URLhaus Database

You are currently viewing the URLhaus database entry for https://cashyinvestment.org/wp-content/21dIZ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	972190
URL:	https://cashyinvestment.org/wp-content/21dIZ/
URL Status:	Offline
Host:	cashyinvestment.org
Date added:	2021-01-20 10:34:04 UTC
Last online:	2021-04-20 16:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	waga_tw
Abuse complaint sent (?):	Yes (2021-01-20 10:36:13 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:	3 months, 0 days, 6 hours, 6 minutes (down since 2021-04-20 16:42:55 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2021-01-22	fM.dll	dll	8a87e9ca0011dced9b29abff8ffa438815ed675b7c9fcef3e546109a08f2ab45	n/a	Heodo
2021-01-20	ODzbwFD7Asyr.dll	dll	01e14d7d7d88ef53d4f9443170bff682dc9c72f13451c18c9032a5e440975e98	33.33%	Heodo
2021-01-20	7CaYpY1.dll	dll	e19117931b1938dbeb0b1c09750a32615f8af1b97ecb3a20e808ccef8746376f	43.48%	Heodo
2021-01-20	DHhUUjyQ.dll	dll	d7c84e6615433efba8b0f2192201a45d94d1dfdbbd36eb47227dc6f6f34d08db	44.93%	Heodo
2021-01-20	OSD6vA9Z7Gx.dll	dll	95360a882eb8221112ea9b87e2c0347d83971d62d893fa5ea14173d3328371c1	40.58%	Heodo
2021-01-20	8N2P.dll	dll	23aa6cfe716710333f30ba5ca0ea360170c8be374155475184546a8fd8847acd	n/a	Heodo
2021-01-20	NB.dll	dll	db327b9f020765bf059a31abd7fc69e9f39ce3a9cddc5c46795c68d98847e4b5	41.18%	Heodo
2021-01-20	8hKMrA9d9n.dll	dll	2c1b968fb906eba2f94483debdc1c041092ab195338a1e90e92f7fce29415c6a	38.81%	Heodo
2021-01-20	acoWWFzFyrOZtxtF.dll	dll	e1323a5909027e91d43c87b9d5147bb08b780803e4c0b61d69a43fd8f2a2cdd1	39.71%	Heodo
2021-01-20	4Jjxnf7gX31DOKvgaDmu.dll	dll	0895d11e06766b068ec57e6e32ae1ba249a5de75484419bf95e32e064d4b4b65	n/a	Heodo
2021-01-20	G2MEPD5bSXpTwVnj.dll	dll	b66666ced7327bb893e1deb40c7b3cc37908d7fe79b0cb696c0f470b60995c00	39.71%	Heodo
2021-01-20	BpqigpElNsBtuxxo9I.dll	dll	1136177c59ef8ccb8759d7469bdba393a4e1a3f860fbec08290f06b9e8508f9e	n/a	Heodo
2021-01-20	gltyePIz.dll	dll	6496922745fad9215550c027c54da1a5f649b9252844ee2abe531d0d08910b46	39.71%	Heodo
2021-01-20	WgKio8.dll	dll	6813b3c7e389b41fe168d9017d6f6f9908b3575e1522f2e33458cb430f9c51c2	n/a	Heodo
2021-01-20	ZPbqvTF10Z9sFT.dll	dll	b358ee6c47ccc63b1125bb038cc7c5346ea9a8161040c5467e54f176eeb51ee6	n/a	Heodo
2021-01-20	zpVAbomK1QHYC1S7.dll	dll	2f816817ada72c38f991ee96215b86db04279a9ce93064901835b09ef2e2dbe9	36.23%	Heodo
2021-01-20	5r1oESSQg0dPQMOFi.dll	dll	0f365ab6ce1b3f1b092ccfb06e11cdbe211d6c35822d5d58f3404c2f0c0545a0	37.68%	Heodo
