URLhaus Database

You are currently viewing the URLhaus database entry for https://erika-hofer.de/wp-admin/5f6s20/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	694768
URL:	https://erika-hofer.de/wp-admin/5f6s20/
URL Status:	Offline
Host:	erika-hofer.de
Date added:	2020-10-14 22:58:07 UTC
Last online:	2020-10-15 08:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-14 23:00:09 UTC to abuse{at}mittwald[dot]de)
Takedown time:	9 hours, 52 minutes (down since 2020-10-15 08:52:34 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-15	iOBqbDy.exe	exe	e1222a5e454c4c3fe9fd20c0182ac1f90b96568ce2748634e9101bb6f1a67bba	n/a	Heodo
2020-10-15	aX7HtT34t.exe	exe	32af6a8f6831d6375c39e76639b0f8a8cf42e34e0f213b3fe41728e2f2ffd81d	n/a	Heodo
2020-10-15	lX0kZmf.exe	exe	5e286053295f3d469a3e4939862e4097150803325bf317d8ada65e25372c4ad8	18.31%	Heodo
2020-10-15	g.exe	exe	2abf33756aa71d3924d4fee96e6a5fb0e48ad022ab72728573e8bbb03ca1e918	n/a	Heodo
2020-10-15	0yi.exe	exe	bb7a39271a9d5bc24468caaadddef8155fb458ba275a12e879cd0cb36eb17a9b	n/a	Heodo
2020-10-15	Hi6F.exe	exe	da90b04d2328074b6e2aa8850d31947dd45cb1950d464fb5a2097b2ab1906c53	n/a	Heodo
2020-10-15	HV0qv5vZhSrA5N5KHua.exe	exe	cd37aefc5c7a0763431692546e69247c8b63d5fc4303edeb8f605be96439724d	n/a	Heodo
2020-10-15	pY.exe	exe	7e5368607cbafa3194f4720271dab06906795e23cba44a62ff4f228111226eba	15.71%	Heodo
2020-10-15	SoLCkwL7Z.exe	exe	a30f80439d3646f0dd5cfb8c8d3780efb61aef3322ac342dbbc56024bced000a	n/a	Heodo
2020-10-15	oNOlwyqxcsBa.exe	exe	6eec258fe4d7d4a34d9965b172a80a847c962395a9181f6edde9d18f84295a28	n/a	Heodo
2020-10-15	NGrI7.exe	exe	bfa3e22f7c29548bd1fcdddce0899c051cae76caf116e6ce3d22893766649210	23.94%	Heodo
2020-10-15	h7ertE0mWCNNDz8.exe	exe	dae1a8082567b10c7fb7e4ba0bde849d41e0a3e7133782c48c21340f5048d67e	n/a	Heodo
2020-10-15	drkyGm1.exe	exe	b85627266e8681774dc013f35e6b5049f8070e16748f1b333783a2c7db066cea	21.13%	Heodo
2020-10-15	Qwvy0NHn8.exe	exe	cadedf5a8e85f78fe1c244825e2bee06c2a80602ce946f5cd2dc8567425ef937	n/a	Heodo
2020-10-15	hrIV1.exe	exe	6edbe81a5894af3a4cf65f5db0d206576be157693df9dee13331b5aef0ac4791	n/a	Heodo
2020-10-15	HL1muVMPM.exe	exe	97d73acc9284e50d687e861a10b0553dd47e923f5941bb6f3958b47aa9c08abf	n/a	Heodo
2020-10-15	fFsaxqSYqV.exe	exe	901e3d5079ffec1b2f601673d145e2fed358833919823d57d440c554fed0530a	n/a	Heodo
2020-10-15	ccXk3RUd8dmn.exe	exe	65eb568a8933f20c8a15cf47f7575c17de3ffaf0a2e0f8c3060d87fc061353aa	n/a	Heodo
2020-10-15	YSPETVnP7i0Uk0K.exe	exe	f1825d371a44d6fa8c5c796e21c2df9e63c78eb8a249c741a9bd43c774f1ee5b	18.31%	Heodo
2020-10-15	K88kw0Q4mHmaui.exe	exe	d823894b6aa5f3fcabb6380f9eafd46efbf705320c5aa9c8c281a62a35d512eb	n/a	Heodo
2020-10-15	YEP6b4rrgZYQnqzwE1G.exe	exe	93d9b4dfce7ab7c0b4424007c9824e89e3726cbfc423f7d07bac1063d08ad19f	n/a	Heodo
2020-10-15	f8KYBAoWZl.exe	exe	0f4665fe72c54f04ed89754be8be1597f35e743939ac2535f662e0886503fefe	18.31%	Heodo
2020-10-15	03mwJO.exe	exe	2d96af490399ac3a55e8ddb1641d29a0d9f298e023666b368b0f8d3aa77d511b	n/a	Heodo
2020-10-14	YQEKKrfoEHA.exe	exe	9537e0a0d0e29a61c39f372e2cedf4bb7dd26e42b945b2bea8afbd3468ef745b	n/a	Heodo
2020-10-14	CRJqy0NVKC81K8E7f.exe	exe	2f111a24ca0f39f8b1b78ec56a607aed3c4705b5213b6243ff29477f636ffa3e	n/a	Heodo
2020-10-14	dAnqE2oCTtegU7Fc9q3.exe	exe	3c5f23ac2a83e074c92efdb46b291020c0c3c21222ba2ae06f638ac109099336	n/a	Heodo