URLhaus Database

You are currently viewing the URLhaus database entry for http://gk725.com/6dn/ekeh/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	293820
URL:	http://gk725.com/6dn/ekeh/
URL Status:	Offline
Host:	gk725.com
Date added:	2020-01-21 17:18:37 UTC
Last online:	2020-01-27 07:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-01-21 17:20:11 UTC to xieyong{at}sudu[dot]cn)
Takedown time:	5 days, 13 hours, 40 minutes (down since 2020-01-27 07:01:03 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-01-23	mZ8KAQ3za5dJ4T.exe	exe	6f9ac546b28aa4c8668810700b80b51ae46f830437e78164c70ff3253b6573e8	8.33%	Heodo
2020-01-23	4hpoS7eYarTP.exe	exe	26f2cfc63ef326fa623c5ca5c1748c70bca1665a98cda42e12b2a3b9c03247dd	n/a	Heodo
2020-01-23	XDmihNTQHPPW0jAGr.exe	exe	db55420a0899458d9030d12d37f58961be96bb0616092efbba23c987d4239a36	8.45%	Heodo
2020-01-23	jIup8OY5EMjAxnBO.exe	exe	ec336acb546da281b6f65e1de5ca2c153b32c6699ad7a9477764daef4bb5758c	7.04%	Heodo
2020-01-23	lRafx9PFy0z.exe	exe	bdebef1ebb62d2c49db57d820b3804f472893d99e81390e940b319ff073330b0	13.70%	Heodo
2020-01-23	u85evikCL.exe	exe	8191e198e8613863e44b6b6f11a7b799bcbfdf0d4981385838818ba4a5af678c	12.50%	Heodo
2020-01-23	roHfKghF.exe	exe	82b96bef3a5f9b6e13a9efa359c752292e9c1961cbc7ca996fbc0d0b96c57681	14.49%	Heodo
2020-01-23	Oof.exe	exe	f0e4dc790d7074211d7730b79c482a307418ffedf576e29abd6b288269e76dfe	15.49%	Heodo
2020-01-23	APzeDU6.exe	exe	2628f40b54102395837c26d89ac124b28ee954073b705f81d4dd58f41f87fdfb	16.90%	Heodo
2020-01-23	L56qdBbsD.exe	exe	ad88b55f420f27561100c434a417cb50c6148b3071c149414659667beaf07bcc	18.06%	Heodo
2020-01-23	fZov4MGDFkSRlHYQ.exe	exe	4a3457718f6b14c397d1a66c8a1256cc834349180945a0fefa8145977084d268	13.70%	Heodo
2020-01-23	sn.exe	exe	9808e71b8c9698ce2b92033d0d3ff7e61ace74a403b2be36f51fffd7025f6211	22.22%	Heodo
2020-01-23	KG1RBFj.exe	exe	8a0b8b9993b26cdef31577f92dcade2f3422b08c32e858c608259f48b0bdafa4	18.06%	Heodo
2020-01-23	sJu6.exe	exe	389cf8b02584f5ebc0dff4416d141a3a7159c8559018faf72f66109016de0ffa	13.89%	Heodo
2020-01-23	XJYAxqzVA.exe	exe	e2f254a6b730b5ae77afe10256e85219b38c89099e1bd0da32cefd383ae1eac3	12.50%	Heodo
2020-01-23	cIBJdvmcEAwzMFlqr.exe	exe	b4b6bb885f838be7fab46e10eedd56e6324422d962f44f57db6b521bfa81e825	9.86%	Heodo
2020-01-23	gVRvaFkr.exe	exe	e4a54ca1ddb1074eb43e4c58084a8c8b3e0054055f6b14789614d4bdabb17005	8.57%	Heodo
2020-01-22	HT1P7q7pfqWPNU.exe	exe	711f2e1aa2ae99b85d9f663005b50db39ea52ed2f88c805c5657c8f5370ad584	8.33%	Heodo
2020-01-22	Y66oLD01UdZ1nYrZ8.exe	exe	593fd9ec97b950303cbc73e71fdcd29d8a2f6c035d88702845ddee3a7a8f6f3b	13.70%	Heodo
2020-01-22	VpXoJ8rOVaxPlNJ.exe	exe	5006e7228e0480948e4eef65736b01b1b7b453326beb65edcf371947a76b25b5	12.50%	Heodo
