URLhaus Database

You are currently viewing the URLhaus database entry for http://gestionycobranzas.com/2/task.vbs which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3609414
URL: http://gestionycobranzas.com/2/task.vbs
URL Status:flame Online (spreading malware for 9 months, 7 days, 20 hours, 9 minutes)
Host: gestionycobranzas.com
Date added:2025-08-22 19:56:11 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Riordz
Abuse complaint sent (?): Yes (2025-08-22 19:57:12 UTC to abuse{at}metaspinner[dot]net,info{at}metaspinner[dot]net)
Tags:opendir RemcosRAT link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-05-27task.vbsunknown 1232b4d0263b92835dbdef759d51c25e9fbec8743b6cb7fcb1916ac8491ce7f5n/a 
2026-05-26task.vbsunknown a931338ce349a84428c5257e7b96df8e659f3755bb292d5a48ca7697fbc3e25en/a 
2026-05-22task.vbsunknown 23afbf9e324dc8b89896484af3da23ac5968e3fc2386053c55185d569774efb9n/a 
2026-05-19task.vbsunknown 4e2e8e0a8b684320c425999d2ee4a19a1a0f8e216c4a1c8f9a255f421f224ca2n/a 
2026-05-13task.vbsunknown 5aa47d9abc41ca91399c2e1100db7bf49ee2857af2b021651b43da96c520063en/a 
2026-05-12task.vbsunknown c3c7ece914139afb8189e5d842ad0d176171a74cf5b7221e16e22abb2e5a698fn/a 
2026-05-11task.vbsunknown 7b38a81f8d06068340fd3b109be0ec5f8e87012c0f0090e9c4c86fcca20957c0n/a 
2025-08-27task.vbstxt 74c1c627c31397e518687493b8a5af14b839decdb3227810335967cdd4697cacn/a RemcosRAT
2025-08-27task.vbstxt 045d2444fe26511003ddfb15e92697fb6f0278754817448d12525d65e75f1fdcVirustotal results 25.81%RemcosRAT
2025-08-26task.vbstxt 770b35baa103302f231c6be89e96d55294801a04aee02693842aa745f6dce621n/aRemcosRAT
2025-08-25task.vbstxt 5867427e2a69435285a061f4cc882429558b4f7a2c0569219e74fdb7d68ec877n/aRemcosRAT
2025-08-25task.vbstxt 83b9a76e6395ef08f25390d50a3e1ca363b320325b4f978a8abde5ca2150c436n/a RemcosRAT
2025-08-23task.vbstxt a763e16f8a534c9c9ccd5ffca2c48fffa70ca02122983885922d3ad0a1063defn/a
2025-08-22task.vbstxt ed971bcfc5a9eebfbecc9aab050ffb9e6d9cfe38a72fd6f74cfec39cbd31475fn/aRemcosRAT