URLhaus Database

You are currently viewing the URLhaus database entry for http://www.cupgel.com/__MACOSX/Ao7k7I/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	697111
URL:	http://www.cupgel.com/__MACOSX/Ao7k7I/
URL Status:	Offline
Host:	www.cupgel.com
Date added:	2020-10-15 09:17:06 UTC
Last online:	2020-11-02 17:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-15 09:18:14 UTC to onur{at}voyar[dot]net)
Takedown time:	18 days, 7 hours, 50 minutes (down since 2020-11-02 17:08:36 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-16	ZMPJfP8yp.exe	exe	7e9064c1d8454cda36808060fd87c33728a99914ed5bf259eb8a0e0967c62e94	12.68%	Heodo
2020-10-16	j74.exe	exe	c8cb1ccb40db1a6c9b4f6b9122d074c8f7565ac65128f15929b9540609049188	n/a	Heodo
2020-10-16	ZyjEDdpGvM6sUKrYD5.exe	exe	362a7d7900ac0e122379b9669106007bcad5035651b1a4fb230b5f393a78dbc3	n/a	Heodo
2020-10-16	yI7Ql6Upb68r5JpsO94.exe	exe	efbcbe341ce9358020e15f85d9e629838612665e08e6ce437dae275bc27d4451	n/a	Heodo
2020-10-16	HLJBtbQp3feQQQaZnNP.exe	exe	acc9ef2b1155e5af996c53aae3270a4d951d6becfc006e2615b4c979c4ea5931	n/a	Heodo
2020-10-16	7I67mr.exe	exe	7098e4b2f92cad48efe416acbd551d2bb078bdf49e74c6c140d7b57bff27a68d	15.94%	Heodo
2020-10-16	I3lm1NIg.exe	exe	8a83d6c49682aad9558595a79891e01ab6c3576742342e18595bab49ff6f2f37	12.68%	Heodo
2020-10-16	kGuq.exe	exe	dd368ba4aa75c0e11f8ab5c65126ef01646346e17886f1820e33c89ee9ee34f7	n/a	Heodo
2020-10-16	sWSgPIdCXGQr4YGwL23.exe	exe	a3f18cce9bb7364b3108cd323c9a93252bef63104fa13ab5d6c820a6831debfd	n/a	Heodo
2020-10-16	ee6fJ8KchL3tHVYTMr.exe	exe	d0fbe6da42a6ca160570ca1768e0233b4e4c8622c3c7a65605064e3dd172349e	7.14%	Heodo
2020-10-16	KaNmKbTXrpN4MLxrUb.exe	exe	e8977881ccf64196b21a48f4a8ac4f235de257377210297e75072ba57fd09624	n/a	Heodo
2020-10-16	lpvVX.exe	exe	1aabc8cae0f2c4b4b84af3f80c286cb55e7ad5cf2df853fcb7e3e7f19172e8e5	7.14%	Heodo
2020-10-16	bY8B2wxiPEocM6.exe	exe	a5e80d1b45c1f81d3770becb9ee3208b37be3c46bb8222a5c88d5644ccba3b66	7.04%	Heodo
2020-10-16	nUtBBzp7nsLk.exe	exe	64e68b5ebfe1a1739cfc0a522fe53dad5d89101171ed0ea15ea08f9d915284e6	7.25%	Heodo
2020-10-16	4T9545I4s5geeLnXxH.exe	exe	44f61d63b57d32f8c2e0ec432e742c7cc3549bdfc924bb7d9bdc4198c2f39098	5.63%	Heodo
2020-10-16	3pVJkzGUayt.exe	exe	7fe04e7a7b83048ee073f311336287e74a431269c3356405c5d2f9d72394166d	n/a	Heodo
2020-10-16	LqT7IGotr2fn8I9tt2GO.exe	exe	d52907ffd9c6d745821fc0e5ab420005a8833773b2b02b60b8a00b183f8f2619	n/a	Heodo
2020-10-15	5UjRK8.exe	exe	77181157b771aab8964a08ac4f04bc8ec4283eb16bd4452ec4823796e9710929	n/a	Heodo
2020-10-15	7I1Cg.exe	exe	7e60ebed4275584e337b5198f67d22a3c4b1dea9a0add38c72c927df22f1e6c5	5.71%	Heodo
2020-10-15	JxM.exe	exe	a23044ef3b338748bb1c4804617e6cd48b4f62cf08bcdd4e5df3ca0cccaa3e99	7.04%	Heodo
2020-10-15	HNHRJLSB381KiAkSgp.exe	exe	c88a7aa2b114978c4c9a6dc05a14b2346eb88b02a363a51d88db373df879a8f4	7.14%	Heodo
2020-10-15	5uNRL.exe	exe	d8a149ac9842ceda521d4deee8555bb1cb199d7b56178b86adcf1ba05419f7ea	16.90%	Heodo
2020-10-15	jzOLr6SJ.exe	exe	9e0660674f231778ca8902f3dd01ecd880a747e23d899a8653a68cd6c188f976	15.71%	Heodo
