URLhaus Database

You are currently viewing the URLhaus database entry for https://kramedas.lt/wp-admin/E9Gciyc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	761542
URL:	https://kramedas.lt/wp-admin/E9Gciyc/
URL Status:	Offline
Host:	kramedas.lt
Date added:	2020-10-28 16:15:07 UTC
Last online:	2020-10-29 08:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-28 16:16:23 UTC to abuse{at}telia[dot]lt)
Takedown time:	15 hours, 45 minutes (down since 2020-10-29 08:01:35 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-29	oWzPHP9SDVrNdspVMY9q.exe	exe	8020d90122feca453072c1454dee0150b94e0288a4eec593bc44ad99e4fe8341	n/a	Heodo
2020-10-29	0VqzLVNGdr.exe	exe	d8f274dd8464c0f2dba3b4b4c9b630996b9d96510c0943a903508bc8fe1206e7	n/a	Heodo
2020-10-29	leuwlagM6dsS9AFBHB.exe	exe	444f011601be0a8399e451cf9a1b465a3eb950d8e3c20d8246b41a0460bdac26	n/a	Heodo
2020-10-29	F3a9fRPHjjUJZP.exe	exe	b5d7e7e05462c425ad3cb60d1676c205967663fd1795a9bd3aa2094daa397307	18.57%	Heodo
2020-10-29	QXkwh4Q.exe	exe	85c9ef580773918592b26743250de10a943979230b0dd97d3989ad78b45296c4	n/a	Heodo
2020-10-29	7POtstG6jAX2.exe	exe	41c7c4bb79ce1ad2da41eac2eb0662d6f3576003eca6075d7e7648f57f8d3efd	n/a	Heodo
2020-10-29	UA9Fjp.exe	exe	778cba81f1eb99689252e38ed0fb833f68e2806ffb9833e243c0357fec773849	n/a	Heodo
2020-10-29	jNnXmrqArKVWi6fj.exe	exe	6f45e72b8d9e1f161ab3191cc3579d91fdf537e9837215a8b84f5518645e1015	n/a	Heodo
2020-10-29	Jat8GdAeyrmlN.exe	exe	83be75fe800a832f5ef76a3ea583b66d0a2e49ed86a62a4d351b46aae07c9cd3	17.14%	Heodo
2020-10-29	zYg7qK.exe	exe	28e2fd71f3246960e71a47357d91280b76814779c61c187ec230d9c87a61014f	n/a	Heodo
2020-10-29	8.exe	exe	88a4ca3b01d679079e289a19d6cdbe8b00dfe076ac80a2771bddcb8d2ce0e452	n/a	Heodo
2020-10-29	xZ.exe	exe	8564a1e633adc98fe932acde6731970acee68c0c55bf20483e52c0f62cf383ca	n/a	Heodo
2020-10-29	zuHPICfxCT.exe	exe	014423666adb031b500f75070d12f2556fa61f8316b57df45862f3c9a5d2b83d	32.86%	Heodo
2020-10-29	Ei.exe	exe	a70f3b488b10265703fdccc79e8bb255334221f3f3223c1964b7a7ae06006747	33.33%	Heodo
2020-10-29	nUL6n1Mq0xtUBqnBfnU.exe	exe	9be5cdfc4624a42e982e0f37c97e67ec0c4459f7e0b22725c3a178e70881c638	n/a	Heodo
2020-10-29	5GRcK5.exe	exe	e6505139e84e6c4447041ce59d157c29bfecbc4a9cb1a166fb614b1398e41e35	n/a	Heodo
2020-10-29	64JXEzibcgy28.exe	exe	4dbeca0e2007e84dde5fa0094a31330ff13c01149a68e7f9060dc58c43a4e79e	n/a	Heodo
2020-10-29	G.exe	exe	33df71cb979a5a593900f54f9b8a1e5d3edfed831014ca820f538bb58a4c8fb4	n/a	Heodo
2020-10-29	n5qeMr.exe	exe	88af906128018bbaf57f4cd73759fcca0ad65ef059ed4ac3a922b1d3c8dcf11d	n/a	Heodo
