URLhaus Database

You are currently viewing the URLhaus database entry for http://gzty.co/cgi-bin/swift/c2atnd8/g6c9418957375ab1byb6zhb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:428409
URL: http://gzty.co/cgi-bin/swift/c2atnd8/g6c9418957375ab1byb6zhb/
URL Status:Offline
Host: gzty.co
Date added:2020-08-10 15:01:16 UTC
Last online:2020-08-25 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-10 15:02:12 UTC to abuse{at}liquidweb[dot]com)
Takedown time:15 days, 5 hours, 4 minutes Bad (down since 2020-08-25 20:07:02 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-12REP_OA0416672165AF.docdoc 07f64c8aec1996d43278e64312bffbce594dc49544f0ff5061e38547c8fc3667Virustotal results 30.00%Heodo
2020-08-12QOZ_080120_CXE_081220.docdoc 99b13de6fb8ce378cd26647578fde7062c466b689a93ea660291b9cb8be2880aVirustotal results 30.00%Heodo
2020-08-12OJ0846716562UK.docdoc ac38a17c79443f9efb6c3c9ec810744944877100bf33dbdc16487cf13181db55Virustotal results 27.27%Heodo
2020-08-12FILE_AWQ_080120_JWJ_081220.docdoc 2a604113da3d540e958f07fceaefe7c0bf0b84863093e22b91a9bacea6c0fd55Virustotal results 30.00%Heodo
2020-08-12PO_08122020EX.docdoc 8db2620df21632425eca4080115e0d96c75ee3a4f172e6d343f909f331b2fa3eVirustotal results 26.67%Heodo
2020-08-1239668849710373984.docdoc ae3f98c31cbf01b3809feeb57990ae8270686b4e716f2c8971f8408ca1676532Virustotal results 27.87%Heodo
2020-08-12DIF_080120_HGT_081220.docdoc beb08012d1a1eaa82766653d073df1c7d7579e39012001170ce6ffdd3225e1b7Virustotal results 28.33%Heodo
2020-08-12INV_VVX_080120_IVD_081220.docdoc 6b825da15adc2cc05d82bcea3118130263ba2dc1d411e6486cbf37e6d317cc6dVirustotal results 28.81%Heodo
2020-08-1202478547.docdoc 7eba5b17df94761ce65d93039d81735e0a1525f6b3244704a023df60dd04c17en/aHeodo
2020-08-12FILE_PO_08122020EX.docdoc a49ab97b27c7f0f7ee4f915c0ca8e6293878a8cfe83d1cabbb9e94e4059c10f4Virustotal results 28.33%Heodo
2020-08-12INV_XUTWX6BO4AMQOB.docdoc 16d2a267cba033c59963d01757e9800048ac1fbcf7cb53595dad21ee5bb027c6Virustotal results 27.12%Heodo
2020-08-12DOC_K9YIRC3LC.docdoc 9f355154b3f108769ec0855431cb69c5172916d78b07a8d79ff6da2f49371b6aVirustotal results 28.33%Heodo
2020-08-12BAL_I5IKWR76GL3X5.docdoc 81c27d10e37bd700d8cee11eba8d01d2bda91b7743083fa7a4e51f3f169ef0c5Virustotal results 28.81%Heodo
2020-08-12DOC_694428928728165252.docdoc de169cf40f36b18f3d015ce68ae4472c46aad34f8d9e71f76e658fbbdc74a6d4Virustotal results 29.82%Heodo
2020-08-12INV_168273121.docdoc fe14ae5d76ac1ccafc67f474efe315000dadae344444a44c9200e04e94ebbdadVirustotal results 28.81%Heodo
2020-08-12INV_84824456.docdoc 05fb55b118852bdde2c76754d2d2b2700accc08481280cc2309ab985aeb86c06Virustotal results 51.72%Heodo
