URLhaus Database

You are currently viewing the URLhaus database entry for https://prodominiospruebas.tk/presta/u3U/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	721626
URL:	https://prodominiospruebas.tk/presta/u3U/
URL Status:	Offline
Host:	prodominiospruebas.tk
Date added:	2020-10-20 04:47:12 UTC
Last online:	2020-10-20 12:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-20 04:48:09 UTC to abuse{at}softlayer[dot]com)
Takedown time:	7 hours, 42 minutes (down since 2020-10-20 12:30:57 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-20	RENMNlV.exe	exe	0950c1c3d529dab37051abba25150ef64240c7be603cffdd9a6d45666a1b9920	n/a	Heodo
2020-10-20	2B8Qv1y1kgw.exe	exe	4c33a32f7b5596edc2243455053730bc8edbe09408abd568233bedb30670742c	14.29%	Heodo
2020-10-20	6e.exe	exe	a7a642e2d42f253428f9f5be94732822c77ec38f0428a6ef3e6a6a4bf1d3f94d	n/a	Heodo
2020-10-20	HCvSo8J9gfDltCQKrV.exe	exe	d314e0d34029e21dfe8c905206207b3fef6e5259e7574cdbc4165a4064ef3aaa	12.68%	Heodo
2020-10-20	m3LvB3zAD.exe	exe	4164758ff89164824651e418520c0b5ae237e9c26eec13071a4daadb4fb340cd	12.68%	Heodo
2020-10-20	Zl5U0BHtnjJWd.exe	exe	225f391b82990cb9d31abcff53490bb6ed8b894a3a6cbe270aab3c9594bb2912	n/a	Heodo
2020-10-20	2xthB4Z5D6G.exe	exe	14b6dea37c010febb29919a8534c4a8b274ecddde9b10dff0dca10dbb37ae214	11.43%	Heodo
2020-10-20	645lMQC5ZNaK3rMPgC5.exe	exe	b49604c260dce20a680aa5e8122c268f7320c50fb104dab03470244aee078bb3	12.90%	Heodo
2020-10-20	fACncOMFOAud8aUzy0EK.exe	exe	42cd9f0a4a1b81331b458fb22df06124810e4f1d610de99f577ca92afe69dde0	n/a	Heodo
2020-10-20	BTNuYG1I.exe	exe	8c1fab5716ee708b742591f53f185a29941271d79b03f9e53e432bf5380335a6	n/a	Heodo
2020-10-20	IWds.exe	exe	26726c2f070f1581de5d9ce2b6039b1a996ac828f3083a103516bdf2958783eb	16.90%	Heodo
2020-10-20	SKwOHTPaF2Gu5h.exe	exe	5b201fe37c607c089e2221073055eeb05474a9d28fbc1ef4298c6c985ca0f4dc	16.13%	Heodo
2020-10-20	DoGGnXSnABJ.exe	exe	40aeae6c3f474cba2315f06aeb3bd2ed0b7ece5e16a7cc49a406b624823581a5	n/a	Heodo
2020-10-20	3v04MrGguqIMld.exe	exe	21ff9aceb38a04cf1be9eb7d4993696ec15f0717396b2c9795a673d08ae61084	n/a	Heodo
2020-10-20	8BqZtQ3XF94BtcwM4z.exe	exe	6f8d9dc02269f999d2a0e078694aa8483ecd4c8804d3087d600e74191e58be5c	n/a	Heodo
2020-10-20	l7.exe	exe	d674c54f45bd1dc7e745788a05e8dc4d1fd2c0223bb0e7bf497166a1c5070059	n/a	Heodo
2020-10-20	w.exe	exe	e24d074cf83d9c92c4f727ee7bd72433762f21fb6e8d2715001cc673a821ea30	n/a	Heodo
2020-10-20	NW7FZz.exe	exe	a88dbebbe3c2de49632db093b01c26ed45b686338cbc725553dca5a5c30557e7	n/a	Heodo