URLhaus Database

You are currently viewing the URLhaus database entry for https://pubgaz.com/wp-admin/4L9uaT6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	724297
URL:	https://pubgaz.com/wp-admin/4L9uaT6/
URL Status:	Offline
Host:	pubgaz.com
Date added:	2020-10-20 15:50:06 UTC
Last online:	2020-10-21 15:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-10-20 15:52:20 UTC to abuse{at}godaddy[dot]com)
Takedown time:	23 hours, 52 minutes (down since 2020-10-21 15:44:48 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-10-21	GWvXSTcrUY5YWLA.exe	exe	321a2d449e34b22a0076fb1f6ced33009b9bf1f86162fb83f2888a6e061a0404	10.29%	Heodo
2020-10-21	331NifkeNVBXbN.exe	exe	f9ec53db7886d6b83bda95b07d27e2db7b6e94117d050fc61dd86e1dd3ec41a0	n/a	Heodo
2020-10-21	lqlo84.exe	exe	3ad01f8fb1b15b3f0536ab45d4f7b2464cdc87602edb6a0c81c7c1c71cfc6455	n/a	Heodo
2020-10-21	d51BSeH4KVLQVqiZa.exe	exe	59c4ef4db0019da17e8e284e7d8d2ea39def4faa0199e28dcc392ef96de0f70f	n/a	Heodo
2020-10-21	0pSL2wrSbculD3Z.exe	exe	412926f0c18624313bfb72974bc1ca999592a8f6cc278cf9508a914db797081f	n/a	Heodo
2020-10-21	YIgtUmYo.exe	exe	7b242497f3c35bffb672136fdf5343db31b16467d90b5f4690270c93ac1cb823	n/a	Heodo
2020-10-21	UTMb.exe	exe	7569d6d5e4f6b5d96038018a11fd0d42e5efb31c82486c7747ede9b6d42e708d	n/a	Heodo
2020-10-21	6uB4pHy8EbD.exe	exe	7fb97e03fb2c6fbd221bf5d3b3733676f741eebce2c114cc3d46382b12cc816a	n/a	Heodo
2020-10-21	lG9pweCB5vFLySdyhiis.exe	exe	b2b644a4a328c92a81372f372d95331926427a79b6868b4119deba026bdc4f10	n/a	Heodo
2020-10-21	Wo.exe	exe	b245141cae41854613e6e1d7a412a6255285c28259120260a45cb431cf3ddaca	n/a	Heodo
2020-10-21	Z9SWGB6hV00Tts5d.exe	exe	642e374a327b3fb444f13e54572a43376e7323edd70c7775ba9d1e2e4d29ad9b	n/a	Heodo
2020-10-21	xjBnyWEc5h1c7G.exe	exe	c673597fee768f37c1ecd3986c42310f196257029aed78aa519e90fd0452b95f	n/a	Heodo
2020-10-21	u3Vhiu42Q8wq.exe	exe	8077ab2d98e6200048753268b341e570fcec4e11d83982a2c611b9921bff46e6	n/a	Heodo
2020-10-21	UGBAY.exe	exe	77e6e079cd1c6e422610ac62d489d98c2d90d0a25b557c6d9b89f41f31247bf5	24.19%	Heodo
2020-10-21	PEce1tEHY.exe	exe	62ac6b017247f92a7b69326d80c3310cd503d9fef6ecdd9d2c1108492c071027	n/a	Heodo
2020-10-21	VGSJlGyPRx4HLB3u.exe	exe	fa2501d61a3649adf242fd61a3e412234e17c82ff87bd697d810897851c0ad42	21.31%	Heodo
2020-10-21	GVYU3IXbBhQMCvet.exe	exe	5a53d9357e6aeafcb28241d637532031159723aa26dfef3e602fcaec946e2a1c	n/a	Heodo
2020-10-21	0ksWg0IgHLAXiJ0wS.exe	exe	9b31a0c7c971bc65e8d49152b1914916a02f065bbfcdbd91689a7a95560854f0	n/a	Heodo
2020-10-21	T4U6HIpRUuhKaQrxG.exe	exe	63047bf434418ea9aa2ce083762a1af1068f5db63e35b25b32d0974a8ff3cee8	n/a	Heodo
2020-10-21	WynhSon.exe	exe	faa902d49f514ee135a14554179b223e87f0ef1b9b4da771d006a7c5ca13c71f	16.90%	Heodo
2020-10-21	1fzcOfR5GHu.exe	exe	fe081f3fd74cd70f2b7f6dbf2406e3168c2602fb4953b7823a5b78421f535253	n/a	Heodo
2020-10-21	hsy8qPjIz.exe	exe	091a7655a18c68e7fda6f469a0f2dbb6c5c9b6440f07203e26be63c2d7deea01	n/a	Heodo
2020-10-21	HkNYQmPip85.exe	exe	984eeee1cd150a8c7a5d1611e2aa0c4d217b27cec6f8a90be3dd23dbc30a2f0b	n/a	Heodo