2020-08-12REP_LD9601919220LF.docdoc 9492fa4f34cceef83ff1e6f77bc428777aba7ae617b195a3e6a06d84e5889b1eVirustotal results 53.33%Heodo
2020-08-12BAL_PO_08122020EX.docdoc 45597077ea44b6912767ecc3863c6a7eb9a1acb80e69d92deb7f49b5cf9f476bVirustotal results 50.85%Heodo
2020-08-12INV_VG3878860781XX.docdoc 6f973501cc2dece992aa2f959f8e352e424e96f06abb300b4bed8bcf2ab4bf34Virustotal results 51.67%Heodo
2020-08-12INV_9270316611045794453.docdoc 1d2096f4adcba717670858b98912615f7bc86bd95ef6b3117901aa4ae6383d4dVirustotal results 53.33%Heodo
2020-08-12REP_PO_08122020EX.docdoc 75e0692474be7d8066516c6ccb1904530d6540d82228ca27d52c6c8c5f806264Virustotal results 52.54%Heodo
2020-08-12ZQ_JCU_080120_RKD_081220.docdoc e95c19b3173d0c69d60efb950859b2ffd3020235efd6c47ffebddf950a0edf52n/aHeodo
2020-08-12BAL_IS4586769159BH.docdoc 8f78d106bc2f3e79349aabe3d812859febc3039e06dced8aa67b29e2421a9d31Virustotal results 54.24%Heodo
2020-08-12381701937346700.docdoc 7575d9ebd2153fdfbf4c1626ec4769e8cdef40ea8e2990670f1cc5cba71a2e7eVirustotal results 51.67%Heodo
2020-08-12PO_08122020EX.docdoc da9f6e2ae0ff87abb8b7d2716ddba59950db9ac472fcbc968f391b5f6b742fbcVirustotal results 52.46%Heodo
2020-08-12DOC_PO_08122020EX.docdoc 358176ae69d49cbdc29ce5f8965efe9952253949970d9de4e8f09f46c488e6ecVirustotal results 50.85%Heodo
2020-08-12S8N8WWRU917.docdoc 5d38e73c8e461773d7bd09fd69760d3e0335e51cd3df39676a4c2af22343c43cVirustotal results 51.67%Heodo
2020-08-12DOC_PO_08122020EX.docdoc f5e067c9ce4ac6b6dca42fbb099d867e403cc3e6590dbe9d8650b588cbb48637Virustotal results 50.82%Heodo
2020-08-11XVM_080120_ZGZ_081220.docdoc a168ae2638094d7d55b0a57e6e660b333c1f15cd8ba280a443943901bffa4b69Virustotal results 50.00%Heodo
2020-08-11FILE_ONB_080120_ZZV_081220.docdoc cafe9be1769c83fbeb348a49f0c1e0512df75007fbca4689516ce442fa72b54eVirustotal results 51.67%Heodo
2020-08-11BAL_YXTKQA5H.docdoc 6ef92d63f441bea978f148ae6b93fd26d8feb4716042101e28ebacd3101f6eb1Virustotal results 51.67%Heodo
2020-08-11BAL_093615925712.docdoc 1aac25866333e7f77dc237137353a0a65ce189972d87658229eae96e3037bc68Virustotal results 51.72%Heodo
2020-08-11BAL_V1N06B2W77SJI5.docdoc 1b12d2490da123684664ff9e627dddc8f23b3a666af8331bf3cc409949f91f31Virustotal results 50.00%Heodo
2020-08-11A_YA0258144425EH.docdoc 2adc586ea7a59715aa3226b8b211a8d39fdc6b40691c30e3a96962d2c041688dVirustotal results 52.54%Heodo
2020-08-11DOC_MN95U3PLHJ.docdoc ddcfa6beac3f79149c8786ca9af44062331f6222f46f5ccfb1429ff859308dacn/aHeodo
2020-08-11DOC_YSL_080120_CRY_081120.docdoc 94c28a7e7c13fa9e3b40e7c211578b41258479f78ce82fa4f03c44a3761481d4Virustotal results 48.28%Heodo
2020-08-11FILE_GHW_080120_BTC_081120.docdoc 4e1398a541baa1807c7737004b16fa72d75d9e64ad0b772b4d78be698725b753Virustotal results 50.00%Heodo