2021-01-20	ieTGDsJ3HZRkuBGGGs.dll	dll	0828ee246ea17ac34eddc48562bd3908cfad4fe475dbd4551f7745c4939f7861	36.23%	Heodo
2021-01-20	SZo3Jx8EiwuF52yFuX9.dll	dll	9a6f379bdc5fbe39830e897dfe815adf600e13b37459c029bc70144a799e8edf	n/a	Heodo
2021-01-20	dElT1Q3SWBprjstg9h1.dll	dll	944543dd6d6fd25e9b5a464bfb81d22208b8e0e3795793e8853dfc3be2e92b56	n/a	Heodo
2021-01-20	JHXdBbU.dll	dll	10f8d7fb4a9f5bd132ed48c28e38f526913b0f366a48ff13ab2c2c6076bdcf5d	34.78%	Heodo
2021-01-20	25ruZsQkk3bMEFO6nB.dll	dll	d1a6d73b5ba3008e7e7aafa5b1bf38e6415dd54a925d848c4af4294444733d07	n/a	Heodo
2021-01-20	bKqR0h7hFvoxG92CKtwtY.dll	dll	5ebd632e762a1e29534ea3f6b87f87849f880b9992c3ce333203817befe224ba	n/a	Heodo
2021-01-20	PYM36hdmyiD2pg82NZGHq.dll	dll	f32089a34aef95e2b6fa2ad3e7939a95af3fd5760e9c157ed45c893db8e8189d	n/a	Heodo
2021-01-20	Oi9S.dll	dll	f0fedad1c52b8f38afcba766bdb31e26935765c5c1263ccec250cbad42e5a0c5	n/a	Heodo
2021-01-20	JtYPMqj4.dll	dll	12d50d052cf2d1b118148cff5923443ccec84ab4f055d3279830625370b36316	33.33%	Heodo
2021-01-20	W9lNr.dll	dll	4aa16f4faa9d8d64dc41c575de2fa0eeacbd9b86b703652418c8ea88d9a2cbbe	n/a	Heodo
2021-01-20	dMy56BSwvdgdsALP7LOpd.dll	dll	07ae019e25e26ae34e580afcaee27e8b1a9fa6ccbc57c559850bf447e44c94bb	33.33%	Heodo
2021-01-20	SAFmE3JV7OZRykkHbluu.dll	dll	d0650a4a01da9dd21eaaa7f65e8ad3be30643937519e52b1b8852f73971ca019	n/a	Heodo
2021-01-20	BOYqOwHCYy4pbl3z2JeDP.dll	dll	a84bc6b4f53aa38aeac04a644969c25af2e0472dd756b8c0cbdfd81b011e5f00	n/a	Heodo
2021-01-20	q2IHrGJgcq3yugIL8Vr.dll	dll	26ea1b157ff1650816473a4e377e11c853c10f6bcce65d89a0526fa58d6de8d5	31.88%	Heodo
2021-01-20	YutEF.dll	dll	c177a092e1143c04057a3a17dd074ef7543bc49a4dd7d9871fa5e911e3429de2	n/a	Heodo
2021-01-20	58cF1y0j9jJS.dll	dll	b9b1542bb4945cc579358e16fce9ed5df8d547b3a5cc35efa7b4145d8c82cbdf	n/a	Heodo
2021-01-20	fHuJZVFZDhO.dll	dll	35c71d3112a6b5ac20ee7ef1e3b1dbfebb9b7f6df8656f198e26c1a0293c6008	n/a	Heodo
2021-01-20	pEgYL.dll	dll	850d2995646c0037501a6ccbfaf284d259b936adf6184b265477c982a0f9ab3b	31.25%	Heodo
2021-01-20	uWJX0HPUSStiK2.dll	dll	be0e841a868de6390fcf0445e8bc9ba9683185bbda4d128d030c8f5cfa25cee5	n/a	Heodo
2021-01-20	awsI43GLvKK5S26.dll	dll	367ffd93609d51e4f289bc1da0619bf174525c14962e722a46e06e70e90913e7	n/a	Heodo
2021-01-20	kcy1MUSmz5xHHTjnXHF.dll	dll	e065ad588bbc27429f826097550fd02802b9d544a6bfa13f3e88c58ccd8e03e7	n/a	Heodo
2021-01-20	VXCXKLp18RyET.dll	dll	b40fa22ec03cd81cb331be6a227dbbc2b570ca0dc5a5e2b884937f3b8dbbc547	n/a	Heodo