URLhaus Database

You are currently viewing the URLhaus database entry for https://zhidong.store/wp-content/BDY/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	770458
URL:	https://zhidong.store/wp-content/BDY/
URL Status:	Offline
Host:	zhidong.store
Date added:	2020-10-30 18:48:06 UTC
Last online:	2020-10-31 03:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-30 18:50:37 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com,abuse{at}12321[dot]cn,abuse{at}alibaba-inc[dot]com)
Takedown time:	8 hours, 30 minutes (down since 2020-10-31 03:21:08 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-31	5CEmO4aUosyc.exe	exe	3d23ba14e4ad8f3c679c421f98aa407878f567ff67cc93f41e3c265c56b010c9	n/a	Heodo
2020-10-31	2GJ.exe	exe	6d636fa2e60720a67358910481c15822aa4f75913b22a6bf82ac204073b0f042	n/a	Heodo
2020-10-31	W169LgszaWo9762On.exe	exe	69f034e6fa5f6c5e1965163a646bcdb608b3c7c82921044aa91b4400928347b8	n/a	Heodo
2020-10-31	BesUwf4fglVgtk.exe	exe	ef5063f628a4913bd91536a593972406182c49a9576058b00b1ec26aceec4f7e	39.44%	Heodo
2020-10-31	hdC8LWj1HEh6z1.exe	exe	6a0afe3da861312a457b7c208675e9dae1f2ca096956208e4ff57c265eb107d7	n/a	Heodo
2020-10-31	cUozhgeOIIb5Wk.exe	exe	d49d08f631437df6409bf51a6397fabb5e48c6af2c752bbf1de136c6c9e14f76	n/a	Heodo
2020-10-31	vZQmYu0cCXnBJxCLD.exe	exe	e50b8c74692580ca4f8dd346e12be4dae7c4054ecce6d7025581bdbbdece95c9	n/a	Heodo
2020-10-31	Cs4A.exe	exe	5decc7eb3840ac53b123255498159292fc6ecdb00b883030ed30820f257c35ad	n/a	Heodo
2020-10-31	zg0vI6ItuC9gQ4tZ.exe	exe	08547cdf1abdefbf282a7324a7775dc5170c6881cdc471c294270ef51676efe4	n/a	Heodo
2020-10-30	HMML6u6pGL5JVi.exe	exe	ba2e533fdb5b0f90c6567ec4b03a7e19e08206ff516ff63aa1ace2a3be3ea03d	n/a	Heodo
2020-10-30	SIJZEhE.exe	exe	4b9f9b676e02f28e1e3be05aedd157743297fa054f8a3117f8eeb9f16ad858a5	n/a	Heodo
2020-10-30	SJQTAwox6QyO.exe	exe	049d38b5f37cbb720cf5900dc7ea198f089cb9159c0f44ceb3f13696ceffdebc	n/a	Heodo
2020-10-30	lwVBceRGlp0k9.exe	exe	4ea248c74b86d3ee78bf4918fa8ceb844d110eaaea9128ab31d15c8e4731ac5c	n/a	Heodo
2020-10-30	0hBcAsL8I.exe	exe	0bf74a68bcb7fd13dea3b5342a8ba5664882759b0679dc28c8d53d803634b392	n/a	Heodo
2020-10-30	n59uj.exe	exe	7e796d433396a2f77f1c250693d6c238bab15570e3937cb0e9b1fce4ebb9fdee	n/a	Heodo
2020-10-30	lSjmpJWhJWj.exe	exe	4280ffcb3a808078f523d35e3bbe265763ee443702a7984b0769040427061afa	n/a	Heodo
2020-10-30	V9ktNPWnmwRu8DbQ4DtKS.exe	exe	f60adacbc7ea1c9172869ebe1371d57d070be1128b58cc646c659585db178792	n/a	Heodo
2020-10-30	pBCZ3WxWENK.exe	exe	c68d850b6e4aee1943044bee59f17a8d1b6d96fd38cd45f7bbb37d55c08fb071	34.72%	Heodo
2020-10-30	5dkjIXNN.exe	exe	2070a7c5ac09eea977bb9972f1c281635cd4695c6e2ae75120c31ded8fe6c96f	n/a	Heodo
2020-10-30	CjtGs7BaqJKhv.exe	exe	c6aa247c15da2822ea4ed029693799c119830f0baa67dcd99092c4fa73bf0e0c	n/a	Heodo
2020-10-30	D9NT6L.exe	exe	3e69aac6f85b954f99223c38c462d20dcfeca479208ab49556173ee0fb18f3fb	33.33%	Heodo
2020-10-30	elNciNbvey8nDC2.exe	exe	9f9768e3376a5539e53be05d8695304a5f3ce92a049a93dfc2957845da6d99f2	n/a	Heodo
2020-10-30	OcJ.exe	exe	e44f56352fb0901bb4103448005bc05c6bb887e2fdf90bc9fca26e1cfd3a4c1f	29.17%	Heodo
2020-10-30	y98PM0aHBnV.exe	exe	5e6849993cde76ded203649a44474011c2e7d08b1eabc030bc737d4254f5181c	27.78%	Heodo
2020-10-30	XXq8W9y3ciUwZmCMImA.exe	exe	2a420c0eaf12f6c8a66bab8f798ee753e2e56194ce0ad604de83400b7a8a34b1	n/a	Heodo