URLhaus Database

You are currently viewing the URLhaus database entry for https://sangbadjamin.com/move/r/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	726017
URL:	https://sangbadjamin.com/move/r/
URL Status:	Offline
Host:	sangbadjamin.com
Date added:	2020-10-20 23:13:16 UTC
Last online:	2020-12-04 19:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-20 23:14:15 UTC to abuse{at}hivelocity[dot]net)
Takedown time:	1 month, 14 days, 19 hours, 59 minutes (down since 2020-12-04 19:13:45 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-21	vYl0.exe	exe	24956b6123612a89f434143923c0f9deb2aa1621ba107aaf94969a42295d50ed	8.57%	Heodo
2020-10-21	YF6kcDRktmdqrSpQR.exe	exe	e371cb27fb2fcb73d8f57d72ca0c19dfa7f93d2d1a556ff398768a9cc12f19b4	n/a	Heodo
2020-10-21	Hs.exe	exe	562fd7f4077ddebae5a934f3bd400eba3ddab11619c3e677b87dcbc423cac2a2	8.82%	Heodo
2020-10-21	rbPUHFaqxU.exe	exe	1479d97b7dc1816d93fcc6da95991581174e5e9f86271fe933dca9dec1fcd199	n/a	Heodo
2020-10-21	9Vkps.exe	exe	9ec5b2c483deb7b154a8f1b8a474621df494710708ccbc56506109356743613d	n/a	Heodo
2020-10-21	kBMsDu7NkqSIhkPqKn.exe	exe	cef93a32278f252e6686224d0673804b623a74d408c3785d062c804147e12095	n/a	Heodo
2020-10-21	Z00c23.exe	exe	ebae1a9402843c52ea98b357a66983221010690424cfb1ae96ee19ee92f1905c	21.74%	Heodo
2020-10-21	EQW3UDEx.exe	exe	4aa305938bd3c39191525448aa352477d9b4862f5c23ebacf8bef00cab88c540	n/a	Heodo
2020-10-21	jqg6NZ4KVrmf.exe	exe	ae2f4804bbde87bea8483ab2e5165b0ede005891ccc4b629953633ba650cc783	n/a	Heodo
2020-10-21	dXFvblCuj.exe	exe	090f70602a314265769b7c87d2ec26b2ef78dad74a2dd6374cb9bb0f043556c6	n/a	Heodo
2020-10-21	ZxQ88uV9f1quissQu.exe	exe	2cb5fd4da3e09872e273b40cf4b5407775d59491eb27b6dac0f00ba0621041c4	n/a	Heodo
2020-10-21	Kg8K1T.exe	exe	92635bf2fc51d4fbebf2a113596b2fe20b2858e37671d4eaa5f4d843fb317d1c	n/a	Heodo
2020-10-21	3JsILrpYB.exe	exe	920c8dd7132501a277ae1e9419a5339bd53dccb0988a6208f6beb01e51ead8c1	n/a	Heodo
2020-10-21	MiG9e19hno8.exe	exe	11636f50167dcd55fdd30eda9e6ab68a0298c3fd3b16a0c46a104e9b23e04c14	n/a	Heodo
2020-10-21	GTf9D3JA5kd.exe	exe	90308b88271f92a6f35fc56ac1a0915d5492231e1645ed5f8c8c46827cc709a3	24.19%	Heodo
2020-10-21	JoTn.exe	exe	7fa964e77c3395672abf792122da12bdd57274a8fc48a894a9495fcc222649e2	23.94%	Heodo
2020-10-21	87McdAkdOQUhGYu6WZ.exe	exe	31d0a2f9326dfc322aef1afc9bb508e2123470249ab2893d76cfe54cbb847ff1	n/a	Heodo
2020-10-21	McPSUW.exe	exe	dec94a836241f460f670419c91f5aa44c0df7035fcd584a39d0e6f54612dff7b	n/a	Heodo
2020-10-21	4oepwy8e7FijStZO0Dt.exe	exe	305b7f51e2fcaacfd888793f77a60a854c65aa0c9bf14252caf7c9b49761e7e0	n/a	Heodo
2020-10-21	aJS6h7XikNfyb.exe	exe	6e8b45ee271659cb1ab2b83242072e6a31c0131b15ccdb3502fa1990a3adf4e9	n/a	Heodo
2020-10-21	zz.exe	exe	ca4f427d7514a7d7e3e6c7bc21cde9a52afecc004a95f0b2c88e34733288ea09	19.05%	Heodo
2020-10-21	fdbxA5kX5nPr.exe	exe	94be81e5bf7c6b1b5097df5376e687aaf235f774920191636eb0eb15903e2530	n/a	Heodo
2020-10-21	H.exe	exe	bbc7faffb0d5e68ed6b0592fdf461e9af0f102ccbf6624c1ce81ce5be3ec8896	17.74%	Heodo
2020-10-21	T.exe	exe	909a64f966e5a03511e2a95c63ebfe29619fb58af29a44f8010287f74f3ea0d3	n/a	Heodo
2020-10-21	R.exe	exe	4b7417ae3a4a47c40d1545b7b9c0050bde858e0ef3d3de143536cfa6b6c93239	14.29%	Heodo
2020-10-21	eVJ4aaJ.exe	exe	86b78051cdee9ecdb889baf5b6b121fb26d03d6e651197a8664f2a8fd6f9e208	n/a	Heodo
2020-10-21	1So.exe	exe	b1cb5c3a437327d850bf4d1f6129bd8c243879d085ad3425334dcc395e7ef79f	n/a	Heodo
2020-10-21	AC9.exe	exe	3a205ce640b25b7d264f0198721c200b897b41579373ce3fc4cc8f228fd634fe	15.49%	Heodo
2020-10-21	MCzGLnWR5T6HrZddcRe.exe	exe	8acff1f33fe86f2a7c2c5cd73636439e8fb00c98dfa16e9d9a1e7adf1e21f9cd	n/a	Heodo
2020-10-21	Bus68F5xuszKGQbvqEvj.exe	exe	9e39908c1d4624d07358b9a369751fcae3be4b6beb260c52cd3adb130b16eab3	11.76%	Heodo
2020-10-21	yjbWq4ppk7KGE.exe	exe	b30dcd976a0ec96735e99e9733e40ba41606f066918bae6c8e969a0f2b638d4c	n/a	Heodo
2020-10-21	Rn3A.exe	exe	a6014de792bd1cb92daa59df0dc83d9b2e9937d99fe3bb4bc1e5871b94a24197	n/a	Heodo
2020-10-21	iPs4b2I.exe	exe	edc5e9279b952bc4e3586731301e0d883f1c142129f13e86a7f426fc52cf2b25	16.13%	Heodo
2020-10-20	SrPUPBOeb.exe	exe	20f7fe6f8afcc61d5dc62f164193bc7263af7842bea7eb3ad3544b9ec52cf2c2	n/a	Heodo
2020-10-20	HAEQkt0HWSOM0FIar.exe	exe	be4dfe741f04b075ea4ae3c99e91ecb57b86b98b457f4f6be3dafb68cb2e912f	n/a	Heodo