URLhaus Database

You are currently viewing the URLhaus database entry for http://gzndfit.com/520/757459399_5/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1984620
URL: http://gzndfit.com/520/757459399_5/?i=1
URL Status:Offline
Host: gzndfit.com
Date added:2022-01-17 21:29:06 UTC
Last online:2022-09-19 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-17 21:30:09 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com,abuse{at}12321[dot]cn,abuse{at}alibaba-inc[dot]com)
Takedown time:8 months, 4 days, 5 hours, 7 minutes Bad (down since 2022-09-19 02:38:07 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-04-176639325695216.xlsdoc 56baee570223f111ea34ab7bf30aab64d96a7e8b9ef4dcafc6e0eb2851a35127n/a Heodo
2022-01-186639325695216.xlsxls 59cb2552a34b231acb92fcee121b13d662ca7f0049a70aae86fe312270f548e5n/a SilentBuilder
2022-01-183017508743.xlsxls a08e21a9646ed80fd78c00c66e67a24ae0fe62a3b0e7f1f8af0de9e7e5b36fefn/a SilentBuilder
2022-01-18419924887040937928.xlsxls 42086786392d71f57268416d14275638e2955c797babcbd5ec21b7eed6703652n/a Heodo
2022-01-188005476796.xlsxls 35be5819e56e15ca1bc78bb61ba08a38d392461405142da722d534c2f87e55f5n/a Heodo
2022-01-18763937848385648.xlsxls 26b4ee804e6a317a802f1c370398c6629f516477378bf94cad94413237e05c34n/a SilentBuilder
2022-01-181829486718599305.xlsxls ef7820c85bc6c3df2447132bbed914ed101aeb7baf6e6edf25026375f9df3980n/a Heodo
2022-01-18184369190617150113.xlsxls a35ccc0277367ef2660f2eb7b2c5702b33e04ecabb9e9dc69f0e089d31b24abfn/a SilentBuilder
2022-01-180092049254547303.xlsxls ebe7c1008e98277cac317211c9fb8db1371f256f9c344209fba11039fcfc1576n/a SilentBuilder
2022-01-18025332188865321.xlsxls fa10d4c1be08f4e283bdaaa42a1d800768187162e2d90bb494fa4367dcd494adn/aSilentBuilder
2022-01-1812168145637682.xlsxls 0971b78a1fa100002ec0c3cd1d18af109e56369c4a52b4445f10c30ea8ade7fcn/a SilentBuilder
2022-01-184880250592606961.xlsxls 0462fb1b5a8a7784bb9b1dc90185c6b031d6dbc1ca9256bc59a34bab1c87ab49n/a SilentBuilder
2022-01-18405952026283011570.xlsxls fef50521b3110b6efcd1210d87cffcc0912c24b496de185199e0ccd5b5a5c88en/a SilentBuilder
2022-01-1897373683192.xlsxls 4ad545641ce10800bcd2a75f03ae32b78d9fce1feb504c5353da50438959e3b0n/a SilentBuilder
2022-01-1856605234681559.xlsxls c61718c0dc7f0d5c5f66455826fd222262b081893085b7a528d3217b0bc6316dn/a SilentBuilder
2022-01-188392984811802.xlsxls 32eaa4ec7dce492883fce25e20778b8c6b36c2d269d3e55f713977f4ab0618b8n/a SilentBuilder
2022-01-18083920199710836.xlsxls bc1172240f277c311e80e1e9149ebab58d1870bc0a9e94f3bd898a025495be3en/a SilentBuilder
2022-01-180940489376.xlsxls e07cb07d8a2b296d0f506a805e5721233820e0f8d4c9d552940f71fca7be7a8cn/a SilentBuilder
2022-01-18364075037494299960.xlsxls e64f53d96cf4624502733103a45f67cc0635e35e624610cbec57ea9844d43203n/a Heodo
2022-01-18282120813134.xlsxls 9b0a59dcae7eca85fa1088f429b85a4a491f79207a68cb7cb8925ef9d95f8ba4n/a SilentBuilder
2022-01-185143967235.xlsxls e83230dd5995b3cb0477ab358fc13505cbe4ef8a103ee5eafc8763545ed64d8en/a Heodo
2022-01-180571979644899203.xlsxls 6627edac0e7bcc8f7615afe466232eeb380497a02666fed395e330d866dba379n/a SilentBuilder
2022-01-182326280753491.xlsxls ba5cec050921142c70a9666d32ed2689badaae0afbf6105f2c3a570638634d84n/a SilentBuilder
2022-01-18665263469297.xlsxls 853bf53e1de361a8c42c16b3a74dd673f990ca41f7f540ab98004a9a39e60725n/a SilentBuilder
2022-01-18600810381146468.xlsxls 321d80f76297387803acdb4fd4e6a4dc6073d515955445752390767e95884b67n/a SilentBuilder
2022-01-182348857240729103.xlsxls b933c6fc1ce4b9df0d65fae6724a3053c183cbdf921053873252181bf50ed7a0n/aSilentBuilder
2022-01-1853621177592068.xlsxls b5abaa61ee5a2795808e2dc90c87c149ea7927be1431f1595fb1061e045b8657n/a SilentBuilder
2022-01-175309860563546174649.xlsxls b9cf7499338b7ce6d879b0093cddd093f329e54f080335bc602f3b30f055978an/a SilentBuilder
2022-01-170954457808372.xlsxls 5edfa18d54052256d62cd14523eee828be94dbd74b83296ece55b13122e94c56Virustotal results 13.56%SilentBuilder
2022-01-1744715652436.xlsxls 6c45d08768b929c1e9e51c06e8e11e0f679c9a66a33415a427417ee1a3391ee0n/a Heodo
2022-01-172556128731326783.xlsxls 5feb30d01fb35d5fde34eb531e533bbfe6870e26612f2b397214636aed65988dn/aHeodo
2022-01-176930993222183923276.xlsxls ab2bf047df74757d07005fc84ec15055dd7ac5a47a765b547e5b5764da471e85n/a SilentBuilder
2022-01-1797132427188.xlsxls b57b7792f2d74379892499f9a23972aed0b7206a9041b5e3b0720b2a683c0d53n/aHeodo
2022-01-17WZXrx_838701050.xlsxls 3bffdc24f84177cd3c0cb5d7a9eed6da2b8f55d4b121f155de26ca172706742an/aHeodo
2022-01-17mwekt_44695918.xlsxls d786500c90a058e4f9fb3611f21c3c3854c9dd23c9a6925a21bcfd850cb8aa1cn/aHeodo
2022-01-17qfvydkf107960.xlsxls 8976395bbc9ade87e7ecaf509860c9a460299dba5418b0c536818a7d14d5941fn/a SilentBuilder
2022-01-17757459399_5.xlsxls f3cf80c42c0fc25395425187c33a80f2f8f435f7ec49b72e2aaad39383daaa91n/a Heodo