URLhaus Database

You are currently viewing the URLhaus database entry for http://gtdesign.ch/lexhandel/4hbVs2/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:10759
URL: http://gtdesign.ch/lexhandel/4hbVs2/
URL Status:Offline
Host: gtdesign.ch
Date added:2018-05-17 15:33:20 UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: JAMESWT_MHT
Abuse complaint sent (?):No
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-05-1961365.exeexe c05ff4d5338f85735e516751923e8219ed6bf8dec04e3e6693f57d36e0f110d6Virustotal results 21.21% Heodo
2018-05-1981141.exeexe 47731282f8435f8b8778a60fedd0360c576cd35b3c7324731f16ff4ce33f39ecVirustotal results 19.67% Heodo
2018-05-188958.exeexe 2d168ccecfd63436d11c7359fac2547488c0bb47cbf16b156cbbf3cf5c0f8a8eVirustotal results 33.33% Heodo
2018-05-188961.exeexe 6235ed3f114669884b821e04a21fd9747119384e58564df9c45cd1997b7d687aVirustotal results 22.73% Heodo
2018-05-1897337.exeexe 33401a66c4501571a7897d093486b5b6b71e2a62d4df2880758d3ef1413e0921Virustotal results 17.86% Heodo
2018-05-1747508.exeexe 803d01896954724054bd781f68a2b87f58a9cb67c8d36cd464f307bdaca38db1n/a Heodo