URLhaus Database

You are currently viewing the URLhaus database entry for https://airrlist.com/wp-includes/VBG/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:763976
URL: https://airrlist.com/wp-includes/VBG/
URL Status:Offline
Host: airrlist.com
Date added:2020-10-29 06:49:08 UTC
Last online:2020-10-30 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 06:50:25 UTC to abuse{at}a2hosting[dot]com)
Takedown time:1 day, 10 hours, 59 minutes Poor (down since 2020-10-30 17:49:26 UTC)
Tags:emotet link epoch3 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29o.exeexe a45c7cf59584773bbe49cf6147609eeff0c3b6486f1c93757d3140436d4498c0Virustotal results 15.28% Heodo
2020-10-29jrwt2Q0.exeexe d3515cc4a7a7a7b4189bd39a26c899c87a0a7e7381098a050b1dec16c112d9edn/aHeodo
2020-10-294qksCZHJBR0KXgjFD2.exeexe 0af598149dc67965c57b9c72c91dc8765855526500a758f0b8f61278df4688fan/aHeodo
2020-10-29qyMzGkp05MOdwe5UilF.exeexe 5a8e7968ad4704a7a6f245789ac9dba882f795c8b6155ecfb3b3677d17d58d80n/a Heodo
2020-10-29bYebW.exeexe 5970335307fb8574b79d3acb739d8d9c4c48e5f614f237fe15fb8ea9b4bf9052n/a Heodo
2020-10-299fk.exeexe 4aa36856d4f23b2c793c34a3466b2b8e6d2366ecbd96d659f51f72ac1f393365n/a Heodo
2020-10-29NNuqi3OYm.exeexe 8e067d967dc88294755a7d27c9d23f2b59969ae7ccfe367dddc7423f53c1a6dbn/a Heodo
2020-10-29u8i.exeexe 135b081c9277cc453fc7697630b95628e1e937fc059f317dd91cc9aa2d307b44n/a Heodo
2020-10-2927ybzC2tG4L.exeexe fbbea9ee8d82dbb6451fbb943f990bcb896eca1179e755bfb9eaf91527987d42n/a Heodo
2020-10-29KOq7F.exeexe 428a2eb610c7efcde6bfa16f5487a761537e0fa7c768d4d3110a02a1e41705c2n/aHeodo
2020-10-29L2CEhh.exeexe 4a8b0a177a23ef7bf2ccfcfbf6bd3d66b7e46d3ac79ef096b625accd2f8dbf7cn/aHeodo
2020-10-29qPHHoaBW8wsusZ.exeexe e0889e438161fc56ede7d419bfdecefe914c8f68d677d858d915ec9deadda7d0n/a Heodo
2020-10-29MlSHtuv.exeexe d6ee48f754d988bf4a7827436ba3e22a05b1d33a5098380078ea41216c37682en/aHeodo
2020-10-29Camk2t6Pvcn3pMM.exeexe 54d16c4f6cbb12030b1f6972dcb7c17458d056f5f82ac227b66995acadbdbfdfVirustotal results 19.72%Heodo
2020-10-29azV.exeexe e4056bfd6924fda67223a088b6c30b936ba256405dc5935cb8d74df0fac6a5ddn/a Heodo
2020-10-29eRA30GVH.exeexe 961313c6a57bd8115dddba8d2d69ee93fbc78e2072f02810ee9c19ced0d855dfn/a Heodo
2020-10-29BbyctPu8ETPxLPt9Us5.exeexe 763491834b817b28c7f3e8c8ccb3df311499f6aef1078d8fdc400311d29d7a50n/a Heodo
2020-10-29HqePw4tliucdDGy.exeexe ec561837a4d8f3ca263e86f1174289bc594e1ca55ddfe2662033cb4f8f563406n/a Heodo
2020-10-293C2cOvcXzz83WkkCZ3.exeexe 11c99fc9765e21e77847323540261f45b8ae0b300c41dacc31f6837bb3206570n/a Heodo