URLhaus Database

You are currently viewing the URLhaus database entry for http://www.xn--12cn2bhl5d6c7al2lna0fta.com/update.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:9871
URL: http://www.xn--12cn2bhl5d6c7al2lna0fta.com/update.php
URL Status:Offline
Host: www.ท่อตันเจ้าแรก.com
Date added:2018-05-14 15:52:15 UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: JAMESWT_MHT
Abuse complaint sent (?):No
Tags:GandCrab link Ransomware Ransomware.GandCrab link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-05-17n/aunknown e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855Virustotal results 0.00% 
2018-05-171.pdfexe 70b2ad601664d79c07d96071f16e07aa637b380554fe5ff131e0b739bc68f82fVirustotal results 37.88% Ransomware.GandCrab
2018-05-161.pdfexe d2f851fd60e85be31a5c5015c1cab7021941a09dd274682124d85abaff49f641Virustotal results 34.38% Ransomware.GandCrab
2018-05-161.pdfexe 1350d7e63c71391b1315ccd5e6d64fd47b05a4b0daffc26d25482340b645ad84Virustotal results 42.65% Ransomware.GandCrab
2018-05-161.pdfexe e804fe8fe0573df48218d70c19e21145d504da5ed3e3e6100442e3b52996c3b5Virustotal results 37.31% Ransomware.GandCrab
2018-05-161.pdfexe 33cd21c3796ebbb324a52ad26edbf15542043977ff3bd4c308246f096b5c4288Virustotal results 35.82% Ransomware.GandCrab
2018-05-161.pdfexe fe26b3e32dd87960bb9b6081e49f618fe85b0a9593cc755a086284f2156d5b3bVirustotal results 43.08% Ransomware.GandCrab
2018-05-151.pdfexe efcfe2c77cd49d1d9bbcee820c40e784a70794a8e4c4b7eaf651a8c584db8942n/a 
2018-05-151.pdfexe a42057415aafb008dbde0367994084f98a23ac79d4429f580c4ec7f92774ac4eVirustotal results 33.85% Ransomware.GandCrab
2018-05-151.pdfexe 79ea45b1141089ca6ea7b8dc59cf7f44912982c7e0f890c15a577528f9d657dbVirustotal results 30.30% Ransomware.GandCrab
2018-05-141.pdfexe 43a4b51f23ac8c863bbc1b22b58c743e7646b85def629ef1e92f81c36cadee54Virustotal results 30.30% Ransomware.GandCrab
2018-05-141.pdfexe faa7c0319331fc77888a5d150b4e5f582d075a6379d2ffd8342cee092ee6f849Virustotal results 34.85% Ransomware.GandCrab