff	n/a	Heodo
2020-09-22	WSunnWC1og.exe	exe	dfa83ccfe00fd425c31ee59edeb6de0392c02d631ef31d0c3c6477e9687bac51	n/a	Heodo
2020-09-22	6gN0uM6.exe	exe	1678a0f8469b493a6785a4c26ee2c2c6b65e9eb6be40db376a7813c815041270	n/a	Heodo
2020-09-22	yokLYvR0t9x4IB.exe	exe	6939000ebcd98b4ea38fbbd6376d1b773adcccc4d0792ccf9c2ae61ee306dc30	n/a	Heodo
2020-09-22	ZXxNidAvIg.exe	exe	f80c81a44b1feaaaaa997a5f250b81a68cfebb4ddb4b8f0203e358b66f1b1a39	n/a	Heodo
2020-09-22	3EXVIk.exe	exe	743741dbad812e0b29bc7ef18b44ac427cd461551a9d3a32cc3312a7c0fe5987	n/a	Heodo
2020-09-22	NIasGjlAQQeB.exe	exe	30e82a1ed2c9cc6a184cdea193536640472b2462eb7efbfd6db75cf9678c7da6	n/a	Heodo
2020-09-22	H.exe	exe	fcd4b7e597b44ac433fa19ca8cc74857edeb6518c006d48821d2553ee5762285	n/a	Heodo
2020-09-22	CMiCvHCoGR738.exe	exe	be3b4785665752536146ef7ecc1676d00cd701a6819d921d6ab17cff57909ff4	12.68%	Heodo
2020-09-22	c1dR8.exe	exe	3ab4d7c8141b9631b259369c016aca93b196fcb6931011c2ba53673c454b793e	n/a	Heodo
2020-09-22	qq3vU.exe	exe	9fd460bce4e8fbad452130274a453d5d15403a8d222c0a5d79a6a21f4bfab98f	n/a	Heodo
2020-09-22	4pv8BqOMMu30UIVY2sZm.exe	exe	e5f29637cafaa4e3eca750834cbdabc69b9a3ececf64a70ad86742317a4fb089	n/a	Heodo
2020-09-22	Bk9YdiOo.exe	exe	59c54ff58f81843e733d850fa28ae602c91511a5f42af9151f6a7f723798dd16	n/a	Heodo
2020-09-22	6XguakvhtZNUgsZwW59H.exe	exe	00ed9e2613276fbdda6a5b5d015043ad653908a230242128351af97e735a7184	n/a	Heodo
2020-09-22	6xAVI.exe	exe	d4d69071a96a51dd1773dfe509e108a212b8067f679a509e0fb4c8b5344ba39a	n/a	Heodo
2020-09-22	zCBdQQAWmW4W91Re.exe	exe	b55a77ecd7e17072e4f16c35eb2d08c3e171e07da6cb4da3d4fca7bd02f0f833	n/a	Heodo
2020-09-22	iQVXaS0c7nBUAoQ.exe	exe	2f2aed1d637f3432867009d5ba45d4e226404fe11ce4bef4d01e95ea3693f20a	n/a	Heodo
2020-09-22	cs0TC571JWXYsAvq.exe	exe	6065196dfe41b5e2c1792662071707d222b24a734a9f753cd2d7ff38d10b4e08	n/a	Heodo
2020-09-22	pAz1tz.exe	exe	d5b1b54e68b2e100dcdd7bd30e6d1f1412cd717c85a6bbeecb9d58f7c7462b37	n/a	Heodo
2020-09-22	L2WJj2XHrpjmOvVtqw3Z.exe	exe	a210b38f78d68abe44dc35906ef9b5d2ada478ff8a9995d20b6125967dbc181f	n/a	Heodo
2020-09-22	xkMOLb.exe	exe	cb97aa92beed4c5b6e7716518579417572a74c7c171df72c0dc5fe37bf6e12e6	n/a	Heodo
2020-09-22	ijuWJK7f5wF76BM.exe	exe	8ee47a7dd100498751868f8e1751295eeab4436d81695d5596b7d3023ae14e70	n/a	Heodo
2020-09-22	IGxdMR0t4hA7rEqDXYt7.exe	exe	410fb96b3ec7d0e5b63ac89a687ead92eb487475ae275ce0bf8495568b156129	n/a	Heodo
2020-09-22	tKVWUZbaYXYmiHr.exe	exe	c7f1ceeedad73f7eafe61a6f890a4341cb2248018f0821c89220d97214dd08d2	n/a	Heodo
2020-09-22	QJK.exe	exe	45a28d210d1ba0c84305fedd3961faf03b9c170555de8602289165ad5e9e7c9e	18.57%	Heodo
2020-09-22	K5kd.exe	exe	3de0065a5549f4823cf898d00aa28713f78bb7c0f1d158c7187b5471a0c06363	n/a	Heodo