URLhaus Database

You are currently viewing the URLhaus database entry for http://gfrance.tv/wp-includes/lm/kbCEnrIUCgpvCNQXiBtDCONdbFsZwU/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:200741
URL: http://gfrance.tv/wp-includes/lm/kbCEnrIUCgpvCNQXiBtDCONdbFsZwU/
URL Status:Offline
Host: gfrance.tv
Date added:2019-05-23 12:14:05 UTC
Last online:2019-06-06 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-23 12:16:03 UTC to abuse{at}ovh[dot]net)
Takedown time:14 days, 5 hours, 50 minutes Bad (down since 2019-06-06 18:06:56 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-06-0687473283318.docdoc 7eaaf8ce0632c9ad4fe9acb2b4a97da59085ee7ef6c842b13f7d35084b6b9036Virustotal results 66.67%Heodo
2019-05-245548882696_24_maj_2019.docdoc e951c3db59142c02ebeefc5506d08626bb57dfde2b846c9afd21ce31bc2cbe8eVirustotal results 21.31%Heodo
2019-05-244615358345_PL.docdoc 19a47d51e4179d4ba17b2592ec473c113dd25e9194e79e0992400bb493b562d1Virustotal results 20.34% 
2019-05-2491993386947_PL.docdoc 6cf30c19b4b4b6b860f5f238ab5e4784ad470107ea400d93b1a3d7bba9c6b138n/a Heodo
2019-05-2421168799761_24_maj_2019.docdoc 211df751fd87340eea09845904a838f194633ac0190df93c098b2fde1958c3ban/a Heodo
2019-05-2474131353672_PL_24_maj_2019.docdoc 4cccd050234aa4a04cf4400b4b0fdcb22ede36bc42dbf830c0a03853dce5fd48n/a Heodo
2019-05-2448595625731_PL.docdoc c98570dd42ddfe2a661f00bf35195135a66d87cd253fba9a11fa793e5a48deeeVirustotal results 29.51% Heodo
2019-05-2499349526356_24_maj_2019.docdoc 41aea7ecbe2ffb931889169b5df96e12db742d0100f7bc6b303e047788b987b7Virustotal results 30.00% Heodo
2019-05-24182338447781_PL_24_maj_2019.docdoc 7ffed07a52fcf7c172394b8dde5219ddfd505cf3aff363c9e0c5b9a4f6c9763fn/a Heodo
2019-05-24997598131479_PL.docdoc 4cc5e10c94d138330aa3096a394f3e40b9a204b6fa87682e84cb9975f62febb6n/a Heodo
2019-05-245168436662_PL.docdoc d4211a69cc7c1942c7e7ab2152089f9c3517b1ba70bbf284beee7d190aff342cVirustotal results 26.67% Heodo
2019-05-2444853536484_24_maj_2019.docdoc 98489fc90d217fce40c906524b68d9861626676214aa7b2326ed006cf457dd48n/a Heodo
2019-05-24768633127122_PL_24_maj_2019.docdoc 7e4542261715f61983de47f8c4a3f498250bc09c63aa837919f1d3577f479121n/a Heodo
2019-05-242851842946_24_maj_2019.docdoc 5db74e43b8d281c631464832214e4aee7570008a74e6e32530387690521a414en/a Heodo
2019-05-2478913834453_24_maj_2019.docdoc 45ee87070c8898d0d2fb3d96c510ec733d06e7912f608722fb241b9d7e61d10bVirustotal results 28.33% Heodo
2019-05-2393288473363_PL.docdoc a0949ee3caa2c2972e977489141b19b96e6e4a4dd21c4698426eb228313faa93Virustotal results 32.79% 
2019-05-233994298717.docdoc 5fe2b89bfcde3ff1c271102a1325ad4ee8d12901e3b2282376e024824a955e29Virustotal results 30.51% Heodo
2019-05-237778389543_24_maj_2019.docdoc de57f730405232bb5b5e07648b500baf63a676fbe42ca58b7dacfcd627873440Virustotal results 22.03% Heodo
2019-05-23142532639819_PL_24_maj_2019.docdoc c68e0427f3052c3256d56e0126a73e34e67c1c8c50b9e37487453084b79bf176Virustotal results 18.03% Heodo
2019-05-23147162323253_PL_24_maj_2019.docdoc 04a6585af9f7a9ae90fb0fc3509ae9baaba60aed6a83295c28bd8d97291ed2e8Virustotal results 22.03% Heodo
2019-05-23875276369925_23_maj_2019.docdoc a2cb13a6e2fb1f290d52f4e0dbb57286832cfce1f8f7d77225d1d23c9b1b45fbVirustotal results 20.34% Heodo
2019-05-237439568812_PL_23_maj_2019.docdoc 174fcc89344f9868e3d4cda50ab3c9f204b82fdb2cd41226b72d68bee270660an/a Heodo
2019-05-239513388312_PL_23_maj_2019.docdoc a2f7be05173d2188d3e3ef994e8e41812050737cf5648697ab507b042adb99a0Virustotal results 18.03% Heodo
2019-05-23236721793371_PL_23_maj_2019.docdoc 7f74ef7a47cc278b40c37aa4b344faeb5c4dd9cd826dc2cf06ad2b489664b39aVirustotal results 17.24%Heodo
2019-05-232616472279.docdoc ecdf34d04afdfe1985381229b6b1c25ae473d4702cf03015fc10b779cce49006Virustotal results 18.64% Heodo
2019-05-237323558713_PL.docdoc 99c6ca598f9da46e12b3945f74d8cd4f7be32a3e9a66d9b67cff45eaa2295965Virustotal results 20.00% Heodo
2019-05-23778513577538_23_maj_2019.docdoc d02dcc9468c80bf888294ece3755ca8b9d727e5645ce96a8efca314c80925ccfVirustotal results 18.33% Heodo
2019-05-23229688932922_23_maj_2019.docdoc d72e4a0feca275ab74555ea876a3d74fba6b5b9ad1b1fc3864f51fa776fa4798n/a Heodo
2019-05-23545146214545_PL.docdoc 1afd12fda74676381f591b7e2dd6dd2510e603308504a73c880ab6990bd49d32Virustotal results 16.67% Heodo
2019-05-2323558456776_23_maj_2019.docdoc 2875510d0044c059a8f554aa8401cacd69f806a46205632a11c02096ecb6a0e8Virustotal results 18.33% 
2019-05-231613451517_23_maj_2019.docdoc 969d9d99703b0eb8347dd3e6b85f55f1d8f6be79f7f42064f5904ad1bd2301dbVirustotal results 15.52% 
2019-05-2386486332819.docdoc 720d9323f66abad23ddc1a0274f13ada330575fa1566fc87c81faad0983b2a72Virustotal results 16.67% 
2019-05-2343752552846.docdoc 286d190e59b9fea171a55e2d99f2c4c5a66560c2e919199a67a6a960f5acd079Virustotal results 16.95% Heodo
2019-05-235467756759.docdoc 86a50c8e8f5d300f3731ebdce8b98be02696e2ff1d7e979abd873354bfd87006Virustotal results 16.67% 
2019-05-235722922746_PL.docdoc 4e82b20ca98af17b4361fe688bce991cd907e25c139b9da39340fd758a6bd22bVirustotal results 15.00% Heodo
2019-05-235144525191_23_maj_2019.docdoc 173f2078c872504912c5878cac192ab6e7aee9da8f2b76505a7c201eec5af2f2Virustotal results 13.79% Heodo