URLhaus Database

You are currently viewing the URLhaus database entry for http://www.gauff.co.ug/8nTTllUXDC/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:80767
URL:http://www.gauff.co.ug/8nTTllUXDC/
URL Status:Offline
Host:www.gauff.co.ug
Date added:2018-11-15 10:22:04 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@ps66uk
Abuse complaint sent (?): Yes (2018-11-15 10:24:06 UTC to abuse{at}liquidtelecom[dot]com)
Takedown time:5 months, 14 days, 3 hours, 21 minutes Bad
Tags:emotet epoch1 exe heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-11-17K3HJ9QZjtq.exeexed5376e3daac7263887a471762477848e181ac4b9d20d8452004e87d9202c83d8Virustotal results 17 / 68 (25.00)Heodo
2018-11-17TceP7PQh85EE.exeexe9bbc51e2470cb7a317b06818b1fd03211effa245c571a873ec9a563ea7923ec6Virustotal results 12 / 68 (17.65)Heodo
2018-11-16UnEGxVYYxr8s.exeexe2e0641942d6fc929de566aa2e26dfde004aef3183c598067aa7771f8f8962259Virustotal results 24 / 65 (36.92)Heodo
2018-11-1573MBiZ1OJC.exeexe5f8aee58ec2f1342e84ed02d276c4369b1c2359a5e57ead9269bc6fa5d67ce59Virustotal results 14 / 68 (20.59)Heodo
2018-11-1567KSAx45BxN.exeexe7572a35079a3f35d0e776e1c8aa29b5ea2c15886dc9ba027097e77ce27672164Virustotal results 16 / 67 (23.88)Heodo
2018-11-15SroDm3QrdDXH.exeexe08542b543ca70e3038b0d4abc880813db65ab091c4c4005987961ee0676ff204Virustotal results 13 / 65 (20.00)
2018-11-15Jhbt6DVwFAQ.exeexe141c5f862c723ab68ca3fa253178ea5f49bcc619f20a147260c2135c221845dcVirustotal results 14 / 65 (21.54)Heodo
2018-11-15XqZ5Mk98l.exeexec40e8a646b27f544adf46130a314d9079b2f2dae6a73c64109c669d1be5a6b36Virustotal results 16 / 66 (24.24)Heodo
2018-11-15mfmsGdcyG.exeexec9aaad2edd9f727557c3741bba80832b3b429b7662c146b34f47ae2dde623423Virustotal results 11 / 68 (16.18)Heodo