URLhaus Database

You are currently viewing the URLhaus database entry for https://rovonize.com/email.rovonize.com.rovonize.com/M/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	721780
URL:	https://rovonize.com/email.rovonize.com.rovonize.com/M/
URL Status:	Offline
Host:	rovonize.com
Date added:	2020-10-20 05:35:11 UTC
Last online:	2020-10-20 21:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (Ticket DCU003023311 created on 2020-10-20 05:36:05 UTC)
Takedown time:	15 hours, 55 minutes (down since 2020-10-20 21:31:17 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-20	zj7.exe	exe	75d0f84e8d6f4aa4612034ff36aaf93cdcde0757caff0309ee031219d781bb37	n/a	Heodo
2020-10-20	DHsg.exe	exe	6b3caf459fc2befdc3e5470b03553b02023c9907ba912d4e0b2e3322c41f4dd4	n/a	Heodo
2020-10-20	pps73jf7mGE.exe	exe	18b802a47083595ff0e5937a2c47f5f8134089985673c45e061cbd4471335da2	n/a	Heodo
2020-10-20	kLhv7A7Lv1nI.exe	exe	21dabca82d230e54f2fab58a4a15d472eb3fee86947db9847a8c25f36c12b942	19.35%	Heodo
2020-10-20	J1eTdhcclfC.exe	exe	ecf55d600d989368fbf339c5d9eebe9029fc371c54ee7c21c99b956afedc3c4a	n/a	Heodo
2020-10-20	wCQhePP0z0.exe	exe	fdebbe51a0fe71f66d5cd5b775952a630b1afce433bd4cd41a4171028c2bb2b7	n/a	Heodo
2020-10-20	oe5pcRK131IxPY.exe	exe	b5ec92c9e11c79e7a5d1d036d1c4179192c5986cdd438cf2775026049e26147e	19.35%	Heodo
2020-10-20	VcEddF8OVnQwhtcGZ.exe	exe	9ec68b76f35c7ece20f7785b39c1767ecbcd96c437997c8bddd218ba5bbaa278	18.31%	Heodo
2020-10-20	drWTqHE4h.exe	exe	4040a1c8c45953b57bc35c99f500af9019adb668dc9da8e664a52aa33f6dc0f5	n/a	Heodo
2020-10-20	fdaTYs.exe	exe	0013b4ab33703b8b82aa0dc5f7a480ce9f5410c5486ba3a5187bd68138a735fc	19.05%	Heodo
2020-10-20	50SnXgPC8VVubJC.exe	exe	87a319a472021ea53e23bfd15d7dfc31795dcf5eed1cb2d377d09f50666cdad9	n/a	Heodo
2020-10-20	VwE.exe	exe	11afbdcf3ddf8c88c0c7e83a3f0851b49c234e9ceabf67d2b9cee692ea7b8cbf	n/a	Heodo
2020-10-20	QQMTmUGZTbV9b.exe	exe	4f2563dcbc30af8c066bb9cda0f8954e3373ad92edc3776f790074dd863d710e	16.90%	Heodo
2020-10-20	tNCD75EdHV.exe	exe	353a28c0cde7f3e0249492db6a3e3bfbf8e0a4f56635030c0ba58744951ea422	n/a	Heodo
2020-10-20	r8MsrSY.exe	exe	16ce1a6cd248ec852934ba29017fb534ec193ed237ca64ea9ba4966fbf256891	n/a	Heodo
2020-10-20	ldMWqmvoWBX9X0.exe	exe	4e552ce920e7369432a97ee1d0bdd88ced9c2630792614944da978fb83fdfa23	n/a	Heodo
2020-10-20	avHJa.exe	exe	1c24903fdc4e104c66da49879f1d1a3f80ea1ccf294a578da50c64c1b81418a6	n/a	Heodo
2020-10-20	mPvJ1NkzI1J3f451.exe	exe	db5edde3a944ba2b917cfa4c731ed0f90d1d5ad402c51ed821a6a00f924073c4	n/a	Heodo
2020-10-20	kZAAZuk2xDr8D25.exe	exe	6b87d154b8a989364ea39156bc575cadc07cdd9353336df082c8905be01f5ee6	n/a	Heodo
2020-10-20	CfEVzyEbWzoKE5DDf.exe	exe	7376c3592d3ea52f79326db4ee9005ca27fa1e5542e99ed986e3d58f141109c5	16.67%	Heodo
2020-10-20	crUNtatPk.exe	exe	72c3985d82b75faeb72a781b581311924289657a06076b02a12f1f18c7a3559e	14.49%	Heodo
2020-10-20	ymCm8uPU8NAaufjwN8m.exe	exe	aaae0a533c2bf9c85b11fda1994cade5ef0b6c20263e975bf3e3210b9d5c7067	14.29%	Heodo
2020-10-20	zK0MleULkv5BK.exe	exe	c907810323181a9d172270eeab47a945902399ad3f9c48771ae3d278014a7f01	n/a	Heodo
2020-10-20	4UqDn.exe	exe	edbfc750d1dbe5d42b77d006c14f160c50ef8581bffcaab7d63e337c2d742e72	14.52%	Heodo
2020-10-20	QV8k.exe	exe	40f9a9b61c4a2a5cb245b7f42813b74e5df0497574061436a593615e02ec5643	n/a	Heodo
2020-10-20	2dHHq8GxD1b68w3.exe	exe	a9571afed3f61f5f5b57d1074642182823dadbe07117a1fee835d1f7d24d6db7	n/a	Heodo
2020-10-20	ezehzRCTK2hIdpIOTjInv.exe	exe	b2c470b7d928fcf862bafb22a289c7b86b3468f728be2233e47a2c40e7045eee	10.71%	Heodo
2020-10-20	l4NBAqyN.exe	exe	cf1a5fc5053ca138d4dbb2f02f91cd8548c38df4c263e02d5919643706e6bb01	11.43%	Heodo
2020-10-20	ly4zTJAkMJO.exe	exe	9065ee76509738d4f5146f40909b0a72e66ea50b315bc155974e3157ee0bae8a	n/a	Heodo
2020-10-20	qlgsAmmXe5QHVo.exe	exe	7216cf04de131320dbadc57ddcc8081bfb77d56ec7b462ca7f057c2380eaec04	n/a	Heodo
2020-10-20	GWKGmLb.exe	exe	f9aa9694a3400b62fa621733535a116cb25e4bf4b9b9742b7c7d0c577aa4ae53	n/a	Heodo
2020-10-20	Xouv8mbg0CtUnGtx.exe	exe	5984aa78b088848301ba844eac6a7e5bb596a819ef522ebf34f6a6679407bdb8	16.90%	Heodo
2020-10-20	lYfFF9KrJAmDnk2E5.exe	exe	b1634663dab71e85ba4588aea7ce77c269eccd9ff82fe6c104e7029fe6c4c43e	17.19%	Heodo
2020-10-20	Nz8558XX2w.exe	exe	675c89043d7b5c7c4ef5755fe2a9420a61efca92b2e55301529ad46e62a1c052	n/a	Heodo
2020-10-20	d8luR.exe	exe	e90fda862ed4e18d1a5d66e3c6607a0a3072533c662508b0210d842d056bafad	n/a	Heodo
2020-10-20	EZgTzexyJf7.exe	exe	8ad6b26419434f32d1d162ed89d782d1a7bd908e942bd1f51bd6b2f60afeec90	32.26%	Heodo
2020-10-20	I5J8GgR62acwkmp.exe	exe	089e88f86f8f5199c9cdb5c30c9bfe13a851c3af3d959e4dd11866a1dbd07675	n/a	Heodo