2020-10-29	Cv.exe	exe	7db7376eafcf0065a386f63d46848b87d19616224d68a48318a26c11f24af528	n/a	Heodo
2020-10-29	qmxkyI8GlCMEYkhRT.exe	exe	98b3c84a4e7be647efbb23f2faeb0b1adcb8dc505394c2ceb9b11c7858e828a8	19.72%	Heodo
2020-10-29	XnddaMAxnuaM5t.exe	exe	b5174c2e6185f63ccb816308b44c855b5026243d4837da4444a6e2ec7d6327b6	18.57%	Heodo
2020-10-28	gmuHfVbCk.exe	exe	650a8e2fd8c6b14a2ff5e3de01c989ba70bf275edd10df0f904644858ff8ca87	18.31%	Heodo
2020-10-28	j8dwMXE.exe	exe	1569639356e7f86db95756343595aeb5b123324751909b71388aeb9a091bf4e0	n/a	Heodo
2020-10-28	RoSwElnD1qc5erjVw.exe	exe	e5a0bc39dc63303e3b66d420c609100fd2a4840dc70c139b5f6821666c0604f5	n/a	Heodo
2020-10-28	GJAsaEs.exe	exe	fc1fb49f0054db12c57ebf45194ee763056baec93fdf61eb62ae9f0a61ee8b42	16.90%	Heodo
2020-10-28	qxDlm8GDmo4.exe	exe	b7e73b1c24d95f7b0f781a145dc51ef880b53f71dccee3038f6793bd8eaca220	n/a	Heodo
2020-10-28	oC.exe	exe	39f7ade36b2d4386d515b1dbc0cecbd151ac87d6ab3bce6cfb4f092be05f97b8	n/a	Heodo
2020-10-28	rFnXyCGoWPH6I.exe	exe	cd6495a15e0fa1c10e0a5645b49032b0454fddf76a3c0b627a2b109db7b56fae	n/a	Heodo
2020-10-28	tTQUxuGBoos7Vr.exe	exe	fc7d8951e9bbc1554605e3145b22463e2b02279f3e452abb657c5a55742a03f5	n/a	Heodo
2020-10-28	DTPsT.exe	exe	b9badccf4cdeba9e9ac5afb7c9fe893ca6bfb6d518781622fe26c9ee5bd81bdb	n/a	Heodo
2020-10-28	UXoxW6vsi.exe	exe	4dd2d36fec815b5e0406c7593c9931076781aa1cd0d62689e8668146273585d2	17.14%	Heodo
2020-10-28	4u9WyKxCz.exe	exe	362f0a9c67c282a6f9c22d408e0e0fe2e8c3ec366260a6eb2c372af7d79fb194	n/a	Heodo
2020-10-28	WkSgvVBSolxcH895W.exe	exe	2001705f9ca514abe966fd7d92f42539f23e1d39ac110665bfcb8210034e9c0d	n/a	Heodo
2020-10-28	ItO8.exe	exe	0edafe82133bc337b85973f51fa1d315634f617550709f50303b705ddc7c85ed	n/a	Heodo
2020-10-28	PMxFFeq1j3axQIvXoID.exe	exe	cf25427999c319c4bbe04d3a3abf9371c0f6dd271ed5fb425bb25ebdc76851eb	n/a	Heodo
2020-10-28	m4eZY7W.exe	exe	ecc3c8b652d2048093a1f39e0fa5aa0bb1a13cb23cd2dde5fea94a9fea45240e	n/a	Heodo
2020-10-28	j8xuT.exe	exe	f00c2a81b9c0dd8c76ea4e0298b194f1e700cc34a25924c8bc2dd45e924446e1	n/a	Heodo
2020-10-28	BMdBwOWsRgJSxWIPr.exe	exe	0359890a689658220b1ac1df75cc10126dadfdc6f2493bf50f73a36752824895	n/a	Heodo
2020-10-28	Uh6qCe2n.exe	exe	cb5137689359d7ad936f9a298b330c4f3cb055518276571dde7b20d2a960302f	n/a	Heodo
2020-10-28	qHDKyKwlia.exe	exe	0da1c03bda8067095ec31bba8365536540dad23eb9b89ec5f1d61e86323afa92	22.54%	Heodo
2020-10-28	53ozs.exe	exe	61c5a449c89dfe2a774fed1ca65029ef4f92b4ad057ceb938d2c87c33573b5e3	n/a	Heodo
2020-10-28	cDnLLqxHlKkz.exe	exe	60b48c185c8bbcb3e19cccc8879cfff052f613d6c8d8762f6aa409c093a1b724	n/a	Heodo