URLhaus Database

You are currently viewing the URLhaus database entry for http://gigs.expert/var/public/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:734042
URL: http://gigs.expert/var/public/
URL Status:Offline
Host: gigs.expert
Date added:2020-10-22 10:34:04 UTC
Last online:2020-10-23 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):mail Yes (Ticket DCU003027695 created on 2020-10-22 10:36:06 UTC)
Takedown time:1 day, 5 hours, 1 minutes Poor (down since 2020-10-23 15:37:43 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22ZY_2T1ORGLV2Q.docdoc 838408d31e494e72b257feeec73407a2f778e6ecc47754ae16af0290515dc9fdn/aHeodo
2020-10-22DOC_PO_10222020EX.docdoc bac7b15c1cc9eedfd4670ffe4383b4c9562b04a5fb2cece968408833f933a765Virustotal results 44.26%Heodo
2020-10-22FILE_PJ14Y0CHC7367.docdoc d6703263ade837f40041f706035c4607c319cd75efa19a8c68a7ab46fc43c1a5n/aHeodo
2020-10-22FILE_96494740458235.docdoc 892a53376594e2bdf65731771d6e7faa4d36e2d3b95340ac4984ec74536d3604Virustotal results 41.94%Heodo
2020-10-22N_848073934186.docdoc e9d87e6f00f59e3b84a5389f77adc3ce03b38559a26aee1be20f6bf5c00e76feVirustotal results 39.62%Heodo
2020-10-22INV_0930270257358.docdoc 001639b7cc59c0a2584aa6a318a5f5b65adab079e516f81c1053efbd1feac7ccn/aHeodo
2020-10-22PO_10222020EX.docdoc 1e2ce6f7d21745dfd29a2251a7cfc9aa29962b2aa4283e160c20ca2166e2f973n/aHeodo
2020-10-22XUL_35407283.docdoc 0dcf5051405a8df1087b5cf36dc02c73c8625397dd38bbee394b11858055e85bVirustotal results 38.89%Heodo
2020-10-22BAL_18896857.docdoc 28061fbdc60d3031a20e1c8f75d20d703307a03ba696fc87e507c3a356e0ae68n/aHeodo
2020-10-22P_F6QOORMA5XPEFRB.docdoc cda2a4d05c53cff76ef32a29480efec51818dc2f26b02999980a33f1051d732bVirustotal results 40.32%Heodo
2020-10-22REP_XO8370440603JZ.docdoc 4cbd537b728c17d400cade05f1fcf9810b723df76c9efb65e6a75648d59cf13bn/aHeodo
2020-10-22DOC_91523986215.docdoc 2e0fa43a2843fd83402b86b0ac90f8cb04e7397a167793ccb42d7fc69de3a987n/aHeodo
2020-10-22INV_20612413.docdoc 40347dde07281a18b20079ad1bac5b0a981444847f0279db249fa34e2f4b8b1en/aHeodo
2020-10-221799389353894.docdoc a6540f229c21ccaf245ddbce5fea77f216483b5dbd6ca26ed2fa92997426d6bcn/aHeodo
2020-10-22Y_DWB_100120_REB_102220.docdoc 4d021161076f99a75dfb666d3e39d11b00bd70327c45d3d5b013c27c361dd74bn/aHeodo
2020-10-22TJI_AXA06QPV5.docdoc 5f797ffdf10fea5ee7b50bc74647cac73cfc4cef96e92d346c842e6cf3df339an/aHeodo
2020-10-22FILE_PO_10222020EX.docdoc dbaabade31310d7ea19505af37f499cb847fd738eda162ddc261e6b75951d8ceVirustotal results 48.33%Heodo
2020-10-22ZPT_100120_IJG_102220.docdoc 7672ae3ab7ee30ee3ef086ec0b9ced8c85e56d045f12305531d826ba491237b2n/aHeodo
2020-10-22INV_29476315086304246.docdoc 2c353218e1a20d8e435f57ae45682506c746562bae6f4761e2398d7caf09791bn/aHeodo
2020-10-22GP_78020196.docdoc ae5168eab14a38621615d44a35ff6af0052fabf8af421ef2c66f783169b808e8n/aHeodo
2020-10-22REP_LVJHAQVL02JFDL.docdoc 7eaf0df9dd2a33ee958384a9472366f58f1c0a204360efea6a7f8b0d298560d0Virustotal results 44.23%Heodo
2020-10-22BAL_PO_10222020EX.docdoc 6916f815ae3094ba0e9c9f0464bbd05f8619ce4da774387e7b7df3e1d82330c5Virustotal results 36.54%Heodo
2020-10-22HGR_100120_NQU_102220.docdoc 0f43e36af3a584e03529dc3f2c9c6b9e26edee46742cb8db7112fbe7be0d2c8aVirustotal results 42.37%Heodo
2020-10-22BAL_PO_10222020EX.docdoc 7cd6a76199b264747b5a649c770e2ba84a31960ae8ebf52b5bfceeac50a97676n/aHeodo
2020-10-22LB_8IL1WOPHBGZR8IZ.docdoc a0ac35ec0ee3a97f79ecb953f29c1dca13fa5661a5df78ba82012b16c5b291d4n/aHeodo