URLhaus Database

You are currently viewing the URLhaus database entry for http://zylko.com/wp-admin/SD/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	725647
URL:	http://zylko.com/wp-admin/SD/
URL Status:	Offline
Host:	zylko.com
Date added:	2020-10-20 21:33:13 UTC
Last online:	2021-02-13 00:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-20 21:34:28 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:	3 months, 25 days, 2 hours, 33 minutes (down since 2021-02-13 00:08:23 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-21	1a2.exe	exe	850da78cae56723b7ab4ca7c19d161f2718ccded35a5c335ead113b25c57b2b4	11.27%	Heodo
2020-10-21	YuxQfHj7GmketSKy4co.exe	exe	c04810c0c1624b5dd70ae1b62a9bf948b2e13f00caca3cd82ef50b273afe6b85	21.31%	Heodo
2020-10-21	2XHwnU.exe	exe	3484cf21959783054f87d30c962b49cab2f19c706a08bf3a5833168f784726a1	22.86%	Heodo
2020-10-21	p1t.exe	exe	3cab25c0fa33f74f4089c5932985df5b1084c2ee3727ffef971952e4e8ffcee5	n/a	Heodo
2020-10-21	ivb.exe	exe	5da56d8a20c286f55cef67d9f61760ae0218e7d6cc478a9743e04c2102b1b465	17.74%	Heodo
2020-10-21	2so5CXWMROgpDn7p5A3x.exe	exe	25d8d883a861af2e7eddec049760b20b473efddd81c75a3686f7854b58891c6d	n/a	Heodo
2020-10-21	zZuTJMoJpV5xoLfalQk.exe	exe	2c135fcbc3a56bb647cca7af630c27cf95bcd39e2c83a9ff24815e2fe5fb2a50	n/a	Heodo
2020-10-21	BKheW.exe	exe	8b3b3a53153d7b51fe077e89e1a0c15d31bcc98bc68f68820b819580b6b6e968	n/a	Heodo
2020-10-21	whtexDleDVY3g.exe	exe	9cb89087bb7db26f02dedb9ee046f0b5e362d5ec5d48ab84d14c8582b21d4d11	n/a	Heodo
2020-10-21	gKN.exe	exe	9bb5707cf5f602a394d08da0f172be8c127cee81bfd52cce5037346c3d3c4932	27.69%	Heodo
2020-10-21	EKSqkpqCPvZBR8GOX.exe	exe	17be8deb77551cd1bac8a25aec3032bcc4d59452012cda420e413e928d9d64d5	n/a	Heodo
2020-10-21	ILSWGG1VAm8flccumRT.exe	exe	df5fabd0923cdc0459d977dcf76d5fc5136204a256bf5aab8a9d47b58a1d1ecd	n/a	Heodo
2020-10-21	vHnxyiT.exe	exe	a6cdb2a9a4030dcb55e841863a954186af7b8b701efd8c0a3d603289e218f1e9	22.86%	Heodo
2020-10-21	LpeAKFAR9.exe	exe	48414e7031902e11aa9d33ebf5abaaf1ae1b291c649da90c6e21f0a2202c32ae	20.97%	Heodo
2020-10-21	hGmcPdjp0kKkhud.exe	exe	5d59103c2dc8736dc61e1f658e7ed0e1619d64c5708d22d5fa1a3f7e386adf21	n/a	Heodo
2020-10-21	N6YsY.exe	exe	b8420caeef8df964ffc169774ea668cfe161b807b0469e2891642a4fa2040890	20.63%	Heodo
2020-10-21	KqTYmYmHexDdRGHH6.exe	exe	2e28a510e436f6ebffb7e4338d149ffd1fd5968f490d257c6e937cf93396eac4	21.13%	Heodo
2020-10-21	EJFHHwXgpear.exe	exe	fc8f8f187fe844e869d21f45cc4c1477ab07022a44aa3b8e9f891d163c11fcee	21.13%	Heodo
2020-10-21	JR89G10Z20dj.exe	exe	7d180d0fdfed4debc98a2d90327756192ec34c752217d264a69422b1177c5212	19.70%	Heodo
2020-10-21	y5koo6ftJmtxg5dU.exe	exe	53cd28462c6f655119731fb60092b5d9d7588b9658ae0b13fb98072c8d2db363	n/a	Heodo
2020-10-21	wxpV2ZOfCY.exe	exe	a53869a3b051fe65e9eee9433573866390db3c09dd3258759a164b14b7c3c7b5	14.71%	Heodo
2020-10-21	6SgXVFHIfxG.exe	exe	01e9dec20259fbcc9da892e43d7299474f3fc9b1863d5aa1226790bed2ee836b	13.24%	Heodo
2020-10-21	dwh9o1bzkgcSY2UTWO.exe	exe	ec9efd63395f2947360f57540501436bea57254b8f25ca51ba5d28f30832b588	12.86%	Heodo
2020-10-21	MVwmEKRsYiLo.exe	exe	fa252b0584f282464b3798eab4be601695ccc17f39f3d95713a7d5f3039a1a23	n/a	Heodo
2020-10-21	54ObQQrIOmxgX2.exe	exe	3c8acb20186ebae4f8f46ba29e823a35831d59af09fdce2d3bfe253e824da355	n/a	Heodo
2020-10-21	punEANbZ1rMuuvtKZdw.exe	exe	5ccfe8af150863c168c9be2279fac16f32f628c052a849c4a0b5b69098b01cee	12.90%	Heodo
2020-10-21	t4bIPVfQNmvZwtX.exe	exe	8829cf949141d34c42bea008d903ef5a249fab27f261e549f2d4b4e78a9b9890	11.27%	Heodo
2020-10-21	IEx2ksD.exe	exe	24fa1f13ef2d3500b7ff4c372df5534fdb034f41ac643d6c00b5fc56f7478caf	n/a	Heodo
2020-10-21	KMrwcZ.exe	exe	8710e0d7bf0e0aef0684d5140fd10999b2ecd37d0c25dd575b8cc631079656ad	12.68%	Heodo
2020-10-21	8ASUMa8Mlc2XToDkUz4.exe	exe	516bbb8fd8b639be59451c95e50b9bedc8976bc5f3678092cff7833cb749abff	n/a	Heodo
2020-10-21	Tw7jAs1v.exe	exe	0f11c373d70634c10980dfd1bbe994d1a886b0dc7f15ae6b24e5e1db5a4cfd2b	12.90%	Heodo
2020-10-21	uz6r6jzBA6DPHNQBln.exe	exe	5f610d52e2bdc5eb58c14ea55d59a647b8f9e68f6358b59ab0ef03d8026d9212	12.68%	Heodo
2020-10-20	jKcpAaO8NPzwinM7k.exe	exe	2b8305b85bb5440488d7ac76ed8625cb21517d25b472c793ba2137d477ae7154	n/a	Heodo
2020-10-20	CLrlVIevKLpBy3I.exe	exe	e1238eff1aef61a4a6df171f4e8eae1821bd0439a444837156aba8eefd0ad5e8	n/a	Heodo
2020-10-20	keHc7.exe	exe	cd000b1303ca00e1db79febcfd6c4e39bdde1ac05f80b1b86a5711dcf8f0922a	n/a	Heodo
2020-10-20	NcP.exe	exe	d50cc2b91d3783efc30e41a8c0fa0ab2cc7ed750ff9d455a34eee8e2e7e5399b	n/a	Heodo
2020-10-20	kQlTEOaajAIn8.exe	exe	dcb870b61ca19ab55bd128d460328998fdcff40b65540bc4319c3c474ef1be03	n/a	Heodo