URLhaus Database

You are currently viewing the URLhaus database entry for https://layagroup.net/wp-admin/5h/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	719773
URL:	https://layagroup.net/wp-admin/5h/
URL Status:	Offline
Host:	layagroup.net
Date added:	2020-10-19 20:24:11 UTC
Last online:	2020-10-20 11:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-19 20:26:09 UTC to abuse{at}hivelocity[dot]net)
Takedown time:	15 hours, 31 minutes (down since 2020-10-20 11:57:41 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-20	ngfIIHBjNbN.exe	exe	b267c3aa9fea4fb90669cd1792aa58034e2ea1db257bd2a3e58b1ffa42cd64af	n/a	Heodo
2020-10-20	EjGk3nJHA.exe	exe	4607fa16f68942ffc61b73c8fb346d9c7dd5c71cb7b069d5d5bd731a461fae93	12.90%	Heodo
2020-10-20	WLynMSrVykrU2z.exe	exe	ee670214d5ced5a14cadc9950c2dffe46ad10f7939ff1c8e3e1326f27fde9e1c	n/a	Heodo
2020-10-20	OD4JrIf.exe	exe	363a05a9c231d57212c3d33c6d868b6630eb43150828f5d2a70ca513821c9648	12.86%	Heodo
2020-10-20	X2uiB77.exe	exe	972085d4daf39fcb0a4677849a6db9b89060ee1e8aa7b6d3b6f8599e8d352a0f	n/a	Heodo
2020-10-20	JAogxNSXg3FHWN.exe	exe	54a356c80fe6d67169f610e28ab8217a94cdf9ef962440ba68941aab9ae4067e	n/a	Heodo
2020-10-20	ASA4N5iU2XlitsuEJm.exe	exe	fc0790691e903d5e2502e442039ca2bd84a0e4c3fbad09a1bd30c5e414542c5e	17.14%	Heodo
2020-10-20	FqFmMzSV.exe	exe	c245f57468dd08522549b0de298f78b83c06987a10c9d4b328436a96a063b3d3	n/a	Heodo
2020-10-20	ueva.exe	exe	7bf25efc608a50dfc0cee99465f7f4cca32ff8126803e326f93639536e21bfe6	n/a	Heodo
2020-10-20	XBLF.exe	exe	903cc87cd59a4896b47cf88982e2e12dcd9be42c30ed760e9feb90f0b1687297	16.90%	Heodo
2020-10-20	6CUPh3ywFi7hiDJ4c4l.exe	exe	d45046d4132fc9ebdf2fc2b9f5db454ef4283f6115175139f6a61168b67912e7	n/a	Heodo
2020-10-20	0mJaE8DvV3Y.exe	exe	05377dbfdd2ebac80315b9a352f8928f353b3a4f89eec6d085706e4e6d458523	n/a	Heodo
2020-10-20	gPPE0.exe	exe	d9c8b680e38d768e307d50674938f2391c4b051eb549e4c20c459a3aeb264820	n/a	Heodo
2020-10-20	mKblgNNCE3ed.exe	exe	1bdfdaff6882e6505955b7e1cb18418dc6a3ed527ba68a4ac8b395f48b553ab4	17.91%	Heodo
2020-10-20	pq0SaVTq2WajRDwr7hwmL.exe	exe	07f9419aaa930614c1ee9a12348751283b83beda36b267c47759f79e41575501	29.85%	Heodo
2020-10-20	ir4RCmHxJoHjQqZPZ.exe	exe	d3c569425b8356d89477a62c44a4e375b5c56b7a8b63a773ad7614f518c5a32d	n/a	Heodo
2020-10-20	h7zdJPChoNNq11.exe	exe	a0c95bef35c435fe6a2d0b28e9428cabecb888ab7e1982d335cf70122e0fe3e7	24.29%	Heodo
