URLhaus Database

You are currently viewing the URLhaus database entry for http://oftalmovilaplana.com/wp-includes/wfKu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	972189
URL:	http://oftalmovilaplana.com/wp-includes/wfKu/
URL Status:	Offline
Host:	oftalmovilaplana.com
Date added:	2021-01-20 10:34:04 UTC
Last online:	2021-02-01 09:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	waga_tw
Abuse complaint sent (?):	Yes (2021-01-20 10:36:07 UTC to abuse{at}cdmon[dot]com)
Takedown time:	11 days, 23 hours, 23 minutes (down since 2021-02-01 09:59:51 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2021-01-20	MLPGhTYVeeoxAGyUV2tyd.dll	dll	01e14d7d7d88ef53d4f9443170bff682dc9c72f13451c18c9032a5e440975e98	33.33%	Heodo
2021-01-20	fTO.dll	dll	fb535457767b8de3b7d88b414c728c1427a03935bd99eabd9120c3ea98120d5e	n/a	Heodo
2021-01-20	mKeyWzhhRRRA0zDMM3PM.dll	dll	c4e0efbf94f7bbbdc710938e42049b016e1de7913e322c48db2dbf0000dd421e	44.93%	Heodo
2021-01-20	wEzov0l6XmJxcJG9.dll	dll	76098df8f34147b504a5f874e8fac44aac33fe84c72b429b20f9b52bae33f67f	n/a	Heodo
2021-01-20	SOZBxBdwvsPQCLSg.dll	dll	4bee36e62802b5166442a6ce43b898dd5f9e66bd8525ca8c0003ad53f53b257c	n/a	Heodo
2021-01-20	GNj4At12a96D.dll	dll	0004695007339858b805ac916ffe6a923113fb51fa6c88a1d5ac02f2b09c62ad	n/a	Heodo
2021-01-20	SBo8iGQDi0KGmwszk6GkK.dll	dll	60f29cbdd43c858980316fa4cf094c09a5bed06ec4bdbbee0e9c3e04697b836a	n/a	Heodo
2021-01-20	KSTD6.dll	dll	8ab553544934dc6365b0b8efc1636866247b5029830ba075fcf1376fc8c016ee	n/a	Heodo
2021-01-20	dlRsqSBHBQxND.dll	dll	7066c37c66f28c492b4cfe233118141a2b1b1d7191bd9ada2318dc446f750b7f	n/a	Heodo
2021-01-20	gJSGyADAwquuwptyz6.dll	dll	532b0153b412fae9f5a661051af1052c6aeb815fef96c427390a0c83ea488586	n/a	Heodo
2021-01-20	xsdM.dll	dll	c01c4bcb6b46969bad5dad6dd363044e564355c4cf8f11f241ff470d88e33871	39.13%	Heodo
2021-01-20	u4uWyjtSW0KRB5.dll	dll	d7865ee84680217b5cc31da5569ba48ca0b55614bf85a9a3ef42eae4267778bc	n/a	Heodo
2021-01-20	AtbA6MxtMMJFNkw.dll	dll	1773d96b644e135e41f3f4dda956daf4c542459a5ce0f16808dbedec378f79e2	39.13%	Heodo
2021-01-20	oTqMfEWemPtzT0oRo.dll	dll	bfd05afa42eb7b8ee1744f49a9bbc20c970013f0abf1f9dc0742949ee2db0f50	39.71%	Heodo
2021-01-20	mpFc5lFzweuOyIERe0.dll	dll	b469ffdc07099864769f375fec04abddf0a8ab9d7aa716cf35baa29331dd5696	39.71%	Heodo
2021-01-20	tpcLywK9.dll	dll	5f8fb29410c24ec54fa04ecaac7a595044e8a0c87d687156cbe6cb76f83b4544	n/a	Heodo
2021-01-20	dTZ0xFJpvhbwAUopz.dll	dll	ab71e48dde634880c4e6315ba22c94cb45f59800f5b84aa019cc5a6e05bd4d1f	n/a	Heodo
