URLhaus Database

You are currently viewing the URLhaus database entry for https://bangkokcityjewel.com/cgi-bin/gv9Eb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	444337
URL:	https://bangkokcityjewel.com/cgi-bin/gv9Eb/
URL Status:	Offline
Host:	bangkokcityjewel.com
Date added:	2020-08-26 11:27:24 UTC
Last online:	2020-09-28 10:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-08-26 11:28:09 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:	1 month, 2 days, 22 hours, 57 minutes (down since 2020-09-28 10:25:29 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-08-28	l8IdmtybLgXPf.exe	exe	3ae6a4c47db8a44af02dcfd405405b9c9f10a0ee32af7bf4f602535f2d1424b2	n/a	Heodo
2020-08-27	yUHl0a2.exe	exe	9e3d6276cba7f8583898f1b0d1cd54c5ed43565f21d6cb9e72cb866311a3d07c	n/a	Heodo
2020-08-27	WZTa.exe	exe	d153e69fefe4b7d2c0f0a3dc35dfee78c3d3154d95f9c8318c408bbc6247e7b6	n/a	Heodo
2020-08-27	agIAKdRqVjNaeAX.exe	exe	61cf84074818c9ca56a347fc10212af817259aafe1f9710b83084e1f565ed7fa	n/a	Heodo
2020-08-27	NKDsD.exe	exe	50bac8799187bbbc05a9a983f326cda137ab2655e77175aed141842296c3d171	n/a	Heodo
2020-08-27	h5P64006EEu.exe	exe	07565bcb2434ace745b8781c08977029a607bc2155279c466eb499cd5971a7c8	n/a	Heodo
2020-08-27	whfx0SuuIL5.exe	exe	47f23cb54f993400b4d45660327ee67d9b4925a467d2c0c13ad4ce929bbd7d1e	n/a	Heodo
2020-08-27	BG5lS.exe	exe	c7dde2c209d96f9c48f3b9f3273da8472a42ed558470ce5d2d811bd2855bca95	22.73%	Heodo
2020-08-27	mcdKdarUF.exe	exe	5615508f016728d9f4ed5f7e40d4757a7c70353de9cc2005d409b0b6bc16d2e7	n/a	Heodo
2020-08-27	LDVcElb3nAaw.exe	exe	b0ac6724779f74570b18de6a4e2e8f350cb491fb719df1b488f5cb54bd59aa67	n/a	Heodo
2020-08-27	eO4VNAknZC0BIjnsB.exe	exe	821ae251565e233951e33e309c956d5da1ef67f0c14dfda0a14eac8c9efe415b	n/a	Heodo
2020-08-27	okxMRtbNZwtM.exe	exe	d007f30d20cf77fad0303d42f4776418d9d40d9144a20f000ff38fcf0c6c7013	n/a	Heodo
2020-08-27	MkULb5.exe	exe	1bd1fbb97969199fbdcabb02e4aabf330bd194136cade36af001431a5cf01a9d	n/a	Heodo
2020-08-27	w1Ya.exe	exe	4569b745d7ad49f270087e172f527888a879d732feed76cc6f58bd1aa0211ad8	n/a	Heodo
2020-08-27	JQ7qIyhP6A.exe	exe	8df82836fe2997b1ac5ae4df1ebc6f10e446d05b8b13aec2c66f819b75b8667e	16.18%
2020-08-27	dCdim.exe	exe	d69c557c144ecb679daac6e73c2a39661ce125b1e5691de5531515bfe8559633	8.70%	Heodo
2020-08-27	sYYd6aI6.exe	exe	f74bb3f795fcbbd7331c15ae0dd4d872bdd3c0229b103a3fa9996258ac9a618e	n/a	Heodo
2020-08-27	16rElPII.exe	exe	cdeb184d42e689f0aa1401e61bb368f6039b6604c53ef782ac5a5a63e39c3193	n/a	Heodo
2020-08-27	fBoIIlyTDqQq.exe	exe	165a89e6afbc9908d0a711935871024755671d6eb1eda150746ed23f03e4e068	n/a	Heodo
2020-08-27	G3VaCjpfiOi6OR.exe	exe	344c1816a4c2fe7ed762b133a8430b38d1c94d5062a78b609e9606dd3290b29f	n/a	Heodo
