URLhaus Database

You are currently viewing the URLhaus database entry for http://overwatchboostpro.com/e46a70d24f4162901a5dfbc139b40d49/GXgck/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	290966
URL:	http://overwatchboostpro.com/e46a70d24f4162901a5dfbc139b40d49/GXgck/
URL Status:	Offline
Host:	overwatchboostpro.com
Date added:	2020-01-17 13:57:15 UTC
Last online:	2020-01-28 20:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (Ticket DCU002253367 created on 2020-01-17 13:58:08 UTC)
Takedown time:	11 days, 6 hours, 34 minutes (down since 2020-01-28 20:32:38 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-18	6qhcrJvS9YOOffiwjvuV.exe	exe	ab5dc331127be64fb5120501c03de22a819a9ad88d8e17a8cc04e709900e4f6e	26.47%	Heodo
2020-01-18	NhnaZHMgQ8C.exe	exe	dcb01fdf8ba270d3dd024fd60a28b21f0dba6ba8624dba1207e867a13085de7e	n/a	Heodo
2020-01-18	NzfqsAhABr7YSRfvQh.exe	exe	e305d29476a1431019e8f7b2d960c06cac5075c903de497c78a27f83d6492ec8	15.28%	Heodo
2020-01-18	9ddRCLyrM0TEN5g6qi.exe	exe	7bf06e09cb28c2e0adef99dc5de4a4d013f88bba7ac5123ed6e9eeac9654b3d6	n/a	Heodo
2020-01-18	JgkfFN9.exe	exe	557c537aefac72854cac0ad0272868e6d1ebcacdf39c62ae3207c9cf7ce55c49	9.86%	Heodo
2020-01-18	WozugsD.exe	exe	82eb2e501d6897a8e0ea4dbf8afd728a9ea224b4c5430a79d85850e7d1715f71	9.86%	Heodo
2020-01-18	vn5tAhLHtg8DTbpobx.exe	exe	10274ec59899011e808ab76acba60b1e3caeb34a7007da3d7257e74908a92a10	13.89%	Heodo
2020-01-18	73ZROGmCwpyP9v8Fkfr4.exe	exe	9014bc628866289238c56cd878887dbe36519995525174a8c2521fd1e7de0b65	8.33%	Heodo
2020-01-18	WM5z67T18L.exe	exe	e685c407341b3175562635b2e2f468d8a7d53e461cc975919006a3776f709d30	9.72%	Heodo
2020-01-17	DNOUXBE2hnDG.exe	exe	0c6a5cfd8f4fedddbe98130c44c7066f8d5408be546c3e9e65c32bfa96768c12	n/a	Heodo
2020-01-17	MCwaAh18Ft.exe	exe	d05c7d06f5f5977410f4952f01af56abeb59d85cdbb27aa0b280c2f41e75a81e	12.50%	Heodo
2020-01-17	65B76ww9pHTxV.exe	exe	ece39bdaf683389216d2cd9247055e7e9a9d73615c625f22c2db1d0a8e2ad8ba	n/a	Heodo
2020-01-17	7e3pv.exe	exe	5057702a905c8d2827b557d15963b3e32bcab7e10e31dcb5dee44ad3e6aa5a42	n/a	Heodo
2020-01-17	QWAsBW9nWVZxh.exe	exe	3a7ce179da319b9a159a62aa9fd2d9731ffef5c524365b9587e517f39b09a8a3	15.07%	Heodo
2020-01-17	tUwJVBQ6quDh9c5Z.exe	exe	d27f9d46694bb9913eae4c536027be6599a3e9ecb4da9299fa29ea23b840b2de	14.08%	Heodo
2020-01-17	bIabPtOz8I9yoqvAlSYZ.exe	exe	b1c2e968bcf93056e3d058a67b3626af8edd7ccb7f2f12514dcb0514f9d5f9d6	n/a	Heodo
2020-01-17	XPZ5toL2.exe	exe	759ec750149ade2ff4fcd6b5402cfe65eb2240a3a0d58008fb6e2b69059324e7	9.72%	Heodo
2020-01-17	yvXWrpICXh.exe	exe	6ea6cf37c6d286bafedb71ebb0f41466ef2ec901bd67e2a58f248a8d6f1a3076	n/a	Heodo