URLhaus Database

You are currently viewing the URLhaus database entry for https://game.vlexor.com/links14/WUSs/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:938246
URL: https://game.vlexor.com/links14/WUSs/
URL Status:Offline
Host: game.vlexor.com
Date added:2020-12-22 12:45:06 UTC
Last online:2020-12-26 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-22 12:46:13 UTC to abuse{at}ukservers[dot]com)
Takedown time:3 days, 12 hours, 36 minutes Bad (down since 2020-12-26 01:23:00 UTC)
Tags:emotet link epoch2 exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-25wsVnoxhKs.dlldll 8458a164282e119e90ccc725eb3399924cc36164bc5c169808cee8921a44cba9Virustotal results 71.01% Heodo
2020-12-22E.dlldll 628f3752ec5c9318da907073d7dd028e8db339dbca45e376f7c5bd3a8938a3f8Virustotal results 31.88% Heodo
2020-12-22876YqtRnAcnp57V2d.dlldll b9163cd7f243e034a1344590b763a65a91622bff77d988d608694083fde60398n/a Heodo
2020-12-22k7ES.dlldll abaa279e73bb4a97c14cfc7534a23dd747262d1a0aa44a8b67b5905b6087ba1an/a Heodo
2020-12-22S0.dlldll 60f6cdc6b17b8e4b19f49ed21eb31a4c80ca9d0c8f2f67dd78bac20b5f445317n/a Heodo