URLhaus Database

You are currently viewing the URLhaus database entry for https://gobo25cl.top/build.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2733777
URL: https://gobo25cl.top/build.exe
URL Status:Offline
Host: gobo25cl.top
Date added:2023-11-23 07:05:09 UTC
Last online:2023-11-23 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2023-11-23 07:06:07 UTC to abuse{at}cloudflare[dot]com)
Takedown time:1 day, 1 hours, 15 minutes Poor (down since 2023-11-24 08:21:07 UTC)
Tags:exe Vidar link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-11-24n/aexe b0e0d9c9ae3e8db362571abb271d5f117a002263a49d395821dd63618a4f3394n/a 
2023-11-23n/aexe 661cd67cd8861ffb4403ef053ecf4842d89e9a25ca9fd98c749131d9d57b27eaVirustotal results 45.83% Vidar
2023-11-23n/aexe 4d8ba0b18e5802b1082d6280641fb4fbb627b47bdf127bb3a365ce739825c896Virustotal results 43.06% 
2023-11-23n/aexe 5688e4325f1ebf2a37404cdba80a7fcd8ef0f879d56699f04f396419c4a708ebVirustotal results 45.83% Vidar
2023-11-23n/aexe 8b274137b01aa787637187c8feebf492950a5e652786475b7c344e73e24aa612Virustotal results 47.22% Vidar
2023-11-23n/aexe 050997795368951d33db12913ca5626194f0ae1aec1725998558d79559db6b14Virustotal results 43.06%Vidar