2020-08-27	jjLxDDyV.exe	exe	161693338cc49f2426c8e95549b0100ca66592857f949404f514bc5d3047fb2b	n/a	Heodo
2020-08-27	rIWoNn.exe	exe	d3416d5ca9b4fd29d41a3820d8532440e797d1c1f603e6b094872d3a5301e6c0	8.70%	Heodo
2020-08-27	fgaRZ8s.exe	exe	153e10403bf98aa7757b68684d241195fa9dac305b4e76db416697d4e9638acb	n/a	Heodo
2020-08-27	9hYbzLbrbJ.exe	exe	2690966070b3015b415af9a881facef78e2e27fae249f03cc6bb5e3623ff14d7	n/a	Heodo
2020-08-26	YRzfmqaLEfuFa8.exe	exe	8d471f5ec4d5a42ca3dd3fe712fb959d01a6dc38fd01605434a7af9ceadbc58e	n/a	Heodo
2020-08-26	X30OkX.exe	exe	165bcd7d6beb27da0102414ae640d13ccb4d2034ff20a13773d1543e24144072	n/a	Heodo
2020-08-26	7SQSGge.exe	exe	a5f9d0d6a59ad2203afe4992fefe70d62124ee339b860d72f6a952e39bbe4afc	n/a	Heodo
2020-08-26	fcFTwqvefoqDbR.exe	exe	9eb51770047f16c0a56cd290ac11496fa6e696acb797c59e114755b3947f72d3	n/a	Heodo
2020-08-26	ameGRqwPUuf.exe	exe	5c132d2e133ab9448664abd1b502a7ba11b19116fe67ce9e5f3fa6944b810fd5	n/a	Heodo
2020-08-26	w55R.exe	exe	0f035dfeb4ef423dcdc7df438ebe76b77bd46dace0b2fc3d8f58ba1bfb85c725	29.41%	Heodo
2020-08-26	mdwDaYIV.exe	exe	e215511a0f200db26ebc3303070a2d89a3c4351493d116e27d0ed36e3b6dd51e	13.24%	Heodo
2020-08-26	9Tizhq8cgatdGAxqT.exe	exe	ddef972e2ead6b319330cd13c95cf4110686037deb382da3e595a564bddd440a	n/a	Heodo
2020-08-26	Yq1stMZ.exe	exe	083739a6a18fecedf756637335e6a896b9c9363fef44a619a1918a5a1c4c2fce	n/a	Heodo
2020-08-26	yXeB7VnEpTDaADwa2fb.exe	exe	3b3e7b54a55a054cebe31349abee98f5d2ed4fe962ffa5c1c9ba4071cad37882	n/a	Heodo
2020-08-26	56UoaZvq.exe	exe	c886b3889e140327682712f57897933fab1b9f63630a562af9ddd4956e9159c3	n/a	Heodo
2020-08-26	6TP9gmUoZef.exe	exe	12e7320d278b39bc405b905989d5a25839af1f7991779fdc4157d1b37978fb5e	13.24%	Heodo
2020-08-26	7wi50d64lkubc.exe	exe	d387ac40ef3326786db4b8581154d591f287b0e56afb60d23b5134bc454f62b7	n/a	Heodo
2020-08-26	iQQLFg80j.exe	exe	34895cfd5e8bb354b68a1351a6911f56d00fe6e585de31ed865b4c0de03bc313	16.18%	Heodo
2020-08-26	EmYbov6AWMA.exe	exe	7fd0ca055b9f57a5378318bde11ee2ba86dd9a41b330ac49b88d4118d4bfdd40	n/a	Heodo
2020-08-26	Z4wW.exe	exe	5604fd5bc749434608b5b2b6390e434a9d735a8c54cb613638816d1fd0327340	11.59%	Heodo
2020-08-26	NQenACkoEmeMcjkhcvW.exe	exe	942bb5755fe32621d3be265bedfccae3a0ded6a3b8975700c40b7dd206b3f306	8.96%	Heodo
2020-08-26	2VcTO7D04WGEA1.exe	exe	438dce45db5e3795cfae4dec84cd4c931722f2e9393aeb51e2eb51c4d4609a59	n/a	Heodo
2020-08-26	xNQoS.exe	exe	8ec03df46216c04ecc16b210916c1b04ac50ad2c5b1154976dd3fa1753a77852	n/a	Heodo
2020-08-26	nUBUemMmN1bW.exe	exe	602034ad17d3375a15a46e5e79ba3ce49a2b8be98e4c82c7ae5b245b82fd7ebd	n/a	Heodo
2020-08-26	t3EQCIG9UQLnHs8lI.exe	exe	e846d1aafa0d0a5dc4086d6c7f2a9aa97c3c215b7de9e269624473f727a31485	8.82%	Heodo
2020-08-26	VFF91PRMWtz6W.exe	exe	0bf0cb14ca4d8b459f22b6d2a4ad3ac57a893b6e2cd71f7522ec8d58205d2cc3	n/a	Heodo