2020-08-11INV_DA7688642791GN.docdoc 544045a4220133bbe6fba0dc73c65a21782329649d1c4ab92cf883cc1dbae677n/aHeodo
2020-08-11PO_08112020EX.docdoc 3f9ed468a85787c4bf29a327c525e87f3ac3fed5b4079b2958f3617ef3d3a1dfVirustotal results 40.00%Heodo
2020-08-112427773612843859411.docdoc a03e77d6b4faef46a289dc88b0b06b626ad4c4050559791a8b7ed7d3846fac75Virustotal results 40.00%Heodo
2020-08-11ONX_080120_DXQ_081120.docdoc 6c042835d406a08afd589550530dbc4586f9490fb02cf9cf77a0695097190ebcVirustotal results 40.00%Heodo
2020-08-11INV_53403101.docdoc 2e6ff6d6098f2b63d436caef9146a587a4906131d0cb324b675b959be4d88598Virustotal results 38.33%Heodo
2020-08-11QN_1M5V0WSE3RJSE6M9.docdoc dfe95319cf0ecc8daf385929ff7c7cadb747e81a026fdf88dbb55eaf43b38491n/aHeodo
2020-08-11REP_61830142.docdoc 34d67996b2581cdd647857f3e3e696b014b5439d13108d5cbc713db42e9089cfVirustotal results 37.29%Heodo
2020-08-11INV_5UHTX6PT8NJCU2C.docdoc 91ea8ace7b370d468a6318d2ab0847a1d03897afb3a2d887794d4f35c781f34fn/aHeodo
2020-08-11RSRS_PCW_080120_HWG_081120.docdoc 5a7268af14b85f336d44d0d10af1c59a02ce7738a4966e2ef96a39574a42b7c6n/aHeodo
2020-08-11S_SX0138531413OI.docdoc 5ca1aedbc7b3e63e13e3b3263321e12f1d49d668c331db20a1f996b3fd362894Virustotal results 32.20%Heodo
2020-08-11BAL_DNA_080120_GKJ_081120.docdoc d760943bc37af2bcfc28d0e4f2a9de09a531cf8eb96220ea588ab5373d0b5ddan/aHeodo
2020-08-11BAL_MO9447316542CL.docdoc ce20703d88bfe7ebb3959efe8c9aa396e10a20431eed03f6aff303580836af4dn/aHeodo
2020-08-11INV_738801332040365840536470.docdoc 1c038e6271ca068993b3ed5c1b5b148ee3d9b310bdd8aebe764253795aff2eaan/aHeodo
2020-08-11INV_486232209425.docdoc 2b773fc9f00dc3faefe05dca9697347ab80fb8224235bd96dec05698ea4139f8n/aHeodo
2020-08-11VOX_76784465.docdoc f266dfe6eca386777143d38c655e759b22fba117bcd9138c44354938222c1673Virustotal results 25.00%Heodo
2020-08-11GHF_85380176.docdoc 1455b3fed34c9f9524557c1681b4ea63f86ce164113c4c2c15bcf5e70d14b251Virustotal results 24.59%Heodo
2020-08-11I_KVZEX9T5XL1D.docdoc 44371483f703d07a492861139471189a8755d6863157b3ace04c1e4ea205987fVirustotal results 24.59%Heodo
2020-08-11DOC_OA4405269892VR.docdoc d8beb1de5adb1f3ef5c811ddade7dae86aab73a38461546c8dfe473c74294331Virustotal results 25.42%Heodo
2020-08-11BAL_39709800.docdoc 2cd6d3c756477ef451f511c6ffae2ae49542fb6a4114f11be3b86cf4bdf57404n/aHeodo
2020-08-11T5MKEUVV9.docdoc 7bce19ab2ebbfd54b04f581b9e81b10e82557befdb1b22eb3d0fdabbc8826a5cn/aHeodo
2020-08-11INV_PO_08112020EX.docdoc d0344a04dec8d322f179b4b71125fe49e20df1ccbf4580b250f77f49fe5c00den/aHeodo
2020-08-11BAL_9FRER5JSVS8.docdoc 5d9fbd0f9ed6217eaaeca9a23ced4e99e2efe45974c0c80e8039c15cf6e222aen/aHeodo
2020-08-11PO_08112020EX.docdoc 8fb11051f6a6f86033a5491a0ecaf31b9127f53878d2cda6b6adfd79a47ec79cn/aHeodo