2020-10-20	MrY7aa6LI8WDPJ0QQYe.exe	exe	ff56a41435c97a7c0d8bead133fbc28cd19f6aeba11405689c66242e27c08c54	21.13%	Heodo
2020-10-20	4FvGxnzEhf.exe	exe	834c2b4d3055fad34023cd8148baa98740d0a888f5412dbdf68610d47e440bdd	n/a	Heodo
2020-10-20	neu29M3vgr7cH8.exe	exe	e13af91b444703aa59dd6d6cb133048eef0a62fd6933efdb743075cff63c5571	20.59%	Heodo
2020-10-20	lZI.exe	exe	c030a5770820e72ec6e7a0835fcb6cf6ae2cdd303dbbf91df421519f8c0211d6	n/a	Heodo
2020-10-20	qjm3iNw.exe	exe	8ab4237df2b5f70126e5c50628fa2f4be79796787bbc2738a46f9fdfa4c02018	n/a	Heodo
2020-10-20	PKK6ObVSH.exe	exe	3f64dcead90f73117f932e1148c58e3351d13af3c80dd74adb32fa305163d073	n/a	Heodo
2020-10-20	kjkf77Fp3niU.exe	exe	c74bcebf2c2573968405bc2a524cf9a694dd02aa4600bba1e35a02dfee88a2e2	17.14%	Heodo
2020-10-20	88wT1xBvj2VQKWnR.exe	exe	41a3c7da4ed9ef277900857141e459c387c6324ff9b00e1828b593af39167b8e	n/a	Heodo
2020-10-20	sEOUPnP3i7mY3D8y.exe	exe	26f3c6d1e3237e2cbe6a5b5a83befd7714d601db4e47c78dd0dfbfe727c67440	n/a	Heodo
2020-10-20	eRA8v4A0iPn9nNZXFF.exe	exe	2de4d99edd1d7f0c31481c13ee2c2bc1a81ec5090e8293f399c3c90b96e8860c	n/a	Heodo
2020-10-20	UM37S0DhwrhDpifjp.exe	exe	3bed390b72cd429938b6aa20b55ae6f58a21d4871cfc91d66c66bef6b8eab890	n/a	Heodo
2020-10-19	5V5vYNosrRj22lzVMWTV.exe	exe	e6436cf6fa2ffb0bfe15cd974b6ec7c83312797bb26133a5046eb583ff7d2026	n/a	Heodo
2020-10-19	Qj7.exe	exe	183e48a9376921f454c83901847ad7b88940ec7a325532c657ff3ec6c78b83ae	17.91%	Heodo
2020-10-19	77SdjIjfrP.exe	exe	99da2029c09b584bb0cb9c5d067fea1d884b0d36c2de347087b3d76eded144ad	16.90%	Heodo
2020-10-19	rlKnwK1785GZOaQKui.exe	exe	0857bbea50b4ac8a5664277b2832158f39a186158f14262be0bdcdb1e34d2ab4	17.14%	Heodo
2020-10-19	QUP3MHU1Ko.exe	exe	72e45bf850a26b5726f4c98710e6dbb76a33306008375b2480f3a1b0dd121fe3	n/a	Heodo
2020-10-19	um9wjhFBi.exe	exe	32dc1730ee41b8193baf7bf6e4091e2d7f9b005179c9913d43e6314e84279333	9.86%	Heodo
2020-10-19	ESCKE1lesH7hCwPP5.exe	exe	47ed9e2d53e3e099a354926329bcc3f3576d7539c891951ad992710dcea982c2	n/a	Heodo
2020-10-19	PEe1ZGAp2a91I23tGQg.exe	exe	3db889cfdc1bef38275e96963037300aeabefca45b4228f58b29ff3c17a2f9ff	n/a	Heodo
2020-10-19	wzDK7Qt8uwmWFlSnwc.exe	exe	1968eac07e13eea409dff196ec1dec80c1e53d1f2bf9d51413776599deb72660	n/a	Heodo
2020-10-19	5eseQ.exe	exe	588783f33c31258e00d3126dcd26de9f81962c2083698152c09d222583fdbfee	n/a	Heodo