URLhaus Database

You are currently viewing the URLhaus database entry for http://www.gauff.co.ug/8nTTllUXDC which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:80713
URL:http://www.gauff.co.ug/8nTTllUXDC
URL Status:Offline
Host:www.gauff.co.ug
Date added:2018-11-15 08:24:05 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@unixronin
Abuse complaint sent (?): Yes (2018-11-15 08:26:06 UTC to abuse{at}liquidtelecom[dot]com)
Takedown time:21 days, 13 hours, 55 minutes Bad
Tags:emotet exe heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-11-17K3HJ9QZjtq.exeexed5376e3daac7263887a471762477848e181ac4b9d20d8452004e87d9202c83d8Virustotal results 17 / 68 (25.00)Heodo
2018-11-17TceP7PQh85EE.exeexe9bbc51e2470cb7a317b06818b1fd03211effa245c571a873ec9a563ea7923ec6Virustotal results 12 / 68 (17.65)Heodo
2018-11-16UnEGxVYYxr8s.exeexe2e0641942d6fc929de566aa2e26dfde004aef3183c598067aa7771f8f8962259Virustotal results 23 / 68 (33.82)Heodo
2018-11-1573MBiZ1OJC.exeexe5f8aee58ec2f1342e84ed02d276c4369b1c2359a5e57ead9269bc6fa5d67ce59Virustotal results 14 / 68 (20.59)Heodo
2018-11-1567KSAx45BxN.exeexe7572a35079a3f35d0e776e1c8aa29b5ea2c15886dc9ba027097e77ce27672164Virustotal results 16 / 67 (23.88)Heodo
2018-11-15SroDm3QrdDXH.exeexe08542b543ca70e3038b0d4abc880813db65ab091c4c4005987961ee0676ff204Virustotal results 14 / 64 (21.88)
2018-11-15Jhbt6DVwFAQ.exeexe141c5f862c723ab68ca3fa253178ea5f49bcc619f20a147260c2135c221845dcVirustotal results 14 / 65 (21.54)Heodo
2018-11-15XqZ5Mk98l.exeexec40e8a646b27f544adf46130a314d9079b2f2dae6a73c64109c669d1be5a6b36Virustotal results 16 / 66 (24.24)Heodo
2018-11-15aiySiwqW0Y.exeexe56c0995da347c431e5614cdc3417a15a461becbadaca728e2e1fbee68092cff5Virustotal results 17 / 68 (25.00)Heodo