URLhaus Database

You are currently viewing the URLhaus database entry for http://grf.fr/css/K_uO/// which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	177038
URL:	http://grf.fr/css/K_uO///
URL Status:	Offline
Host:	grf.fr
Date added:	2019-04-13 05:05:09 UTC
Last online:	2019-04-27 07:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-04-13 05:06:04 UTC to abuse{at}oneandone[dot]net)
Takedown time:	14 days, 2 hours, 50 minutes (down since 2019-04-27 07:56:43 UTC)
Tags:	emotet epoch2 heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-04-14	i_Qg.exe	exe	5dd29af41e7a2806861f8da5899181ff3a5869f7275bd22eb9a6fb682cf7e93a	31.82%	Heodo
2019-04-14	TZ_ye.exe	exe	e3d8a0322fcba219774202a24401cc1b9901b181fdd9dc522df21dca427624a0	n/a	Heodo
2019-04-14	a_43u.exe	exe	694029d0ec4cb7eab7ee2417dff97debee3e0c5c3ae6dee55a4bf489a037bc48	30.88%	Heodo
2019-04-14	f_TU.exe	exe	eca29086b742712dfed485601040272a729173053e1343d72822f43829e00fc8	31.82%	Heodo
2019-04-14	vsN_xK.exe	exe	999fa4ace8b76a39f9b8a7a72a02a292a405b69ee90439597889d967869f84ee	31.82%	Heodo
2019-04-14	Qe_JB.exe	exe	cf74c556a4a66d233bc8e9812190378e03120c5cc9a00e09b29d661094575f77	28.12%	Heodo
2019-04-14	F_o.exe	exe	e62ce5740c43ee61e81af3f7d409aaa3580e987ec7f41961e88adc8302c66c7c	31.82%	Heodo
2019-04-14	Z_d.exe	exe	7c8aa875613ab5c7579344d11932811a52ec100188f909c37176e70aec32d95a	31.82%	Heodo
2019-04-14	E_h.exe	exe	fc9ea4e44644b361e0f80fce4d06aae4b27186ee9ce385af19a5fb4e99ba6852	31.82%	Heodo
2019-04-14	y1_7ZJ.exe	exe	48f4ae23d7f0945945dfaf0f57d54d5016ea0297cf0a8bdfc704dc1bb0c6a99a	31.43%	Heodo
2019-04-14	N_L.exe	exe	ce2bdd5a5e4dfe9d17b8e97756cf4790c9f9bf2a29900b236412c36c163c1b65	30.00%	Heodo
2019-04-14	F_M2.exe	exe	6b4169ed753cc7af0a55bd0ce57a521257823464479225321b1bd6295b1d67d8	29.85%	Heodo
2019-04-13	BR_W4.exe	exe	40375b904c085eaf1da5299be9d10fac4f2b2a1a72225a78665c1cfd83131cb9	30.43%	Heodo
2019-04-13	Vg_CNx.exe	exe	7ed0d0092cd56bce7095430e20bd677cc7b18dc04d6d59117b5e00e03bd7e0e5	n/a	Heodo
2019-04-13	jlV_nN.exe	exe	fe6e7afa7ee006a0e439fa0907e183d833d47bb4729b64c2d253c36c6908e3e0	26.56%	Heodo
2019-04-13	vvq_5x.exe	exe	25f1a3299988ea5904900114f359d1a7398cf2e41be0067cae5c795a6cb8e955	n/a	Heodo
2019-04-13	y_g.exe	exe	3958b5560181874d841a3d56f2c68d0f42667cc529581ab9b1ad0ea6b95e4480	28.17%	Heodo
2019-04-13	Ss_z.exe	exe	9336f4dd87b24d7c040b6427df9eaf289c98cb94b1bd5bb0dc9dc95a9346b6f0	26.87%	Heodo
