URLhaus Database

You are currently viewing the URLhaus database entry for https://graniteprint.co.uk/derivedness/JIN_8864/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1972212
URL: https://graniteprint.co.uk/derivedness/JIN_8864/?i=1
URL Status:Offline
Host: graniteprint.co.uk
Date added:2022-01-13 00:16:04 UTC
Last online:2022-01-18 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: sugimu_sec
Abuse complaint sent (?): Yes (2022-01-13 00:17:09 UTC to abuse{at}fastly[dot]com)
Takedown time:5 days, 21 hours, 12 minutes Bad (down since 2022-01-18 21:29:41 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-148304_27613.xlsmxlsm 4c26657af2c3d125e367f56a36faf49573f77c6a9af55143175ad81263569504Virustotal results 22.58% Heodo
2022-01-1476729_807.xlsmxlsm 212776ac19bae91f65534fa3995bc54aaea2fa402380cb3d9aefb4cfb6a1a302n/a 
2022-01-13825_7379252.xlsmxlsm 29154824706d6615c15ccf36a9cb16c3a3348916dcd95844df4301f1a16e1187n/aHeodo
2022-01-1316825257_78927.xlsmxlsm cbfdd288ed81b34166f40cbb96b59bf5836fe4dc0f06b4f121a97ad11fed7786n/a Heodo
2022-01-13TehG_443264.xlsmxlsm e020f5b35d29bb3f229bd162a0fae0de5d977d49db96f1f3e06fe40a24c19679n/a Heodo
2022-01-137817OPCJIWUO-09139.xlsmxlsm 30a24f31a5ad5ce7d7ef2452f76f767be97dda2bac031dbbaa744ec0ba5993f7n/a Heodo
2022-01-135570574.xlsmxlsm ec995f8d459c0874c745d8677b81fddc202d0f1588488797bd81654f025a037cn/a Heodo
2022-01-13rEwDhO55.xlsmxlsm 6aba2f1108a54a6e94dddf1fd12bc6f4b8b8a6d083fc5481e8ad35dc9b20b192n/a Heodo
2022-01-135527974_60388078.xlsmxlsm 115b1bbc0363cd535f4336aac31bed3fa17e2c2a4ebcb15618e55c9dfc91896bn/a Heodo
2022-01-13411215.xlsmxlsm 73aba3d6a7b537481c898581b8ccc0131152c0d0fc93500b4c562db824073360n/a Heodo
2022-01-13BLR_24931.xlsmxlsm 109868bbf981851bac44548c11bee90f08fd3c83e06c9b9539f568e047f45e0aVirustotal results 32.79% Heodo
2022-01-1318_4566872.xlsmxlsm 8440f26c78450c4b1f022a497363963b84b99da232ca91b5da7f4aad2234bbc1n/a Heodo
2022-01-1309236_713.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cVirustotal results 26.98% 
2022-01-13K_929.xlsmxlsm 6a8fc7cb880a404032161e81d67152873581b6614b238faebd731fb7fbd8cb92n/a Heodo
2022-01-13070403-4947089.xlsmxlsm ae4c37f20738b2bc766ca1b1437dd27be15c5a86e663f8ce3fc8be6762483305n/a Heodo
2022-01-1329412293XTU_11516613.xlsmxlsm 1080082d0eec3c4e3583b6e259b0863c746d211af8a8b6b645b21059e60f1119Virustotal results 14.52% Heodo
2022-01-13SMU2324.xlsmxlsm 49ec26f8a352003e43a32615495ae4554e0bb8485ef889e7ba57cf869f026c4cn/a Heodo
2022-01-13mkgooby-87267696.xlsmxlsm d96dba578ec6bbb043e6ef20f9f43779bd471f5329b9ba5416a0a4785564ebd6Virustotal results 20.63% Heodo
2022-01-137768_30329.xlsmxlsm ae8e1d5678b54ef2ddb35fcf1233370916f4e2355f1aeb9066b9f7e12d07bcacn/a Heodo
2022-01-13sm_3372875.xlsmxlsm d9d0e65da97a353a9cc189af41082ae0bf1dff0acb39bb620a34ddb0c642ac79n/aHeodo
2022-01-13530307811326.xlsmxlsm b98bb81e71273e575642ed7f7099c846ad35017b883a860554a891c23ab9595aVirustotal results 8.06% Heodo
2022-01-138388-01.xlsmxlsm ac8219f7bf6ba3f72506c84bee52caf739e9bfce0d43c4ccf69a0ad7480fcfc1Virustotal results 17.74%Heodo
2022-01-13369_077.xlsmxlsm 91320f0c0bd99f15b71eb4d0eabb4f5fbe3f5d90b918b365621f539bf7bdc19eVirustotal results 18.33% Heodo