URLhaus Database

You are currently viewing the URLhaus database entry for http://goodmarketinggroup.com/newish/97231171/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1973338
URL: http://goodmarketinggroup.com/newish/97231171/?i=1
URL Status:Offline
Host: goodmarketinggroup.com
Date added:2022-01-13 08:55:05 UTC
Last online:2022-01-13 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-13 08:56:07 UTC to abuse{at}a2hosting[dot]com)
Takedown time:10 hours, 22 minutes Good (down since 2022-01-13 19:18:29 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-13970700535459.xlsmxlsm a139884d68aacbe19a1b68501de5392ef5ba05cc3eb5a5b2ed0c347db44af4can/a 
2022-01-13543093144.xlsmxlsm 5cf53f9f40389a8c56abd3a90681dadd27c0db904fbc2422ec9baa37e84c1584Virustotal results 30.65% Heodo
2022-01-13CQ09483.xlsmxlsm 8731dcd378702d6a9d4a679e338cbd69e94a5030d0dc0520456e30760f81cc6en/a Heodo
2022-01-1330611.xlsmxlsm 4c82d1c41c6287dbc29a8404a82c908dc052b2b7120ea9e58c0cec067ad4fca2n/a Heodo
2022-01-1372APZDRCDFE-81027.xlsmxlsm dc8adc8e13d3e5a64f2d69f2163da90a19cd80594bf4db6b8d17c381312d28b6n/a Heodo
2022-01-13874019536753.xlsmxlsm 3e8ac5b89fdb8697813438a75aec6df15ad029e5c499a023f5bc7a209ff1b13bn/aHeodo
2022-01-1337290_474.xlsmxlsm 78dd5816d66701839612b5caf64d4337e45d516e52b5f177345f5019ce4aa907n/a Heodo
2022-01-13TK316.xlsmxlsm e07efb44e73f01e1cd957c1874bce0e453c91eaa561f46efb373edb97100320an/a Heodo
2022-01-1313560_12007547.xlsmxlsm e8da2349f8ec549d999a3e63b1f859f0452b0301aaf4fced70ecbba675b81247n/a 
2022-01-13962-39.xlsmxlsm 7d20451deedc42248ceeb3cc205328d45bdc50d6d9a652f08773d052e1c598cen/a Heodo
2022-01-13681993-7925.xlsmxlsm c9d6e67d61769e32b703185a1035e43bbc9c7c053cc1d06594fad3979da3cc9en/a Heodo
2022-01-133090728162782085.xlsmxlsm 41750a936f4e59a899e45972dd3ccf154305807c52bd7e5f5b19344e909f86baVirustotal results 33.33% Heodo
2022-01-1374624424ZQTR63.xlsmxlsm 5d7049ddd0c94d31087e9b7809dd67ab2c097e01ffacb571225e7ab561f57f39n/a Heodo
2022-01-132843_2.xlsmxlsm 08c7c9f40c6db283966c794771c90b7d9f65dedfb785b861e02187f62f0dc0c8Virustotal results 32.26% Heodo
2022-01-13D02105240.xlsmxlsm 4624a6c75a73e206d26cf23225ddf8c14c9bd3fac85edc04aebf63a281aa8bd4Virustotal results 31.75% Heodo
2022-01-13356339GYZDQRL-11531.xlsmxlsm 399fd8ce9218a6b24bbf3c9e307934df9b2954d45119371365be1360c88ec6f5n/a Heodo
2022-01-13gxrst944369.xlsmxlsm e867e8691b17fd95fce36eb933b1c36744f45513e44d931d07bf95229e47bef1n/a Heodo
2022-01-13HH_50200.xlsmxlsm 6acfbc04a4d8ee5bed51c551d533b4b99936760fdf3f6db32d1216130c89700cVirustotal results 26.23% Heodo
2022-01-137697246-40.xlsmxlsm 1837567c1c4771488aaff8602f2c98711463d9afd7dbe2a3ab3413e37e30f610Virustotal results 28.57% Heodo
2022-01-13UZ-993162.xlsmxlsm cd1b8b06a27b93f21a8da161ab4af2768ecdcbe5f8f5122d89c33caf145da46cn/a 
2022-01-13WZY8545.xlsmxlsm 13f975538e7e72ac755218c6a35604d36e0278e74fed8e2270476b89268a7f2cn/a Heodo
2022-01-130894208_9193078.xlsmxlsm 726be01c1600c33b9a3d322885ca12383ec5b64546bb389670176f77f7faf162Virustotal results 19.05% Heodo
2022-01-1384_4924678.xlsmxlsm d47dc5f481df3ec15f19e8625c29b0beaf33c401b23191b818c9ecf885e3c8dcn/a Heodo
2022-01-1399104XQPAMG-0641.xlsmxlsm 754f7e434244dc42cc7f44ba6675d5b35fb7aa82b352b1356f16978ff8c3533cn/a Heodo
2022-01-13ZN_43.xlsmxlsm 91a5d84ee08d2f207c285b99e1fd370df43a7e9736c626e672d89cd7711cc6ebVirustotal results 24.19% Heodo
2022-01-13IN_279.xlsmxlsm 333b10335a845fe3fe0445baa8b1074298419a02c030c8c32b69652f1745ba88n/a Heodo
2022-01-133267216_1265.xlsmxlsm 8dfa5abbde7a4d277e87b8acc67cd5ea32f258265f900029c3aa200c4bcf58dbn/a Heodo