2019-04-13	G_3.exe	exe	180d57dde59998ed3a2c11eb5ac8d25b9738c7f5d57b8cb35bdb7380ca626a10	29.23%	Heodo
2019-04-13	k8_0t.exe	exe	7cc84473f5b6da062306a8398c1e326ac1d73c2c9d44b563644085d6a0f068dd	27.27%	Heodo
2019-04-13	wT_m.exe	exe	9c87e061283d0a546f77f627eb654fa62f6b0694a2f300df19e46b11c5b00c3c	25.76%	Heodo
2019-04-13	Hne_lTT.exe	exe	a17cfb016c2775b5958ceae8a233e374389912aba5027abb456c61b75ff0bd86	28.79%	Heodo
2019-04-13	5H_bND.exe	exe	fa9bc3da655dc237d8c5c52318f64309531d8c0692c12688fba135e18ff83d78	31.43%	Heodo
2019-04-13	LUo_pg.exe	exe	1a30bb3202ca96a3a8d0a939ef6cf91c11c768cb07dac526fc5a04da3d0dca86	20.00%	Heodo
2019-04-13	Vy8_Xq.exe	exe	5fe53b6b9b3614df408e73bd6935d19bb931392e11e11aead27e259438429a2f	21.74%	Heodo
2019-04-13	3J_dz.exe	exe	d8c50ef1ff9b677cfeaab0c9dc7b61982d76fa1442a6aa0bd67415f7b91b0db7	19.40%	Heodo
2019-04-13	nNq_F.exe	exe	6437b90cf1828751b71a0a46a189fd6d41f69862f3dc4170bf631e8f2fc59b57	19.40%	Heodo
2019-04-13	Il_p.exe	exe	549fc0dfc82428af59fcf0403192e9dfa68dba4b7c1d57972ae28ed07fd9e60e	21.43%	Heodo
2019-04-13	Fu_PmE.exe	exe	28143e132fc33c33542cfdacb0191a119fb29a00c8f8ea53aff9a99530ab4b13	19.12%	Heodo
2019-04-13	o4_P.exe	exe	5a00b2125c9728515b4d786fbd8b2a2e526d80719fcef8772f14cd73cc6a15c2	51.39%	Heodo
2019-04-13	Z_B4.exe	exe	f552d1983389debabcb411a0791346861688ba943250656cf180ab1e6991c1cf	49.25%	Heodo
2019-04-13	kY_fvz.exe	exe	1269f1a08307cc95a57c5ed3d8d478608eaf8d9046ed33a441937f3ec1f41d28	47.06%	Heodo
2019-04-13	mvH_1s.exe	exe	853e2e7450f50556690f3bb62c0b20aee96711e9832067f99450e3c90a737b60	48.61%	Heodo
2019-04-13	pB_B.exe	exe	f6d0b907c9f90e0cccbe6aa89fbbffb99e3116da22d8d215d71a8379f9774588	47.06%	Heodo
2019-04-13	m_Y.exe	exe	c4981ce57ef2d35215258c22da0f83fe93d445e3d465dde16dccc22ae87b9d17	46.97%	Heodo
2019-04-13	F_bn.exe	exe	159f3fd270cce5f6acba2fbbcdef5f2213d5093b07c7e2ecdcd918b90ec098d0	46.27%	Heodo
2019-04-13	kkH_DTV.exe	exe	14656961a3ce2d67dafa3ba60370891a4e207cb1b39929252917bbdebf6db509	45.45%	Heodo
2019-04-13	F_a.exe	exe	01e0cad3fcb873685af6fb78409676c653d26867925b1313425b6a049276f3e7	45.45%	Heodo
2019-04-13	I_m.exe	exe	f3de84dad5e8d7d3f30ee90d96b479c7c1747a60f560ca1ad07bea41710587be	45.45%	Heodo
2019-04-13	X_g.exe	exe	11259c48302eb4646a0ee54ca69bb74f165feb2ebea03cee8aaabf2874e8cf4f	44.93%	Heodo
2019-04-13	Tx_V.exe	exe	893f08bc316be45144d8a78fe268a385b02865cb27d9f07f43fd3e6bad808be8	42.42%	Heodo
2019-04-13	oyZ_THu.exe	exe	5d7f74caf9a833f591e2e450e008803b5eb743c8fec259d926f3611387cc047d	n/a	Heodo