URLhaus Database

You are currently viewing the URLhaus database entry for http://yzlangfeng.com/wp-includes/2/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	610210
URL:	http://yzlangfeng.com/wp-includes/2/
URL Status:	Offline
Host:	yzlangfeng.com
Date added:	2020-09-24 15:14:06 UTC
Last online:	2020-09-25 03:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Status unknown
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-09-24 15:16:02 UTC to abuse{at}tencent[dot]com,abuse{at}qq[dot]com,jsquare{at}tencent[dot]com,dreamsruan{at}tencent[dot]com)
Takedown time:	11 hours, 58 minutes (down since 2020-09-25 03:14:29 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-25	gHSmz7ev.exe	exe	eaab6e104bccdface6b6fad1552ec7cc30b3fb0a21fa0884aa602173e8374b49	n/a	Heodo
2020-09-25	lqLFl69UYIFaOpk0.exe	exe	a72f520508ac46a99870391e5a0629334a6192b87e399aec19a802b3fe8a8cb4	n/a	Heodo
2020-09-25	DnNijTjrdR.exe	exe	9219beaa1080e298e69f3efdc237daa0b82d214c6d2f11b94dd8046bbc64fd91	21.13%	Heodo
2020-09-25	RIiiRMMN41XYt2c.exe	exe	83866ee352a9b6ab198083638ddcd08904a95d624a4bf9504765fa119114c9f6	n/a	Heodo
2020-09-25	k134cPT.exe	exe	b67d6ab319624b8f70a365f34fe4737e686e8db5a3408719b4db97a3acca5a34	n/a	Heodo
2020-09-25	3UaUDbLX.exe	exe	5c19205adab4938a020d5799604a533a4f31af3a5244da44af53833a66f98a1c	19.72%	Heodo
2020-09-25	YoApxqXK9t.exe	exe	fbc8a876742abf3995d670e4d7311f56ce3c2f10ed1b83be5181101130a20960	n/a	Heodo
2020-09-25	tzPyH2s1pXk6PUp3DaJ4.exe	exe	451e32349ec669e502c9c3dc6f6aa850e797a3b92ce12d9a0382f223f3cb114e	21.13%	Heodo
2020-09-25	DagKvapP1GQ4q.exe	exe	d5b0ea504bee142ba4c6c932383cccb056bfde40255945c934bfba7b9bfc442d	21.13%	Heodo
2020-09-25	ylnX5BV4w.exe	exe	b36e3635a3678d517488baf66feeb2dd4e67e880b61655f798fe3d9d82a52d4a	n/a	Heodo
2020-09-24	MWQJ766Klx53LmJ.exe	exe	ccb5262c0fd15e05eebe99790bddd1b4f1ccd1e1bea9231414d0a3e984d8d7a8	n/a	Heodo
2020-09-24	Okdug20X3Rug9U.exe	exe	c0ee28d14e9c01a11a8ff415f1c822aac03f28c347be9a76fa96e90bbcc8a833	n/a	Heodo
2020-09-24	YkUZD7Gl2ZYF.exe	exe	b67deab63acaf2e4dd236813aac905174af6d3b1d53da3f0d7901602b157ca64	19.72%	Heodo
2020-09-24	aBwp.exe	exe	ca909cb86795ae01d12b2e60c86fd873753cfb7dedbf0b20a7a78d0d9d919702	n/a	Heodo
2020-09-24	vxFXXWx.exe	exe	4539cbc3fc6a97d1d3dc01648eb28e9e135b1a6751cd0ff8212eeac0ef4b267f	n/a	Heodo
