URLhaus Database

You are currently viewing the URLhaus database entry for https://raumfuerneues.eu/error/AuTiH/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	719472
URL:	https://raumfuerneues.eu/error/AuTiH/
URL Status:	Offline
Host:	raumfuerneues.eu
Date added:	2020-10-19 19:15:07 UTC
Last online:	2020-10-20 05:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-19 19:16:09 UTC to abuse{at}world4you[dot]com)
Takedown time:	10 hours, 40 minutes (down since 2020-10-20 05:56:17 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-20	gR1Chlp.exe	exe	4646a9a4dfd817db57cf9fa0f777358071bceb9a69cbf99f36b29f0852a075fe	n/a	Heodo
2020-10-20	HS5bs4Yq6YtbJXPUQCvr.exe	exe	ccdd2d226a15bff20eaac2f9f29c005b16e2819bc174877859d473a5bf9fcc20	n/a	Heodo
2020-10-20	qt93N9k83vg0gs.exe	exe	ac363c8c600465b33cfacc3f95cc6625a76cf9cbf1f5b4352fd8e464a8b15c81	22.54%	Heodo
2020-10-20	T2.exe	exe	e8c821aa98f75fd63d8fa79a0cd23fd97a1ecffb4c5dc1168fd855482b762820	n/a	Heodo
2020-10-20	gNi6uB4pHy8E.exe	exe	5592835b97593cab064a87f0617b8328af7c86b2885fef5c9c3f82ebf9f8d15e	19.72%	Heodo
2020-10-20	yVBkgoN.exe	exe	fe6a16ffa1ce992c68b8cfc19730a59d65c4d8c08e377d197b8dc04877fb5be1	16.67%	Heodo
2020-10-20	iBJKSGJ9r.exe	exe	56329ec49f6eb7d4305b22a53d336f3747ec047f3e4d969e814065c789fd3406	17.39%	Heodo
2020-10-20	ceSG.exe	exe	ef37c2ecf16426b43bd32c15e401ee49f9b21d1eedb8ef1e31a182c3932e0cd3	16.90%	Heodo
2020-10-20	L1XRsoZxKYW4Ub.exe	exe	bfb59e17a002671dca663ce7c8a192d79cb7dd6388560e64445c559478800945	n/a	Heodo
2020-10-20	iaZYORb1G7ktaWcEQg4M.exe	exe	d268a7fdbf823308029a60f42ea0bbb6b717b6710bb8178c8cf336489deca555	n/a	Heodo
2020-10-20	mx.exe	exe	4be1ff32a8bf2f07b4f4d6c8ce90b242a11b5a42cdfcb49959b9f5a7ee610603	n/a	Heodo
2020-10-20	0vvv.exe	exe	01d4ffd7d9b4d1bd85095b36042f5b5f3dbd9da453add084c081086aa9b3214a	15.71%	Heodo
2020-10-20	5z0Xr.exe	exe	f118a435f1e75323275f0699a20422bcc88834a6fa25f12a59b95907f8ffd66d	n/a	Heodo
2020-10-20	BxauIyjwpFE1U.exe	exe	986c5fb5dc580367130c88cc99614f4bc9fa5b7c3e3acefd99730826c5c91894	16.13%	Heodo
2020-10-20	KDobr1k1j5rEdG.exe	exe	28db7e4fce0119569ec590c39d492236d04e803eb9751648a3665840eb6c1ad1	15.49%	Heodo
2020-10-19	EAAjJ0cajHgi.exe	exe	46a82380fecf95ac72478c5721cdbfa13e3deec3f9313c894f1280e4002855aa	n/a	Heodo
2020-10-19	e2GhLMFv9qds9.exe	exe	2df312640d12bd5d54d79db6076a03f074fbf54c17fc31ff01c6c281f5e46bc4	n/a	Heodo
2020-10-19	IIMk997Xu6Rl.exe	exe	d2020b0a22ca33b6e30869162aaf4fd12835d6faa422160658209ad4728615f2	n/a	Heodo
2020-10-19	zw1AJ7LX0Vi1XnbB.exe	exe	e47bd3534d3bedb1703d75562f3758e99ff3f469513f9327342d0499985a53fb	11.27%	Heodo
2020-10-19	mZL5qs47GCK.exe	exe	dd4fb4d5891f45626db878a4b84067d1bcaf1fb3976fefa4be7da6ca97c8c4e1	11.27%	Heodo
2020-10-19	KBBbHBNfZn09Sj2.exe	exe	314529eb5f2d4b7707ea4a66c5daafcb8cde15e9d7e6b0f684654c12fa47a18b	11.43%	Heodo
2020-10-19	4xMlyaiNARM0.exe	exe	743ff91f47fad5ed048134705fa7c84df254675032073bcf08dbad97ef1b8820	11.27%	Heodo
2020-10-19	SE2l2.exe	exe	db615f51fa69326898ac830c09573c3e3738f8069b4d21a6519c282fc3fab48d	n/a	Heodo
2020-10-19	7.exe	exe	80127254a72d8d6d953c2e4cef79ec64efbaf0b497dbcedeea33f039c2fae612	n/a	Heodo
2020-10-19	bQax5TD.exe	exe	f2b294f7ee4bd68188f0b3a4a86f8bab1989c53f3e2698e7fb27614d448e9de0	n/a	Heodo