2020-01-22	UqTjHyH4Kp9hcXFXZ.exe	exe	f886daa84f3051b095d758f14a9064d8ed89f27c1ab825d9939f9ad5877fb2a8	12.33%	Heodo
2020-01-22	3e.exe	exe	148579c72faab821c16181a5cb7a620b3ca5c83105f2e10dfe0e52e2b3e62a83	n/a	Heodo
2020-01-22	XbWi16JJD3CZzhbs8x.exe	exe	d4760eb755f89812b7448b6eb1cb7cc03cf5d9f18981eb3e82fcff8128bae7dc	12.50%	Heodo
2020-01-22	Od.exe	exe	c344de2e69ee9e6c009776f4c89cc44902bd81fff89a6566f62702b24a10d9d6	9.86%	Heodo
2020-01-22	5eewAjLmtzRLpPoZJ4.exe	exe	d1ea5cf15f3964d528dc6e9957d7a4fc4077dc9ae6a05c51937b14bd5b06894c	n/a	Heodo
2020-01-22	NDPbkY27q.exe	exe	69d5add7e6f88e2824e61ec5db03ad9f4aa16142a3a8e03024a07838a9bab408	12.33%	Heodo
2020-01-22	OBkq74D.exe	exe	f0f1cf8874dcd7bd4935b79479a20acc1d56ac1acf8f01e88da472ac488f4c3e	15.28%	Heodo
2020-01-22	ZSGE1pgPd3A9oQjk.exe	exe	409bf8b2e84741784965335394134420ccdc610adddbe257325b0dc7d183eafd	11.11%	Heodo
2020-01-22	FmUJzCpCC4j.exe	exe	956d7e8100190d66c59038d57dd77e4a97957543d4d0e971218da694fcb52b9f	n/a	Heodo
2020-01-22	lHzC6toj1N09P.exe	exe	bc14b5fa88a0aa8ccd1de5e957bc0dc13162832fd2e84610b7e5e915e9eebad1	n/a	Heodo
2020-01-22	J6tZVW.exe	exe	c126859368a0fe751b21ec121b4e06b83910721751ca3cc64d2801345c03aa91	n/a	Heodo
2020-01-22	aVkMSAIz7fd3K.exe	exe	92c9380d4cbab34dfcd104199012ef5112833be7479d186521ffbafb76508a41	n/a	Heodo
2020-01-22	TGBCJoUldMm1Uor.exe	exe	e8482377d43022b28130359f4b5a6d6a6fe536b7e0efda77948e8d2ce769fcb2	19.44%	Heodo
2020-01-22	I2Yz1Qq.exe	exe	b0f720c848a7d2b036ad1f22c33ed933226e25852208f444ac5487841fa8d155	n/a	Heodo
2020-01-22	h2hmc.exe	exe	b54aa451ca7548b6a6251fef2294afe7c5e98a10b35e32b65fd2c94e4c646b6c	n/a	Heodo
2020-01-22	h3yQ.exe	exe	9038628accaea929b5fa3234127a6d88de2535898a8dddab1ab53255487a7b3b	n/a	Heodo
2020-01-22	uYOkG.exe	exe	61aab3805844710f1cec63c5b5a958613fa8c8d21559febd3359c3f897845599	14.08%	Heodo
2020-01-22	4.exe	exe	12b8f799bf07f73dff2a2209bf688045d1a99c64abbadec2314d8df645b16419	14.08%	Heodo
2020-01-21	cyqF9Xwn.exe	exe	5ab261cd8f91b48c5e8b69e661446d177b5526c40567e3cd4f4f6eb0ebd65826	14.08%	Heodo
2020-01-21	KkoCKq2SrJoWBStd.exe	exe	fa1812ee565510bbdbf4c35360dfce8daa2d78f56473d6392ac39f25c73f7d14	7.04%	Heodo
2020-01-21	N8r6H5vUsvMMAWW.exe	exe	7b378f38ef21bec1a6f9b2ca5b4bea1886c7f3c766dec11761cfc364b671a1a0	8.33%	Heodo
2020-01-21	N8r6H5vUsvMMAWW.exe	exe	7b378f38ef21bec1a6f9b2ca5b4bea1886c7f3c766dec11761cfc364b671a1a0	8.33%	Heodo
2020-01-21	vk2QAJj48eOT.exe	exe	582265e317be12e129d4b0daa1cfa9245bab4c89ee9fd98f47f6795b67df49bc	n/a	Heodo
2020-01-21	jf152whp64eGQ.exe	exe	8bd5dde0ee7d70a78145785f12e1ae5473e702b552daacf492e043621b1bce0f	n/a	Heodo
2020-01-21	H6dXWUIc.exe	exe	9a1798342bed2a4f276a83d84f5b35a539ac40b63a0454857a9a8b6c51dd99f9	9.86%	Heodo
2020-01-21	4Rcc.exe	exe	346d87deeed7513888ef7897b6dc4fe464ef159ceb95c5f51eb77d871f6c41c2	10.00%	Heodo