URLhaus Database

You are currently viewing the URLhaus database entry for https://gamcb.in/wp-admin/balance/dfv8yr5j0ek71bl4y73cpjoivl/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:702025
URL: https://gamcb.in/wp-admin/balance/dfv8yr5j0ek71bl4y73cpjoivl/
URL Status:Offline
Host: gamcb.in
Date added:2020-10-16 13:31:05 UTC
Last online:2020-10-19 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 13:32:18 UTC to abuse{at}digitalocean[dot]com)
Takedown time:3 days, 4 hours, 39 minutes Bad (down since 2020-10-19 18:12:13 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-1737474579.docdoc 360a5cb7eed923017b4ef07460e7652362cdf1fc0a902516addbb8e244e30134Virustotal results 53.23%Heodo
2020-10-17JJLD_92055604915261678451940.docdoc bd5e318573106192eca830985c93ad07583928c7ba9b1f752ee5ce3e38eea593Virustotal results 53.23%Heodo
2020-10-17Z_QFN_100120_HPN_101720.docdoc b61cc94625d0aec1674d3ffb90ade5b30575e1eb8a755f9944cfcb4d40378041n/aHeodo
2020-10-17REP_EE4233671422MX.docdoc 36d4d0f8ba694e3a45ac3fd858e3312538bf61d501403dcbe763638f043ab3a1n/aHeodo
2020-10-17OME_100120_QGX_101720.docdoc 83af4eee8013969fd28932937f24ed1bb6031013a525dcd161ed6914b41feba5n/aHeodo
2020-10-17REP_50813849334486480.docdoc 5bc6a9797e0e1b206a0d2d341e88b730f01312279122e98e1dc2873f48b2102aVirustotal results 53.23%Heodo
2020-10-17BAL_ST0537816094GK.docdoc 2b95f52b2f665277c1b271f68b7ac017b7653d398e73877b7c8db4bf2ccaa52cVirustotal results 53.23%Heodo
2020-10-17BAL_02134415.docdoc 4ff23dc1f01527658819824659e03edb6ee7d16cdf8704e61548acf040415238Virustotal results 53.23%Heodo
2020-10-17ZW_XL5512900678RY.docdoc 9f1bbfadc978c537734ee0121e22cc5afc84b8d7078b5410f83a943138eb56fan/aHeodo
2020-10-17PO_10172020EX.docdoc bf7d2c74845e2e6006ed753d93f64d23813dba57c4f443be01f59915f96aaca4Virustotal results 53.23%Heodo
2020-10-17G_DC0554762221SE.docdoc 8b422df815c80e86241a4670a69918c21bf0fbdde61aaa753f84e0af70d9f4a4Virustotal results 53.23%Heodo
2020-10-17IJJB_17666104.docdoc c0f957552ea0bfa9ec43b903ee17f870d19d10026a6e967b5ba434e26758232fVirustotal results 53.23%Heodo
2020-10-1745574935.docdoc 7f7aaae8116f26c7d91c5c3d87ab7c7a752e628195c25563cc7c3074669e6c7aVirustotal results 54.84%Heodo
2020-10-17BAL_IIT_100120_OGT_101720.docdoc 6d5ed047cba0f40a2bd108fdb285520a5590c29ac64b7a9d32a20719905f1e7cn/aHeodo
2020-10-17FILE_UK3332924671QA.docdoc ab8be8e21a7c5f0a158818bdf5fa9883acaffa78d8cfa5cae36ba7d756b8fed6n/aHeodo
2020-10-172QZZB5X3FI.docdoc 4f1b55b5cbbaa28b0d87b93dd256cebd16df18a51e081378940ad152fd24da8eVirustotal results 54.84%Heodo
2020-10-17DOC_9697044144.docdoc 58a95bd14fdfe2c4e30b7bce237de2fa3351c1bcf0328c91c9333a29a8be15d0Virustotal results 51.61%Heodo
2020-10-17IPF_100120_PVQ_101720.docdoc 8358ae3aef04560a786b84a17aa88a981d700993291a3b11aa001fab16829ad9Virustotal results 51.61%Heodo
2020-10-17FILE_FAB_100120_RWK_101720.docdoc c85fe8825461de0503c8b9b612f01c88a1124e0c33ace58d20c22cf40c4bd03fVirustotal results 51.61%Heodo
2020-10-17DOC_PO_10172020EX.docdoc d19c1e922354570a8700f8dc25900a7c8ae4bee4b08908a4c6cad2309eff1ba1Virustotal results 51.61%Heodo
2020-10-17BAL_JX7853456098GR.docdoc 02730b23749bb5e945d78771425520fe94a15b5647f34a7efeca54a72c9297c9n/aHeodo
2020-10-17BAL_PO_10172020EX.docdoc cad389f338446345616f9a4f005b47f186be55fdd914d1b88f42bc4f26220685n/aHeodo
2020-10-17REP_PO_10172020EX.docdoc fd0ec2733cb7fc4d8f934cf81b56a9a6fd2dd7290c257cdf4c2a1b3da2bcfc10n/aHeodo