2021-01-20	DwvvhEZKj1H9mIKI.dll	dll	d52837043ff5729b21b553ba44775b6b1a7e7eda77e6f8277c90add9b400f13b	37.68%	Heodo
2021-01-20	s4zR0vjgC7mkBkAJ.dll	dll	63e4cbc6c22363dc154d94cf41ad88bba51e31ddf58b28e1fd7b90837cdc2276	36.23%	Heodo
2021-01-20	n4oP7V0Gy6muY8vI.dll	dll	af984edb077fbfad7640b6bc0b4ccb23fc8291ee861de63bdc071be1a89c9c2c	n/a	Heodo
2021-01-20	7C6zcpvX545SxUP.dll	dll	af84206f994449d201c6640f3db0dae992bf399b6fbe1f859dd4cda1d74f0865	36.23%	Heodo
2021-01-20	4Js3kzJ2nGgxENwi7KE.dll	dll	05e6673f2586636c8626b1601aaaab71f1f259ec8caa065e302dcbf4e3f6a4a6	n/a	Heodo
2021-01-20	BE5avbW.dll	dll	57dabfea008108c1cdc78ffd6033fe33578a0906504c73e612b3b8b407942f62	n/a	Heodo
2021-01-20	WAXNPKr5NYI1nplPV.dll	dll	f1b42bfac35dff2096c7242796a4dbcfdb192660a1a755a38a4a389325b38f7c	n/a	Heodo
2021-01-20	zruMJHYn.dll	dll	438863afc18f24609d82e0be123cd1c5925e71c75d0f8f850b4da26b6b11d272	n/a	Heodo
2021-01-20	9CTOD.dll	dll	a94583bbbe3f7ca9993305896e49c8e76e498ba618e27930282327bdd793bc5a	35.29%	Heodo
2021-01-20	kmheppokQ7L.dll	dll	70cbc2a12bffef72af108050325f0627a07fcdfe2a2251e287db6526716aba34	31.82%	Heodo
2021-01-20	6dNrP2D6.dll	dll	fbc1d2c8aacf9164d1a002137e94d0afbcfe3670b2715c0c3596d2f38761b941	n/a	Heodo
2021-01-20	zrqgBnQXMx.dll	dll	9698b4f5583d29a40589af606a2f54a7dea724224543d889d231422c807b9ff3	n/a	Heodo
2021-01-20	gpXTPSjyGIQq9PpI1Wy.dll	dll	8c7c1d3b2640749e69d2a301987c2f3868e5cdd46daf9c893321607a24a3cf9f	n/a	Heodo
2021-01-20	7AVDeI54t7.dll	dll	e0319fd1f9a667d92acb7fa07f9d8480d483f1203ac786ec1477b2825b4e96a3	n/a	Heodo
2021-01-20	l9rLzBrmYVCKW.dll	dll	6d58153d9725b7efb72cd960b7817b6ef2925e441a0206fd22c87ce26d24e873	32.35%	Heodo
2021-01-20	umSA7RM1KpddYU295aV.dll	dll	0e4e96562ab652823f3371c549282f6deb8d0ddcb86126c85c1fbe3d6898b2ed	n/a	Heodo
2021-01-20	j6qJ2050u4Ue9.dll	dll	daea18a31d0e73fe38f46630c710f3071abdbf2bd568d9aaf822b923aa1a27e0	n/a	Heodo
2021-01-20	ceplhFDW65SARd0oXO6c.dll	dll	b112083a31e6c6270c25a371a8eba9c300874eca10ee525d02eff4e65819a972	n/a	Heodo
2021-01-20	QN3sh.dll	dll	ad67bcc57a67d58fad8caea769c36c752c13dde2cd5a1e28a8c055fd1b4d7a55	32.35%	Heodo
2021-01-20	JA2PYm0qO0NMQ.dll	dll	c8943905c1e44650615123cc9393fcfd7e2b48cdd723aba1a99d5e79d26af056	n/a	Heodo
2021-01-20	0.dll	dll	368dc6f286c95e9cbad90c0d09a28eede75c17c1df81cffb4f3daa6811772a54	n/a
2021-01-20	5.dll	dll	82e9d4724a452afb6530cf749708e6ae75208ae1108b95ebc4d8b0ae4f10cf56	n/a	Heodo
2021-01-20	QqXX.dll	dll	2875d7c88746bd513e4939ab6ee07b5f92d1b7c8db8a1e6e795dd053d517f480	n/a	Heodo
2021-01-20	lgcfcsim.dll	dll	c414449075a9ac22f671c3c90be00873b1abacd3fe298d05559ea3af0a37aa4e	n/a	Heodo