URLhaus Database

You are currently viewing the URLhaus database entry for https://universallearndirect.com/wp-includes/9VCAoTS/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	726397
URL:	https://universallearndirect.com/wp-includes/9VCAoTS/
URL Status:	Offline
Host:	universallearndirect.com
Date added:	2020-10-21 00:58:14 UTC
Last online:	2020-10-28 21:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-21 01:00:18 UTC to abuse{at}liquidweb[dot]com)
Takedown time:	7 days, 20 hours, 22 minutes (down since 2020-10-28 21:22:40 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-21	Y8iQbzEUMRffaOgB2.exe	exe	78f0e4bcf05633f25c5c55707773fc6911ae560bb36439e71854811e97f621d4	20.97%	Heodo
2020-10-21	JTQYHYFU.exe	exe	ef076381c145ccad7fa91c1f1e2d16a1f62daa043c70f230087ca4baaf1470cd	n/a	Heodo
2020-10-21	QS.exe	exe	347641f98e597a2f44cc767f440e695ce9ddd43cfae9fdf0f410cf5ca58838cc	n/a	Heodo
2020-10-21	cxWxZnw1J.exe	exe	4d6bbc46106158a3e8d3e1bed344277fe4b30ddad0a2a45d3b9acbef51a18f18	n/a	Heodo
2020-10-21	zT.exe	exe	98ebc33736c4ba62dc0b79f1d46969304905863800367bba4d0409f5475802fd	n/a	Heodo
2020-10-21	TIhJaSto88pS834RoUW.exe	exe	ef01ded9bce45b76c1086ec8d837f73d1f9bf4fd490c37a855cc7481b22a96f9	n/a	Heodo
2020-10-21	kuKvquYbsh.exe	exe	7ff7612d69263abed8b6662b138e5654bc3385acbe3050be9927cc31500fcf1a	n/a	Heodo
2020-10-21	OAo3WkTO.exe	exe	835f972d1ccdadbf15d58fce6ae7d471841b1a816efc498c8d60c714e4f45d54	n/a	Heodo
2020-10-21	2RmzwVtPSlb.exe	exe	aa1d0ed7939560774e93b2373cc1f795e3755b074e6e94687c71416a589fba52	n/a	Heodo
2020-10-21	hqgLOWaRRvY07.exe	exe	46553ba94ca748e05fbdf4b927178c4d36581836ac846e2cc8476d02a2e911e2	n/a	Heodo
2020-10-21	fHPuJdHbGG7.exe	exe	dad31cd4864dbede004afc0b73cdcf8ba497cb21bacf911e53b8c03d54e73bcb	n/a	Heodo
2020-10-21	PNGLKKA52OqvCkui7KPx.exe	exe	f08ab5bc58a95fa561571fb40d9a090f5abef4165a9343ae72b7be9cbac3dfba	n/a	Heodo
2020-10-21	a6tz9oDeb.exe	exe	0a4fccfec78c1742023129b8c3e3f82373a90b277efe0dd0e6d385577fd3d47f	n/a	Heodo
2020-10-21	xg3V.exe	exe	c05bae67315094b566741c5524b41bf97556edfcaafc9b125f4ad2d2b13bdcfc	n/a	Heodo
2020-10-21	VAMBDAoWLEDac.exe	exe	7bb82bd6496371098a9991bd487e4fe5026b96f6a7e6ada4490b52f9735d661a	n/a	Heodo
2020-10-21	rBQ6wB.exe	exe	afecb35d7a619f9480cda2bf477215f8105fcc59dc4cf932751a11c900f3afdf	n/a	Heodo
2020-10-21	tJH1PHwuu66weOLJb.exe	exe	16830cca2d2f32ba814e1646df6c3cef03e64760ec50384084f1578d2e8f83ca	n/a	Heodo
2020-10-21	BoK5NfcMZnYhuiYh8T.exe	exe	2a7e3641a54a0f647d8a1adb8c6373933f0c6edf09c944709682ab6bf113428c	n/a	Heodo
2020-10-21	x.exe	exe	f2b1c66e693379331ae26c94b4edee41cea93455fc82fa6835a4c3bba8e80af9	n/a	Heodo
2020-10-21	7tVDhf.exe	exe	dbef44cc8cf984fe52a83b0e57d4a4f8e6d21fa6e4e20ab0f43939b0c1ca0872	n/a	Heodo
2020-10-21	Yhx20l.exe	exe	44cce2064546798f1689d6f5c1296b521d34a38dfed2f8b6970d242932be19ba	n/a	Heodo
2020-10-21	lh.exe	exe	c8c0355515441d06ed8ffdfacece145f68903c131b229d1ce3ad5e391d857062	n/a	Heodo
2020-10-21	3Iy3p17aKdpz3.exe	exe	1d13d1474c2f220284eaeb7c32d7167da16af3ce1e4d7353a210ded82cefddc6	n/a	Heodo
2020-10-21	Xs8clL9mE.exe	exe	5f9260ec6c4998264a149199a04046715bcbcf2193919f62bd14811cc600542b	n/a	Heodo
2020-10-21	1VyyMuXmagvcIx1MCh.exe	exe	5da6dc89903a23904e6e5ae0f546efc90c71b0cd52fb2cf30958a8f7c8407ded	n/a	Heodo
2020-10-21	BLVNOY.exe	exe	7076898d5b8b184212880c76053d39cabd695096e1a186f7d9ee6acf191c7f44	n/a	Heodo
2020-10-21	pkAZjVjEiwo.exe	exe	17c712efbfbb4d71f5dc0dbb114a24f32c697db09289be75fca7f6f5a3491868	n/a	Heodo
2020-10-21	WBO6dgOCeBF.exe	exe	f6433df80bfd43bea37228b89709f06967b4ca3bfa3f565c5051366c51b62bb6	n/a	Heodo
2020-10-21	KSfTtPYGIIwzFs9ryAd.exe	exe	b62866104a1b3b8698c679b5037f4ff2a47777ad7083c10b0e6c45ecf7f19198	n/a	Heodo