URLhaus Database

You are currently viewing the URLhaus database entry for https://grinai.com/web/iiz36l9bg_s0qjcz-661523208732/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:189834
URL: https://grinai.com/web/iiz36l9bg_s0qjcz-661523208732/
URL Status:Offline
Host: grinai.com
Date added:2019-05-02 22:53:05 UTC
Last online:2019-05-04 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-02 22:54:04 UTC to abuse{at}hetzner[dot]de)
Takedown time:1 day, 20 hours, 18 minutes Poor (down since 2019-05-04 19:12:15 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-04FILE_1126660684US_May_04_2019.docdoc 9547c3f40f790fab370c5620245c7736282c4931b82100c519746d8f3b072bd8Virustotal results 33.33% Heodo
2019-05-04INC_7212651892US_May_04_2019.docdoc cf3d4fc7080d12f23a1a7718b0fdbcb958eef9121a01f094080652c4c5af354cn/a Heodo
2019-05-04LLC_7514185073US_May_04_2019.docdoc 11c1c08a8e5d18d34366a0d06367b5f0b68230c838a478d6025368ae138cc449Virustotal results 32.79% Heodo
2019-05-04FILE_316036343168US_May_04_2019.docdoc 3b7b28b3da34f41ddbd1a6ccfe94bb0726c1d50bb42ca83b48db7fb0ca542ce8n/a Heodo
2019-05-04INC_32120445100US_May_04_2019.docdoc 57a5bbcdb5c82c0ec00aa7171455f15b71140821c09c757cc99cce411dbd3cffVirustotal results 32.79% Heodo
2019-05-04FILE_588044732623US_May_04_2019.docdoc 5354f08d420e5f3b9e57955862ebe8414beccf3871d49e4283ad1a37a5757f8dn/a Heodo
2019-05-04INC_48934253549US_May_04_2019.docdoc 321e1dfdb20d4f1a378472a4b3055a9c98804173e5e0c362039c3a118ab8e24bVirustotal results 32.79% Heodo
2019-05-04DOC_6275933952US_May_04_2019.docdoc 62a855e0227babfb4bc434e97e7da15ecbef799c1f9914ae5eb92fa8161d8d6dn/a Heodo
2019-05-04FILE_7060472702US_May_04_2019.docdoc 9511d101ba9bfcd30e531d25c00bbd8d0aa487645425398343c58574886ad427Virustotal results 31.15% Heodo
2019-05-04Document_031153305903US_May_04_2019.docdoc e308c87030596d6f208f7166d05482820d0218e2d2f2dcb4d2b95044022583d4Virustotal results 31.67% Heodo
2019-05-03Document_43840310352US_May_04_2019.docdoc d94ff5aadd33871bf10b2316e3d14e19520506724771f95749210248b7931effVirustotal results 32.08% 
2019-05-03INC_3002522386US_May_04_2019.docdoc 9134f010ba61c78c8dd064852b3d3245294c936e8a7c6c26577f24bbeb985971Virustotal results 30.51% Heodo
2019-05-03LLC_5560738895US_May_04_2019.docdoc 0282a70dabec4f4b6cc1f477cab7a97e23558677a0b6d8bb55f329b9719deb5en/a Heodo
2019-05-03LLC_98586093390US_May_04_2019.docdoc eeec0046cd334722d51b9db31e8c18d1d6ace4246c790bbbc311d553c2f3ddd4Virustotal results 33.90%Heodo
2019-05-03SCAN_601142333080US_May_03_2019.docdoc 652704b888af5863f0257488f71983c3e23f71e3911227f79673a42bc0106331Virustotal results 27.87% 
2019-05-03SCAN_73794748220US_May_03_2019.docdoc 713731afc7b088f533618af3af16111a8d182496ab0fc2964a575fa5dd5152efVirustotal results 28.33% Heodo
