URLhaus Database

You are currently viewing the URLhaus database entry for http://nb21.xyz/home/sIBOFci6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	625525
URL:	http://nb21.xyz/home/sIBOFci6/
URL Status:	Offline
Host:	nb21.xyz
Date added:	2020-09-29 23:10:08 UTC
Last online:	2020-09-30 11:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	bomccss
Abuse complaint sent (?):	Yes (2020-09-29 23:12:08 UTC to abuse{at}choopa[dot]com)
Takedown time:	12 hours, 11 minutes (down since 2020-09-30 11:23:24 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-30	m4SR15Es.exe	exe	2d87b69ab7268f5a5a3a21dd9777a5bbd87e88464d29ab5fb07a32b1c3b267cc	n/a	Heodo
2020-09-30	NTTty3c1birXh3.exe	exe	7548f26ae0dee4c953db04164c014f8cb60c95d8310d7f52e7db9d09d022e6f5	11.59%	Heodo
2020-09-30	zD8pwGsUd.exe	exe	e4a785300db917eadb57549bf83a06614972ed08f030ac56436e5144bfea5971	n/a	Heodo
2020-09-30	SBHEh7.exe	exe	e96f6827a7dcba6e3ab313ec4a2c34c2c53fa98c06b7bd07752ccf19b083d91c	n/a	Heodo
2020-09-30	dUiX.exe	exe	395173afe6f12000b725dadc91fbf8e3b0ccdde9e6183ec7ac21e12a8f1a9904	n/a	Heodo
2020-09-30	KX9tsWjNM3UwSN.exe	exe	ffad0f61fea41d258f3de4b0b7b1f2c475c054d1f96436a50f4fe77df507f81e	n/a	Heodo
2020-09-30	gdH5uRe4b.exe	exe	16bb5887e96c72ae2a129f47c0916ed7dc01efc21541c795d3c807cca14bbab8	n/a	Heodo
2020-09-30	h3m0D.exe	exe	b5cc1dddc4c662f0ea8ae12afa07af2d19b50e2192a0a3e26db21c45b631c42b	n/a	Heodo
2020-09-30	PTII6uqzxBvxZZZol.exe	exe	b2ccd2a8ac22d9fd3065e7467cfd410cbbb69295ab6af2a9034e008b21d1a0d5	n/a	Heodo
2020-09-30	cZFl9L1oMJdZE.exe	exe	5bf2819fbd2219fd0eb07fb4920e81ff51b9fde58d5cf06264927af2a405279d	n/a	Heodo
2020-09-30	4.exe	exe	9c33674cdb0856d12e889b32246bf98dce02d6706c7abb76a8a3049c63cd0357	n/a	Heodo
2020-09-30	Wx1w272H4gA.exe	exe	db3823439a9725e79c4b26e7b877d4615e835aaf6875a3882b3bbe99af10d74e	n/a	Heodo
2020-09-30	lqOKOl.exe	exe	7682df7d1f074644066875a6655128c52fdb8aeecc8b8c9898a798b007abb766	n/a	Heodo
2020-09-30	eokNvou.exe	exe	235a34d3ed6ed3cbfc82b4efa12585e7d106715e8d036ba353cb25fcc339d0c2	n/a	Heodo
2020-09-30	h3S6ij0nTIKxO9sIHyr.exe	exe	be37cd75bd5dd5a05c7cd9f1dd9b25082019d36e45328e8512ca8f7a293a9343	n/a	Heodo
2020-09-30	1g1Mjm.exe	exe	c447fa82619cf36940274898f06a95a2f4443c9e37df8aee2b87870bf5257edf	n/a	Heodo
2020-09-30	LXjo6PFbYEfQc33nws.exe	exe	3f0c14c77537bb03ba90c3ab1ff5657aae92c85d9e0a0166e4852a8a82f69af4	n/a	Heodo
2020-09-30	L.exe	exe	4d29035a5e7f803d39a9c430fd4a2109414d8a8232f014dec2db90e7d6f4aa5e	n/a	Heodo
2020-09-30	nSftfcB.exe	exe	e52523b6e2ad456f96c13216329b2f836b28d96087329fdff36b92ceee2c045c	n/a	Heodo
2020-09-30	2ZE33.exe	exe	1e83adefabea95ae8fdcad5e9ecddd388562307d440e6a09934659df7f13daa2	n/a	Heodo
2020-09-30	6sAx1nNXObksxxPenW3.exe	exe	d62f74af484dd63e6c3a55f135856bf2d4dbf0880258cb4e8a51a767365aab00	12.68%	Heodo
2020-09-30	4cm9ZC1v1fk4nJwxS.exe	exe	d88fdba4e5f97e68c1f9a6afb4d0159bbbabff9888b073103fc96fee16692fd9	n/a	Heodo
2020-09-30	4w0Jm86YPP9.exe	exe	d67dc3d8e2d23232c8d6848dd758d9722d95a68573043bfbb1a360dfb494ca43	n/a	Heodo
2020-09-30	Ew.exe	exe	73cc0e4cc05f41fbff5c338485d65aeb4f0cf6753f59cf90eb66a1f0db7cffd1	n/a	Heodo
2020-09-30	ydSVDdS5y.exe	exe	6cd9b1de4b0203c547ace3af76cf58df466c0517371f46666859c009cb1ad9d4	n/a	Heodo
2020-09-30	wzjo8oim9Y.exe	exe	6773bbdf628563db6a416bef189e652c31f31e3e65f694681c67930e790d3bc5	n/a	Heodo
2020-09-30	cX4LJOouO4sqHf.exe	exe	c0708932425431e66ca22ba0499f53f2d8a6301b9c5e101dfe2970231933e147	n/a	Heodo
2020-09-30	BK3LF7W1UjC.exe	exe	7a75850d27a225ab10d39d2cb3fd4b6d8ff9b687ac2d874fe4ec40767e120bf2	n/a	Heodo
2020-09-30	R3dBO0xVIhLLf.exe	exe	a18792e0c8126524a00ed74e5992149c22b567fa38d7731611178174f816ce72	n/a	Heodo
2020-09-30	bvw4h.exe	exe	76caa228ceeb0dccc6d6b9415222e852191229f7c2c53ab6b7453bdaccad1b50	n/a	Heodo
2020-09-29	gmQwwneAtlsWls.exe	exe	99c5c36f5bcfaa9f69a1e51606e4ea31a10b34e5546e3e7d9dd13f9ccea2f850	n/a	Heodo
2020-09-29	8OM7Xzi5et.exe	exe	782f2f98f43ed43941f382329c50b742b302abcc6b8bb58bf3e096a3e71c37ed	n/a	Heodo
2020-09-29	JRpnfNfSTfKU.exe	exe	b931ef896168b4ac7ffdc614843222626b1c62149d1c711930e2bcb50a2bc837	n/a	Heodo