2020-08-11BAL_EJH_080120_PZW_081120.docdoc 9088702b9de53e98d1a703557ef6c594d9025b61613169b5d0098d607a4ae12cVirustotal results 23.73%Heodo
2020-08-11334103622548030411754.docdoc 3f96851b275fb5a1a7a9fd1950711c7966acd41a7aec7974827e40c729d38ee2Virustotal results 23.33%Heodo
2020-08-1153029644055298828634.docdoc c79922078efc326b0a7199af4f066d3a8d3f8122bfb9a1d58a2a62bdd508e803Virustotal results 24.14%Heodo
2020-08-11MJ_96122821269645.docdoc fe1403af8bfc6dafc09d02f60f2b208d0891210f6d16fc2db622f950339c7f99Virustotal results 22.95%Heodo
2020-08-11FILE_DXC_080120_KJZ_081120.docdoc 9fa6f271532ad52f77c508705e1b99fd612fde44318f5bd13a6a3925b059ae8dVirustotal results 22.95%Heodo
2020-08-11DOC_RL0407601940IG.docdoc 4a4a4dd5d1a19053ad3e765787b01d9dffb8b06be5faf5ce7a36efc5285df326Virustotal results 43.33%Heodo
2020-08-11L_PO_08112020EX.docdoc 8edf233ddcd24433edb9bf021d9eb73597b9d87e5bb9ee0c3fc936977dfe6f45Virustotal results 45.00%Heodo
2020-08-11S_10444057.docdoc 4d2029f90dd4666820163090c7717ea8b2166605108cf8e5292054e752213b86Virustotal results 45.00% Heodo
2020-08-11BAL_234788692.docdoc 57d5fc234966fd696f948b9952b125ec464fe2c3b2b0948e151dc74218050cabVirustotal results 40.35% Heodo
2020-08-11BAL_TF5503576729KT.docdoc 97a0a86caadf0c11a90388dcc018d2aae2496f377a0863a67aa05f261ce23436Virustotal results 44.26% Heodo
2020-08-11RD4XQ39F.docdoc b0276a23c508f3b994e893c4a51a5130674d5aebb945c3dbffcbbe22e7d62846Virustotal results 42.62% Heodo
2020-08-11BAL_65288685.docdoc 456af69e338aa9d67ece10771794a069df53f57b268711c18606ef7d54f0feb8Virustotal results 44.83% Heodo
2020-08-11BAL_6425708424386113246173347.docdoc 106e9a3097680f7a8270ac6a6a5c75fdf983b6e2ce326e7c56403aefa0eff516Virustotal results 43.55% Heodo
2020-08-11JW7354317921KK.docdoc 77d07ebb9067728855c77e0d2486102c7710c99f4d2f952cde12dd1aff24ae2dVirustotal results 45.00% Heodo
2020-08-11916092575682506813733190.docdoc 7a21ceea16e5ac47afe5072b7863649cccdc31540f9e90634bef272b619a9d65Virustotal results 44.26% Heodo
2020-08-1177858495.docdoc 37f50253f8018bae34e45657de8074c1a59a940ae12792fc8a5cdc8c700bc5eeVirustotal results 44.26% Heodo
2020-08-11PO_08112020EX.docdoc 62104fb8abc7b1ebfcc1f27dc49a753517b49182741b3bee249633214a595e82Virustotal results 44.26% Heodo
2020-08-11DHLD8NRV269OJ9.docdoc 4d67767678a9079f097fa98392ca9191d4dd429a1da0506b2e60185b0ded8609n/a Heodo
2020-08-10INV_47448978.docdoc 0aac84e792a3fda908009cbfdfbfa1f1e9e8f024bc759b760ec6a4a62e6958c1Virustotal results 40.00% Heodo
2020-08-10REP_J51N6QHFKBLBQEO.docdoc af547eb34804f006425dafe29de39e4bfef46ee54db5be9e20a1ee36b5cb922cVirustotal results 40.00% Heodo
2020-08-100190895076019617.docdoc 9f69dab80ed88c105f65738e34f9f97c34813c839c1e78395167bdf09090f89eVirustotal results 40.98% Heodo