2019-05-03DOC_739895382496US_May_03_2019.docdoc 89f70f1ea8bb56015eb8427c1900918320be4468fdd858cd59c410ff5f6fc1f2Virustotal results 28.33% Heodo
2019-05-03FILE_95732955940US_May_03_2019.docdoc 96973059c987c115d57614d9f730f3acf54956b3c502610929bca5221e635134Virustotal results 28.81% 
2019-05-03SCAN_36175817937US_May_03_2019.docdoc 47ff1922c8bf5e9e4944d5d3703858836ae1acbb1387c2cf3280abfe1eb20632Virustotal results 28.33% Heodo
2019-05-03LLC_3129310493US_May_03_2019.docdoc 47d5b493497550fbfa7b76608e82b40b7432ec6fd0efd5b162d1901a189133f9Virustotal results 29.51% Heodo
2019-05-03FILE_01684919960US_May_03_2019.docdoc 6acdb5b39fdd7d5976ee9480efb4121c18ad2eac2c99672e44f9b1ce729d0a5eVirustotal results 24.56% Heodo
2019-05-03FILE_18695079991US_May_03_2019.docdoc 79b6f593af071528bec7bdf1e1dc916bb1fb622dee27050b56b399c55c654cf0Virustotal results 29.51% Heodo
2019-05-03Document_134511990548US_May_03_2019.docdoc 678b5fc437b1cd3e051dbc63130bdc93a77c4abc03ad2a337b7713648aa9ce78Virustotal results 30.00% Heodo
2019-05-03DOC_43450614571US_May_03_2019.docdoc f029880d606aa137ede992ecafc9cb518d5e0464266b497cba4d10ddc6a6925fVirustotal results 29.51% Heodo
2019-05-03INC_58872991990US_May_03_2019.docdoc 5eab415d3c6dad4d5ddf19f49aafd0a4623a6abfa80950f2a021e73cbdef77e5Virustotal results 27.12% Heodo
2019-05-03INC_738433761972US_May_03_2019.docdoc c210dbd9324b5c7aac98391d73e4dba9b552ed32a7463c91f5ee2b2a0132ec4bn/a Heodo
2019-05-03SCAN_90356645065US_May_03_2019.docdoc 405e58903f88ee4859fc1ffd4d8449d2a8cb49ea316b6a7e98c6a0ca46239f24Virustotal results 31.15% Heodo
2019-05-03INC_7911340237US_May_03_2019.docdoc c8e8b66dc6ffec6967656987f6a3f563ce4d05ec39ed7b50553f014ec1c80e48Virustotal results 31.15% Heodo
2019-05-03Document_9461873669US_May_03_2019.docdoc d2d2a455578a38b9a564aaa771c3f8464d8158ed7eb6f94cb692eda8ffc5eb66Virustotal results 31.67% Heodo
2019-05-03LLC_2795402920US_May_03_2019.docdoc ea463dfde8a57310c7b88c38c7ed0168db56e53605cc287be2286a45c78c8434Virustotal results 31.67% Heodo
2019-05-03INC_68979793555US_May_03_2019.docdoc 102c8717b67895eb8d47a5a6ab4101ada8a8f08dfac2ecac5c3dda691a03d3a0Virustotal results 30.00% Heodo
2019-05-03Document_5121351252US_May_03_2019.docdoc 990801c1de058647b506c19565ee7abf0c886af33defe87c185c91aa65f9b579Virustotal results 41.67% Heodo
2019-05-03LLC_442366125581US_May_03_2019.docdoc 8217083c9e4b5ff7f2e438a2e50d8fbc5f75cd170801dcbd6bf1592b4ee6e76en/a Heodo
2019-05-03INC_332152329783US_May_03_2019.docdoc f268669cf7822cdb42f9407a39e23549e79930c64deabf9fb45acb7c33aca728Virustotal results 37.70% Heodo
2019-05-02Document_2442646761US_May_03_2019.docdoc f38d5609ce63487e3e63cdd748f198d3e2afff98ee43ed99880ccac6a883d3b6Virustotal results 35.00% Heodo
2019-05-02Document_753760038372US_May_03_2019.docdoc e94720b4121c2f2d41e0ee3d754100229d76b7f7085c5700cc059ac806f0a59eVirustotal results 39.34%Heodo