URLhaus Database

You are currently viewing the URLhaus database entry for http://gdlaptops.com/vujl8p/4AwPPGc8/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1965958
URL: http://gdlaptops.com/vujl8p/4AwPPGc8/?i=1
URL Status:Offline
Host: gdlaptops.com
Date added:2022-01-11 11:17:07 UTC
Last online:2022-01-14 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-11 11:18:07 UTC to abuse{at}linode[dot]com)
Takedown time:2 days, 16 hours, 33 minutes Poor (down since 2022-01-14 03:51:37 UTC)
Tags:emotet link epoch4 heodo link redir-doc SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-110779465559.xlsxls d71f960574a42f577d5397574467ba2f556d0be9bec55b99c58946fab29ee994Virustotal results 10.91% Heodo
2022-01-118891320R.xlsxls 17832170dc965d40f1a4b7b5abf6dd5f8d131468c82c281388bf6f6967b77490Virustotal results 18.33%SilentBuilder
2022-01-11P17061313D.xlsxls b53a3f09073ba4c63f1634b32bc6328f22d9965ebc1384797a886d07959313fan/aSilentBuilder
2022-01-115684162621777.xlsxls 89224af568d4e29e7836c2961d33045490b337a9d5d40db852137e1f2dbbfbf9n/aSilentBuilder
2022-01-1150763207.xlsxls 7c1004454dd200c8e01f09e796c996a70ee951164ec546ae10634a41c1eb4d22Virustotal results 13.33%SilentBuilder
2022-01-1166767555.xlsxls 85b88ed279f103f41ae22a4adc9e432be6770a9d241fa124e7a62bf857995c8bVirustotal results 16.67%SilentBuilder
2022-01-11W960524050578.xlsxls 7550a2a99fe2768446351c653515cda693fc4978cdb437177efcc2133117efbcn/aSilentBuilder
2022-01-113805950153295679E.xlsxls c17cf152edefc6ce2ed0a5fa783f3bbfd6348b41a22f0da9cdd2722311ddfd62Virustotal results 13.33% Heodo
2022-01-11D5791496931513322356.xlsxls 6b28b200163448c423b79b68a70f8d07d925445d48edb48526d9dfdbf68d47c1n/aSilentBuilder
2022-01-11500495469E.xlsxls f218c6867a0a060d313d1592c39f606f2193f4d587a404b4372971a6344d0f16Virustotal results 16.67% SilentBuilder
2022-01-11L87285705S.xlsxls 25a3e55a8c505687b78fb62ff041db36ed577b17dbd1b9ebf4e8628b9cf7b18en/a SilentBuilder
2022-01-11O7043031088532.xlsxls 5d5960ceec11681300fcf26d61f3e8c614aa21a0eeec555c70a63c4049587756Virustotal results 11.86% Heodo
2022-01-11689956935867.xlsxls 24898aa5a8e0dbd0a57a3238d597dc260a2d27c3279b8b804d3e37ed6d9879can/a SilentBuilder
2022-01-11Q99200885.xlsxls 014fc0f35570524af821c5eba7c6efd66e8b973be290e6aefcc2b4ba1d56870an/a SilentBuilder