URLhaus Database

You are currently viewing the URLhaus database entry for http://www.xn--12c3bfbjn4brbb4e7a5cvab3gsn.com/update.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:9820
URL: http://www.xn--12c3bfbjn4brbb4e7a5cvab3gsn.com/update.php
URL Status:Offline
Host: www.ท่อตันสมุทรปราการ.com
Date added:2018-05-14 06:45:52 UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: JAMESWT_MHT
Abuse complaint sent (?):No
Tags:GandCrab link Ransomware Ransomware.GandCrab link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-05-17n/aunknown e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855Virustotal results 0.00% 
2018-05-171.pdfexe 70b2ad601664d79c07d96071f16e07aa637b380554fe5ff131e0b739bc68f82fVirustotal results 37.88% Ransomware.GandCrab
2018-05-161.pdfexe d2f851fd60e85be31a5c5015c1cab7021941a09dd274682124d85abaff49f641Virustotal results 41.54% Ransomware.GandCrab
2018-05-161.pdfexe 728e8402a7bede667ca5e0e3569d973c74281b4c0f935d7a354fba05068450aen/a 
2018-05-161.pdfexe e804fe8fe0573df48218d70c19e21145d504da5ed3e3e6100442e3b52996c3b5Virustotal results 37.31% Ransomware.GandCrab
2018-05-161.pdfexe 4dfe18b3f86e0435ac138845e74b63243d58ff9dc4210cc1d80e9508318fc6ccn/a Ransomware.GandCrab
2018-05-151.pdfexe 85bb72bd40ff08c337e6881a5b3ba82ebbbc17726e5d1b710f8dbf222e196b2aVirustotal results 39.39% Ransomware.GandCrab
2018-05-151.pdfexe efcfe2c77cd49d1d9bbcee820c40e784a70794a8e4c4b7eaf651a8c584db8942n/a 
2018-05-151.pdfexe 9e2d0e89cac0ef635885714096b3c5f79fa7649766a2833a61f9f765b576cd25Virustotal results 21.21% Ransomware.GandCrab
2018-05-151.pdfexe 79ea45b1141089ca6ea7b8dc59cf7f44912982c7e0f890c15a577528f9d657dbVirustotal results 30.30% Ransomware.GandCrab
2018-05-151.pdfexe 274776b15313ea525a39920b4900392f9ea6086c62fb7b2add0f607c8eb3ef38Virustotal results 27.27% Ransomware.GandCrab
2018-05-141.pdfexe 43a4b51f23ac8c863bbc1b22b58c743e7646b85def629ef1e92f81c36cadee54Virustotal results 30.30% Ransomware.GandCrab
2018-05-141.pdfexe faa7c0319331fc77888a5d150b4e5f582d075a6379d2ffd8342cee092ee6f849Virustotal results 34.85% Ransomware.GandCrab
2018-05-141.pdfexe 3ca4020551bfda5ad08253c4248545eecbffb74f3cfd8eac3e7734eb383827e7Virustotal results 36.36% Ransomware.GandCrab
2018-05-141.pdfexe 2f3b3f6335171a9c9cccf9c054f0302b0bb9d24b440574711aab283f2df5956an/a Ransomware.GandCrab