2020-10-15	yM3HwtVTgXHwhG.exe	exe	ca738675a550702714e53021cbf176aa0a51cec7fdec402ddf22aca112d3cd6e	n/a	Heodo
2020-10-15	twJ7uykjcVU6t5za.exe	exe	6a9ee76ff1453e96c4e7649970168dfa91876683ba9e4c15ffa273d2f16094a5	n/a	Heodo
2020-10-15	JxNyqYTUzOU.exe	exe	8423500d5e45d0222569bdfc6b0a43d55fa8aab8ef882473f4d000356155adde	16.90%	Heodo
2020-10-15	13HlTid25i2.exe	exe	b929ad2b2bee1096e974baa0eb486c5bb36a31e4b47cdf0fea8a8ee805755da9	n/a	Heodo
2020-10-15	LAILFiao0NUf.exe	exe	a5677cf2ce625b57243ea04d40a412faad504fcfefec89d8180a3fb6285eb2a3	n/a	Heodo
2020-10-15	V897.exe	exe	dabfe0126257f7fe91fde1b7d57518dd8fa046afa31dcf70a5436ad892e034d1	n/a	Heodo
2020-10-15	5n8AwH.exe	exe	32571e65edfce24ca66cb7fac810fe426d689220000a488ab52c442192d9093c	18.57%	Heodo
2020-10-15	ZUKJAbf59j0Ox.exe	exe	e0e5eaef71957021fe0c60a5f77078f72bfa6ea63f6ae412f5188a9a2b060158	n/a	Heodo
2020-10-15	p0CYTVj.exe	exe	f619dc9e14cde042d4a525bed879800122d766a9ca47852000b88d3db601b042	16.90%	Heodo
2020-10-15	5AP.exe	exe	6a410cecb0709b4dafe579306c73a2d74a2886dc6eaed72eb969cee2d39cd191	18.57%	Heodo
2020-10-15	E8S.exe	exe	d66279016c72b4160871d5c482afdb6fb3763b2e08a41fa9a01bce28ed2cf9a4	18.84%	Heodo
2020-10-15	G7nOEVy01YQGxK6Pc.exe	exe	e7bbfe26525288adfaf55110c9ad9046632e7bbba232cc27fd2397ab46aaa805	n/a	Heodo
2020-10-15	dX0A7nKEfGo4OOuq.exe	exe	2e2bc28c5bd7e83584d0068fe0e01d4e35cb58fd1823e83cc948f1459cf30256	18.31%	Heodo
2020-10-15	I.exe	exe	0e4843199ccef62977fe5f107fdf0f641e9c7ab09626f75f54ea0ada2857155a	18.57%	Heodo
2020-10-15	wbjmg8hZSOLMnTbs.exe	exe	a3f8a90fc14bd76adb87537897910f863e9cf611c8ccb3bddb2f18536edd046b	n/a	Heodo
2020-10-15	Qj5g8tnIWmn4dgAt4.exe	exe	2264d13b44269e4ca43f34f870ff54d30ad839035bfb9b1cfd30f8c5e789769c	n/a	Heodo
2020-10-15	dFE6KXfoKGS3j7LnAZ.exe	exe	e604cdfb88aab0d17e99a2d1de6e730dca8374e9671f7248fa21dd538e8b0ce4	n/a	Heodo
2020-10-15	tHTmrod8Fgs94kCRPb.exe	exe	4367304febc118809d050fcb7f461e494d4b6296ec4329aff4e1ae58e7d9aa71	n/a	Heodo
2020-10-15	1MBtzW5R6xi5Rwrv33d.exe	exe	fdf82f7d53543af5a50ae6c81779992e83607a4690bbff5c8c9e2ca0ce1d29bb	8.45%	Heodo
2020-10-15	GGScQJUYrqGE3jAiZOG9.exe	exe	1fb5429a64486553d64e5d964a3098eee5881a362d486634526c6364141222a4	n/a	Heodo
2020-10-15	V2VZyPzLghUA11TFAy.exe	exe	fea9251680fc090f3e171479f53f87ab8d626c06e983969e698d392cc2a96b0e	n/a	Heodo
2020-10-15	gmrJcJg.exe	exe	39f85e721f716accc85091e3352ab77aeba42089a6d80a77f406df9732df371c	n/a	Heodo
2020-10-15	p7Stho.exe	exe	c2588bcd33e91fbe8f7d03e8ca91b589ca221aa0f6decc9030c5dd62947e89ac	8.45%	Heodo
2020-10-15	iM.exe	exe	fe802f75bc01d0a3d85a37db4251f3c4597632aaef15d4caa20323a643165a00	8.70%	Heodo
2020-10-15	etT1.exe	exe	05b8d30b79df7428e30716831e0674531e91b9df420a7dab695608665fe5f2e1	22.54%	Heodo
2020-10-15	9LF5FkHl.exe	exe	c04322fabb80e7aad88754465e45eaa3d8e9972ef2e5f378d376cdc89faa0d00	22.06%	Heodo
2020-10-15	gGwe.exe	exe	a72a9aaa77a659d09d3661cdc58d3c207e247c8b78024576b6437224c0d5f293	19.72%	Heodo
2020-10-15	epVP.exe	exe	068a4a0be0514442b3b79e17dad31f0753a944f7f9e8f25ce3d0959da1a43bf2	n/a	Heodo