URLhaus Database

You are currently viewing the URLhaus database entry for http://softgon.com/wp-content/gjVNOlY/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	549830
URL:	http://softgon.com/wp-content/gjVNOlY/
URL Status:	Offline
Host:	softgon.com
Date added:	2020-09-18 01:47:34 UTC
Last online:	2020-09-22 12:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-09-18 01:48:03 UTC to abuse{at}digitalocean[dot]com)
Takedown time:	4 days, 10 hours, 22 minutes (down since 2020-09-22 12:10:53 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-18	Tb1Af.exe	exe	169ca8cc1afa3c3ea8b53f3ea96629721d260206f624afe89e73f87c9fb137ea	13.43%	Heodo
2020-09-18	hly.exe	exe	c4f551e166387183f2bf36d86dff05fdf5f9f97d4610db49f6583d4e4874d1a5	n/a	Heodo
2020-09-18	2DhwdA9g.exe	exe	8f7be602c0eb5082751593ff449cd8dead3e489c6106d3fab51f687eccb763c9	27.27%	Heodo
2020-09-18	K6kFxWbqQ4z9.exe	exe	20cd911a8f842ae0886a4e71b41f3dfeefbb1cd8053338c3c50ba1fd3d97b037	n/a	Heodo
2020-09-18	RS.exe	exe	5abea38bdbcec61ed70b813540006d897fef238ddb371515acec87f48a21faa9	24.24%	Heodo
2020-09-18	azSa9qkHS.exe	exe	7b0c5ea057589c05d03774e3262b89251f0cb47a1bdc21f249598a74a3cadbb5	20.59%	Heodo
2020-09-18	6biZuU3N.exe	exe	70c9589e67bedcdef6533843ed79ea64ea527ab4c3880b94fc856e9a27d98e19	18.84%	Heodo
2020-09-18	M6rgzQFgYuCn4feJh.exe	exe	9d85e8f64df3430f2abab213e1f8deaa7cbcdc0aefe1c34e43f507d00845f142	20.00%	Heodo
2020-09-18	OF5Qf.exe	exe	bbcbf3737657420957eba547bbd77e322dec3418353da82cfa9ecab2b877accc	n/a	Heodo
2020-09-18	unHgf5kmRYIxlIPT28.exe	exe	f16a026c9c35f464f9f35f5cdd902ed7ae96201e369889adc6460a07c20c3099	n/a	Heodo
2020-09-18	xirjdkopyMgvkdUupNMt.exe	exe	e8bc030813fcda71905bef5e7fc6cc433a043236e65cdfec267b0ca52f0167a2	n/a	Heodo
2020-09-18	fW.exe	exe	f2fbfe6ab68422363fdc0b33c3e91b14743c15cb665d08c9b9b11f36fdd058ab	19.12%	Heodo
2020-09-18	8ChbZhOxtaftKiS.exe	exe	4d1af3f3831b9c2ff900e5cbd9c3aaa80aaf4cf34056c01cecffe06d4aa5b5ad	n/a	Heodo
2020-09-18	g5RKS8aEcjr4E.exe	exe	104e89fe7ba3a9e6e8517e25835654d0e10aa3f705d8f3562c5526f70258eebf	19.12%	Heodo
2020-09-18	W4DcEmj.exe	exe	d76110351510204fe95fa07038baae6a5c1045f4f76564940daa85dd5eaba1d0	19.12%	Heodo
2020-09-18	WefDTyDzeE3.exe	exe	9983d0233969a3a28df7b928eaca907c3f89ab1e00ed2f58debf427697b84f42	n/a	Heodo
2020-09-18	w3J.exe	exe	6c61b9738296d75bd2da6b6fd81180952edb7122b005d29f16eb88145d7d8248	n/a	Heodo
2020-09-18	x4E8LRagYJ5iSV.exe	exe	859a46c773f01df3d044f40f61e997087a1503d125de4bdce05a53a4fd97c387	14.71%	Heodo
2020-09-18	wIEnGQvNttwYWt4o9J7e.exe	exe	89c6f8197399b3104621e32e76a0c0f3374f0f1e53bb72e3a7fa64b843d868fa	n/a	Heodo
2020-09-18	FEevzeKoRu5.exe	exe	56fc912702e354643c704cf4810ef41c757bed07940f563d48abe4e77cb32c5e	n/a	Heodo
2020-09-18	HMyy8IVpOf8ehpx122k.exe	exe	4260743af45ef03528b6a93f210f9855b889aa28ddb564dc6acd7b6fa1c2c5d2	n/a	Heodo
2020-09-18	CzSPkzVyXsccLn.exe	exe	30333f0a563fbe5f0d1327b0bd452263977191fcb2102a45be32c7c08ad31b3c	n/a	Heodo
2020-09-18	o6oScGe49zcIz.exe	exe	69a588daad010b47af70f800b3e4c93a864d68dc11658086d7f32ef448f1852e	14.71%	Heodo
2020-09-18	SeNZJ.exe	exe	d1de72d0c1a57f8b335743eb3576e5dec5e4b7010688e423d9ed06f0e5ccbd7d	n/a	Heodo
2020-09-18	sVTbfPIKnbWZCg6GOzbg.exe	exe	9ac1405b12d0cba5798f4b601a9de1be137f1a71b433a1cab8620a12f76b3d5b	13.43%	Heodo
2020-09-18	Txm1z0vewaQdYSN.exe	exe	259424b2e6b010b9a6e2245a90c3423bce1e6d74abc856f5ae66404c044c4610	14.93%	Heodo
2020-09-18	2SU5a4pfAcj0jQPcl.exe	exe	a792d57e2be2284e78d6ce3855092dae50eb3622673da6a8b401cc47089fffb3	n/a	Heodo
2020-09-18	eba1K5imB6JX3ZDuUj.exe	exe	14c54259366c369340f2f738eb7f10419e25c5be9170ef1117b97674d8a924c2	16.18%	Heodo
2020-09-18	rggzgBYy.exe	exe	73f01375b6c36da109907d29b1e21ff24901b644bd596e9bb95a4bf4af9ac496	15.15%	Heodo
2020-09-18	hmQqYl7DP8zeoCAZ2mP.exe	exe	8e53294fd8b857c24b6ce2a2384753866cf7a06b523a7177853800f59937a998	13.43%	Heodo