2020-09-24	snlCoFOwCN1TGuhCT.exe	exe	1e1a61a29a4ae91ff8fc7cb6f86c60ede149b551f0fca45561ba66ff23801df7	n/a	Heodo
2020-09-24	GPVdf7a0RBCqeuStD.exe	exe	2992480985886785a42d3c57d25dac8ce544a1efb97a1860b2a10f261f3114dc	n/a	Heodo
2020-09-24	0N3se7Ur.exe	exe	04db6b3aa905c7f6ff347aebfb44aa801fecb479086f863f6d9b6f0e15f3521f	n/a	Heodo
2020-09-24	kMb31bQvrlYaSLJcAid.exe	exe	360d3d447e46167c3bde05b3f7406e89864bfbaa89e8c39c9832d2a3e96623c8	19.72%	Heodo
2020-09-24	RDUrarkK0.exe	exe	996640c9015ca510082aa3aecf33be0227d65fcd3138c3c913ca567f183e638a	n/a	Heodo
2020-09-24	0vizQ8sVZPoMSPiKWzUx.exe	exe	59a6dfd3431cbc6cfc756c210a9370ad77791206006859faf0fc5cb4aa162839	n/a	Heodo
2020-09-24	2TeHKjR8HDBD.exe	exe	5a7f2b9da5d732824f71374ca29b400fdebab7800797357f167edfd1a56f76e7	n/a	Heodo
2020-09-24	GiQn1XJjo.exe	exe	53a592db5d85dd5769332c34b85b38b1a4436e421e0e204d832fbdffd795edf2	n/a	Heodo
2020-09-24	jbXSXuYfmJ.exe	exe	ee582da13038e190e419783f6c07f2aa4ca4e0217ee189da1446f201af27eb61	23.94%	Heodo
2020-09-24	ZOfHW7.exe	exe	584bbb2d7f24c95cfee5040afc1ba66a65426153351850f2c8a4522c6a95ccf8	n/a	Heodo
2020-09-24	ZMFjArvTz1pkCKz.exe	exe	bb7e95d23f7b33623a937b0069aa1e521b1ca77f378b9833d266f825e24c2c53	n/a	Heodo
2020-09-24	RDg1oX.exe	exe	8e7851ef61a846a21cf13ba7aae9d9ec2c5ecdeac389b2c18117e6bcba2fe0db	n/a	Heodo
2020-09-24	g8qWn.exe	exe	49a4d48831ffcd434ae73c015d33cb0a8e0828a449a366c5934d861da43339ed	n/a	Heodo
2020-09-24	mrnn86oTFNBc3.exe	exe	182515dede44b5b12f48243aec2205f975a3a931c05e104e9fb4998a8f08f943	n/a	Heodo
2020-09-24	JKORxVld9Uh9JU8DY.exe	exe	057a55718077bd8dd2c64f275014eb31fab5a68b7cdeb01b484a678324fedc42	n/a	Heodo
2020-09-24	A8cpTx.exe	exe	820d025a189fbb367f3b4c12f5b57458ab556f892dc9fe2ffee2c7de786dbc2e	n/a	Heodo
2020-09-24	dw35.exe	exe	1a17bb46b115075ce96a5484b621ec170418ddda6ed335402bf0bcfc5e3b10e0	n/a	Heodo
2020-09-24	jZi1JGYyY5McIFl.exe	exe	a0e9cc558e69f80b19879d71abb377ca9b95a6b1aea714f4ab721fab2cc4692e	19.72%	Heodo
2020-09-24	N61vGm.exe	exe	aa0eb9c8d811af0b08b5776b165a65045cb380579ba44253a42f2657ea479c27	n/a	Heodo
2020-09-24	F7m.exe	exe	883ed0446e3e306ed04e73de50fe229bc9076bfc022d523df11e36f880fe83bd	n/a	Heodo
2020-09-24	coJrAjqF.exe	exe	0bd71bb6096fd22ed6fe9e931c4978839f6bb1de9cf1db39e91a5532d8a177dd	19.72%	Heodo
2020-09-24	SsJRAb4L7.exe	exe	565bcc84564266c96bb24aa2155d9aa4245889748e07f2177eead270c9ecfb4e	n/a	Heodo