2020-10-21	UIWL2yRBgRYHF16iL2n.exe	exe	a09fb5f7081e05ed66bd5d8dac3021f6e5bc4fba19a349a3723f104692e37440	n/a	Heodo
2020-10-21	b6v5Ob.exe	exe	80b3e5c4166c6ad29cae798530b4cb0e850236c6e2ac94e6f7f83fd5f92e4eae	11.43%	Heodo
2020-10-21	1lMLKDy0AeNa9gMfK.exe	exe	7d31bd5ba175796e86c5bd6f9fb829566b0e547ce6ac85bf4060024b284bb2d1	n/a	Heodo
2020-10-21	0Znk8t.exe	exe	092e6f7f90b098d0f361a24296672461a01c32386f3f64733f7f505651e47821	n/a	Heodo
2020-10-21	UJ.exe	exe	417d352cdc30b71cf07dd76d524a44d87e5e2ebff5e427b47150758e74c12d2a	n/a	Heodo
2020-10-21	js357B8qROzsMZ.exe	exe	2ab8c65bf81b0fd31c239a47b97a4fd78e9984afa11e21bd692d1e4f480fc472	n/a	Heodo
2020-10-21	GGzD.exe	exe	3c468b34c8feec442772ebff6916f3107b99ab7549417589aab729f9fd13a7ea	n/a	Heodo
2020-10-21	pp2RNsCxRA1kIeZg.exe	exe	3fc42f2bcd62800680238e8d40a77ec094da9d21b8b2441c763b505136d0cc14	n/a	Heodo
2020-10-21	uJoiRFp9gjC09cOSZpI.exe	exe	a1579eced7488e215e27c694e86b04094197491f5c85f56365facc7b1f4654f2	n/a	Heodo
2020-10-20	DCoBZIPl3jj.exe	exe	50ac796a00c698982f66209812f638a04e0230b8179c022943d3a26fa6350810	n/a	Heodo
2020-10-20	UNoaAtMY.exe	exe	0a6b0c35a866d9713097fc3030dafab596efb7e3361ae0eed85968c986bce0cd	n/a	Heodo
2020-10-20	cEeHi1Cne.exe	exe	a2565051ef912330a12515d63257acd913136db7c4754bca76ee7e17ea2150bb	n/a	Heodo
2020-10-20	uACOyHORV8CPs5X.exe	exe	90a823a1e8007a30c351d73fc0188e20fff5b4391ec5aff3f00402f0ff5ee819	n/a	Heodo
2020-10-20	QXkcwqMRPe5Gtqg.exe	exe	0da682245c5cc75f3ab5165c90288e64a33b05c440aaf768b381f02341691540	n/a	Heodo
2020-10-20	vq.exe	exe	0087d21eb6463ccb6900d1a05717025439fe324be2a9a890d1c4c1c89f88cb0d	n/a	Heodo
2020-10-20	muT.exe	exe	68a744fd294e9a4cd1186d992bc4f8abe34c1141792461bd88bb439d265c8812	n/a	Heodo
2020-10-20	5QjbZw2pP302.exe	exe	43f7503a47a4c08d5129616ac60ca66b0d0bc532b5813586613d46fc152c8650	n/a	Heodo
2020-10-20	M8MYatxrUppVHCxpPVF.exe	exe	9d2dc9044b55d4cf40c19c395b3cae6d20f3ce04ba24dd21d74955d3fceec624	n/a	Heodo
2020-10-20	9CpDosrQNjm.exe	exe	85c51bb5cdf4c3abe86e5ce41eadba28ac229541fc4caa0a3b0552a9f23dc3a9	n/a	Heodo
2020-10-20	COjkRXmwN.exe	exe	e4088c37ba7c7b6deb760fd17a48d8032bd2caec31ae56a7328250e4440ea92e	n/a	Heodo
2020-10-20	Hy4nLm8P.exe	exe	4c5186b6bb5e5346a01aa9a343af3e20d2e441b5a377d18735f15822e817804d	n/a	Heodo
2020-10-20	OPOiF.exe	exe	2b5c846087cb6310e6a85cd81094eacbe4fae89941ac05cb5153738978a2b29b	n/a	Heodo
2020-10-20	l5w6wH3VMt9nKxyb9.exe	exe	bfc30d04bb6deb143f6bd056c25608492b40607c6d5c64c9204f1114c6628498	n/a	Heodo
2020-10-20	zC42cTeamJ9s6C.exe	exe	f6b66b2d0b1a90ca741d216f8de9c8902e438bab9f13a2b7899f0216f74e545b	n/a	Heodo
2020-10-20	0Xb9GGXr2FNNajz4qlRR.exe	exe	17df7205406ad6d60423e60decd76f9451af4ecfa7a82bc57fab6a7a0424ee7f	n/a	Heodo
2020-10-20	MXxl7.exe	exe	256edd1264d320c3435b5aa3a108ae6a83c7c25d55d21f131162013ee6382ac2	n/a	Heodo
2020-10-20	VvWsinKX1rSPYx.exe	exe	96bb6c2ea078d50915a35d5a19c2e97bb79df91f51030e3bb07812591ef3cb31	17.14%	Heodo
2020-10-20	k7qBg0Eswur.exe	exe	26ed9bbd990b1d28b11c6a33cbddab0b6adca186c6462e77b0068c7ced84f9a3	n/a	Heodo
2020-10-20	ReiAd.exe	exe	09dc93fe9aaeb73fc8d3fa697e6ef9e08955978f28d51ee422dc76a11bcf0c56	n/a	Heodo