2020-08-10QSPK_PO_08112020EX.docdoc aadddb049f89ec5e5d1e40e88efb782963c3f82c032024f3d3e0529e097d3e12n/a Heodo
2020-08-10BAL_17495049.docdoc 0f222b58d484c50d0c4a0b148fb2199a6510bf999adecddfe90f1c2a718d2474n/a Heodo
2020-08-103089372347474744694.docdoc 1701cece68d9611b07097a1e331039dc38649b44d3ea02351e0b494b6bca4fe9Virustotal results 40.32%Heodo
2020-08-10N_F2TBAQDH15JI.docdoc b5e1229c49f51eba4bb306aece6c81e4190cbecee9196e2f46b4076a3c563cccVirustotal results 40.00% Heodo
2020-08-10Q_PO_08112020EX.docdoc d04235ea57172d8e82ab7ceea5c85b7a847adbc9d6e6b2fc5bbaeaeaf96d8661Virustotal results 41.67% Heodo
2020-08-10DOC_015576286008585946.docdoc 53185bdfd244573e26be311cc6a1ca4a638ee6956f3521605c10735b0f4200cbn/aHeodo
2020-08-10BAL_MEF_080120_ODZ_081120.docdoc bb9c6274ff65ac8ee339d712ae7f3d2b010cb74f04603840cc6017db29aaa3caVirustotal results 41.38%Heodo
2020-08-10REP_SR2424223760BR.docdoc 33d40d4480617fb77d5d793051a847a5f4d09e1bd9845507308637ddf454e47aVirustotal results 40.98%Heodo
2020-08-10REP_3W806GU34LN6S4O7.docdoc 872f1ff7038a5fd30b2cb3a77effae2365720dca363e5d86677a58776cf18ae6n/aHeodo
2020-08-10UK4830679282HM.docdoc 2ce7d1abb43d1868d575ce543f8ce6d0c79ad406264308d9ae8e25cf75673e1aVirustotal results 41.67% Heodo
2020-08-10K_281673237728921863.docdoc ad90d0071b25f19345c41da1ac91d96258866c8048ddbe085d4c33dfe445e5b1Virustotal results 40.00% Heodo
2020-08-10DOC_44399493.docdoc fe21493280e923306b2814e03a02fe978f4d0179c15049984f9205344b9015d1n/a Heodo
2020-08-10BAL_PO_08102020EX.docdoc 13148aab5424f38defa3f0ea8809d41033c90cb647f12b565975d6d79c91bf46n/a Heodo
2020-08-10PO_08102020EX.docdoc 868e9c0b8d6d8e39b8bd61634f444b5afeb0d108336d68b28332735796526736Virustotal results 42.37% Heodo
2020-08-1020380990.docdoc 4a5e18fbdc7be5901c2ca9e71b8cc7b47105310303131ed53e198a413b1599d3n/a Heodo
2020-08-10ZWY_PO_08102020EX.docdoc d94a6af9b94a2da0d3f01cbfda9acc7925ae4f663165830cf06f14ad380600d7n/a Heodo
2020-08-103IU1ZEN.docdoc 9d0c4ad59e201bbfd5e94eae7548229c79cd70382bac9067221f9cf6ccd25a4cVirustotal results 40.98% Heodo
2020-08-10OCG_080120_QOB_081020.docdoc 5bda6a8a7a7265b29e8db19103395da39b962063d9cadaa193a0a1bcfda16fc5Virustotal results 40.98% Heodo
2020-08-10FILE_OH6622205975LG.docdoc 79ae00f5e5a052961cfec20422321dbfff9ece846d9034ea4e4544a997cfef03n/a Heodo
2020-08-10REP_PO_08102020EX.docdoc 21600f61f85f24fcc273a012d7344a44750a49d52c6ef86ef576f3d8c75cbe4an/a Heodo
2020-08-10FILE_PO_08102020EX.docdoc 2bbe07baa6be0df0d4f215e451514133c580414ec7d30a6983e47b49491f67den/a Heodo
2020-08-10INV_JGIDGZYE5T9ZL.docdoc c82cbe522924e150ea3b677117518f7b51d4a6c084200611e1c73c35790bbfa8Virustotal results 41.67% Heodo
2020-08-10SA2836683514PK.docdoc d792ea3e9dc252158dc49fb894d338dfcf38d2931a78f0deb72306f736e0b927n/a Heodo