URLhaus Database

You are currently viewing the URLhaus database entry for http://b.dowgmeb.com/gamexyz/30/0f5e8774150b7f0120a47909d07dc909.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2477994
URL: http://b.dowgmeb.com/gamexyz/30/0f5e8774150b7f0120a47909d07dc909.exe
URL Status:Offline
Host: b.dowgmeb.com
Date added:2022-12-21 04:14:10 UTC
Last online:2023-03-30 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2023-03-30 20:35:09 UTC to abuse{at}cloudflare[dot]com)
Takedown time:3 months, 9 days, 21 hours, 22 minutes Bad (down since 2023-03-31 01:37:36 UTC)
Tags:32 exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-03-22lijg.exeexe c7b1371cb821754d8da88223159e2641e94008695d1382edc4021a8502756b09Virustotal results 30.43% ManusCrypt
2023-03-10zhangmei.exeexe 9726b46bf929f2dc67ec966baaffadce8e57488c2c74ceaa8f5c51c15185491an/a ManusCrypt
2023-03-06zhangbo.exeexe f40792f040efbde807e78b3d2cd8ec084c9e12de121abbb262b0af9573538620Virustotal results 31.88% ManusCrypt
2023-02-22liuchao.exeexe 9a8d4f6c8f24d96d32ef8974ba8c96cc02d4fca7d46c3d1edf7e70d6027805f5n/aManusCrypt
2023-02-13guizhili.exeexe 40c003b791eb3f2899e5bb24bd854d1333361a6e9f12bd7ddd72ccc9d8f02ff7Virustotal results 12.68% 
2023-01-31yangfang.exeexe c0bd6de14f8c94e12634437610f4426f5e69d98861d23a3eab37016607e0234bn/a 
2023-01-06hzhang.exeexe 8fb3d9096ee919b35acdaf9c4992a6966df8a1170408bb86c36ac9fdc8cbe82dVirustotal results 7.35% ManusCrypt
2023-01-01tingtingliu.exeexe 912c0c0f956435bb7f7f733006516ea3ac9d99dd48e94909ff3b37437013082cn/a ManusCrypt
2022-12-23zhouj.exeexe dd2d563ddb78f2cc59968cb3b2cf8b86a408274d855b0b39de83f1a0f8e7e3fen/a 
2022-12-21zhangyong.exeexe 2ef4baecb516236a241bb85b0b513c30a28c55baf0b7df865bba4e3d1be3038dVirustotal results 70.42% ManusCrypt