URLhaus Database

You are currently viewing the URLhaus database entry for https://arifulhuq.com/wp-includes/ucV8/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	720285
URL:	https://arifulhuq.com/wp-includes/ucV8/
URL Status:	Offline
Host:	arifulhuq.com
Date added:	2020-10-19 23:08:12 UTC
Last online:	2020-10-20 06:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-19 23:10:23 UTC to abuse{at}hetzner[dot]com)
Takedown time:	7 hours, 30 minutes (down since 2020-10-20 06:40:35 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-20	01Lq.exe	exe	33c4d63ed4b968d1920f8583b89faba61a8daba746d8df4882df0cf7b096531e	n/a	Heodo
2020-10-20	2CxZN.exe	exe	72d62a1eca77572f7d05f2701f9380ca7b71df3e9194a66e8222ed4d12f88cbd	n/a	Heodo
2020-10-20	s.exe	exe	bbb5e9122141c59f9bc286cb69d63ca0c73867517a05edfb5d44430027a6bb36	n/a	Heodo
2020-10-20	60j8arRjZg.exe	exe	9e77604537b6168bff183bc58ea7b3ad91f3b5794d5f54da31612ec5db6fe4ab	n/a	Heodo
2020-10-20	KZWfRQuqG2DGln.exe	exe	29b997ee482cc7c4fde48d5768e77543c78b92c57880bd1512d32155ce727a10	n/a	Heodo
2020-10-20	7VU24RF.exe	exe	d6cc9eea946742fa41507654efc3055bce02c1fc055653f769ebda7b0f06710f	n/a	Heodo
2020-10-20	yyxF5WL.exe	exe	0d7d28de75419f30c07c088f8291063d4ce1b915e8e4f0030f0989940d8eb856	n/a	Heodo
2020-10-20	k1OsjEPlhOmRRK4rBsV.exe	exe	cacc8f95f0c794d9a2db9a27f929a703fc3a04b605fd6b989b0808c2d25d6d2e	n/a	Heodo
2020-10-20	w.exe	exe	f4311fac9da3a2318fec7f6ffe74819056306a73edb18b22f1bd8e655a4be9d3	17.39%	Heodo
2020-10-20	kthhOkuiFFDc.exe	exe	7cc3fb0e1e850eeacc6ae1af17e193f8b4c376d0015cc78172dcd134a4a50eab	n/a	Heodo
2020-10-20	1PsjtCdhAHp67w4qzGe.exe	exe	1336ada6c97b85feb4c5db87c00b08f9b9ce4e5bc073cb84d683bafd28434557	14.71%	Heodo
2020-10-20	TFh27KIfQKXSF.exe	exe	324ac28fb46f65461d78f0f68effa53d672287b251af74c8bf1c3e8fc9702969	n/a	Heodo
2020-10-20	92zSayemhTAXeDY.exe	exe	24ac8b4f1aa9286abde302a4bec1e1a3a0577b6439a010461848b3efc6ab3e4f	n/a	Heodo
2020-10-20	uyagpQ6nTqygaaZl2DV7.exe	exe	aea7f620304220006407b3135c3dbf5e9c8d38ed833bcba345486fd8b4bb3a7b	n/a	Heodo
2020-10-20	DbKf87SO5QD9T.exe	exe	9f63f4d33b3f96051ccfb6e2ded39f38578608908862e5d2f83535962fc4b694	n/a	Heodo
2020-10-20	uMTiS1J3gNRH2cYJHfn.exe	exe	58ea035fa955f7e56655dde445cb215dc056f536305e7d1f814fc3d841d976e1	16.18%	Heodo
2020-10-20	sZRoQPVgyZ.exe	exe	8954f8524fe22cd86efd7279b0e55b3a9a3e243bcf950256ad1704c7154b0f9d	n/a	Heodo
2020-10-19	uG8pSKtUqj.exe	exe	3eeb0379ed4f8271636fb0d8dbb51a2ae3c8f97bfe9c8b384969ad74069863ab	16.90%	Heodo
2020-10-19	hu3lp5eb.exe	exe	8f36545a5734ce2125389cbd9d3cc7920046f19f9c2bd3d720eb00fbba4d5197	n/a	Heodo