2020-10-17JQ9MKV3L7V3PIEDX.docdoc 4f6043ed53481592c3b9db4608a157df568b466062cba2018b8e5c59bfb40563Virustotal results 52.46%Heodo
2020-10-1770345836550.docdoc 72bc6543f22de398e1374caed638e9a1d24ec0b37a5fa9b5ac10ade7559ab839Virustotal results 50.00%Heodo
2020-10-1776437101.docdoc c40e490d1149a43b982a7c65d5f04d36117a86623374f75bf8d47f31090f8b18n/aHeodo
2020-10-16DOC_25253633.docdoc 3bae78182dad47ac43920171f44e275863e25a8cbdd07ac0b0279edb751dd12aVirustotal results 50.00%Heodo
2020-10-1607775875591879.docdoc 3772d83153c2d54a8a3dd72055370d3db69948bf4eafeb69018ce518c7801d05n/aHeodo
2020-10-16BAL_11490656.docdoc 34470931a684a070f70a0ed741a36c388fb0c082426aebf15aeedbc28a4d778bVirustotal results 51.61%Heodo
2020-10-16AF_DXQ_100120_NNN_101720.docdoc 1b2a426d5d7d5a0185640c82655ec40245f89ff62644ec1a04de9894a169114cVirustotal results 50.79%Heodo
2020-10-16HTG_100120_WUK_101720.docdoc 23600bb2ceb80154b049764a263e10cc02148048a332d10edf6458fc4b2cc34cVirustotal results 46.77%Heodo
2020-10-16DOC_KJJ_100120_EJZ_101720.docdoc ed7305c8affe8cff65cc112f1d79f66621e2632a8ec647ce7aa6817e738b989fVirustotal results 51.61%Heodo
2020-10-16GGF_100120_URU_101720.docdoc 8215f350c6c5d2b5f615bcf7260cb9eeb60747b75a9e6a8e4b9c3ef3b70b8cfeVirustotal results 50.00%Heodo
2020-10-16REP_AE2800997963ER.docdoc f9e446821e7544fb3343aa3a069112853a802cfa173c8ff3650af2faf9b22caeVirustotal results 48.39%Heodo
2020-10-16DOC_406866049499.docdoc 7b8b2d4ca133105321f5881616be8cc7960257d1f6abbbe026c67e10eaa6ebb1Virustotal results 45.90%Heodo
2020-10-16FILE_PO_10162020EX.docdoc 2069708e26eb58f872b15305b2443d1fd546458a653b01f5f0fabb291e3d4deaVirustotal results 50.00%Heodo
2020-10-16REP_504866382088221155.docdoc 11c67e93ede508aef0bb3d1c43fd0dcc4109fa2c3c93811c94f36094662b2c23Virustotal results 47.54%Heodo
2020-10-16Y_ZW5455309556KM.docdoc 66039545c0341ab69ac7dac547c88d087e88a6fe13ea338a5fd0397364c0350cVirustotal results 44.26%Heodo
2020-10-16DOC_52931355.docdoc c35986ebc1fadec0bc076c81466e8e87dd82058ca783e03545036dcf9a5d7a46Virustotal results 44.26%Heodo
2020-10-16FILE_798693275182.docdoc fe64e60c58eedce9a19e9f18a2c5d220d3d38b0aeb719cfbf027218a13121621n/aHeodo
2020-10-16GJ5897841861YQ.docdoc 9d28dd58c8ee62277f91e152a8c7e9964052f5025f10424ec75b9563e6b50cf2Virustotal results 46.77%Heodo
2020-10-16BAL_8524333901315837751.docdoc eee6727eb427510fdf3fc2a8dffc94ab47b897f5c20b69a87cff6f9a5024fe89n/aHeodo
2020-10-1685837588.docdoc ccaca18fab3cf85f49be61cdac5f891f12961393dcfe120af01e6a75b3768b71Virustotal results 45.90%Heodo
2020-10-16G_SE0284852200OX.docdoc 6312f90ec6b5552f4405eed96edb974c807da0ceb9ee39eebdf680a2fb6c3095n/aHeodo
2020-10-16DOC_30746647.docdoc 2882ae473d8140a4919487e5c39d6cb78a594f4d99e5e9a7bd77a568ceacc67en/aHeodo
2020-10-16RHD_100120_SHF_101620.docdoc 9ef9aea93327bfec6723725da363f724f06ca447c1a54fa84210ec1b01c86415Virustotal results 35.48%Heodo
2020-10-16INV_TUA87XT8.docdoc 0e12f49796d6d8f40e96ccabd14b42ccbd1c2097b8e8419790c0d793c3226bd1Virustotal results 45.90%Heodo
2020-10-16INV_Q368S9HCECQ6MQ.docdoc 4d92f4549c627c844dc6c2212d8028b73f0c3d07b19296f0a297ed9577b979aan/aHeodo
2020-10-16REP_KZC_100120_TXH_101620.docdoc e8cf2d2aeeef9972177572c05c58a7659515a991f2601167d7512ea389672c6en/aHeodo
2020-10-16FILE_06860546.docdoc c776db8d620c054dfc36df81dcd693dd59598cce84323f83c4677fec5fc8eb4eVirustotal results 37.50%Heodo
2020-10-16DOC_UJE_100120_OVG_101620.docdoc aaa0b201b6ecd9225b9f151fef9ab72ef2b37f5b2a35ae38b130f2b9b7cc5e8bVirustotal results 40.32%Heodo