URLhaus Database

You are currently viewing the URLhaus database entry for http://groverelectronics.com/gg6whli/PLLULWLhssdrHryZq6kMwlrGO/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1993399
URL: http://groverelectronics.com/gg6whli/PLLULWLhssdrHryZq6kMwlrGO/?i=1
URL Status:Offline
Host: groverelectronics.com
Date added:2022-01-20 18:11:11 UTC
Last online:2022-02-03 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-20 18:12:57 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:13 days, 19 hours, 39 minutes Bad (down since 2022-02-03 13:52:49 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-217685899861500202.xlsxls 6407591df6ce61f946e24715faa6fba1b1f3221e2baf22f6c4f5a64f1ea98eb5Virustotal results 36.67%Heodo
2022-01-2124863214351162105985.xlsxls 3ca3bcd5771a06938cc8e8c44cd2c85b794376401b469fad7e5d4b513449fa27n/a Heodo
2022-01-214842088013048213671.xlsxls aba8e5024172cc0cd240eda2c379e91825cb922f0c5d56d82a560dcb15eef097n/a Heodo
2022-01-217801228564890930.xlsxls 5a6ae409ad46c453172d047a1b1d7685cbdcc317653d90c6a968509d1c2229b6n/a Heodo
2022-01-21400787804229950106.xlsxls b8fef9073b247386d53e1eba4723994cf6300b257f2b637cb1eccead6b68904cn/a Heodo
2022-01-218863866904898252.xlsxls fc79dd33ef2208cbe871b54938ff2ad295a34cb9a720e4995853dfed5761db18n/a SilentBuilder
2022-01-216726343468.xlsxls 29111d8e5e8306e76660db292e7232ab39e901955014eede21e912c931a09b5fn/aHeodo
2022-01-2158409599494116248038.xlsxls 3d14cf1ac0e948d8d736d86a089783fc5dae612426213cbead14ec631ab46fddVirustotal results 22.03% Heodo
2022-01-2174783405805702744.xlsxls 649143ea8e6ec1173106ac1bc3034951327ffc75a1d8324a1b80d280998e2fa2Virustotal results 23.64%Heodo
2022-01-212524743467477158.xlsxls 71ef7935e65760f4ec2fc7a2d24246ee5db75c28000b0a7303ec8ac0c9e98634Virustotal results 22.03% Heodo
2022-01-2107050942518763199.xlsxls af86124d12773c861ad103419ab9f04ada33b95ff6919a1a9f9c4dfe2d49131fVirustotal results 20.34%Heodo
2022-01-2049051444923.xlsxls 5d36041450aacaf14696b91009e0d0724695c47586467dfad802076b3dd6adden/a Heodo
2022-01-2056808734427410302.xlsxls 536582463c4d7bc11c931e61b72316d539e0b4ed677451ec3ab8942f6a02a040n/aHeodo
2022-01-20919061530765822.xlsxls 514af468cf8a54d3ba4fd08208de3119721d9a9b5e4d2c96373add4d3dd7688dn/a Heodo
2022-01-20558161161002247793.xlsxls afc76f4aa05482102ea34e10b3d2397db55857510ce6ae3dcfe05e29cc92bde3n/a Heodo
2022-01-20004486137544.xlsxls cc087101e48ffeece56deba54e6da814a6d35e371396b07cc4e10b121aac9907Virustotal results 22.03%Heodo
2022-01-20662442335533165.xlsxls 02beb553bb2d04182e73cf34f42a9dc4c52f84b4278e97f9fbce8f111af576d3Virustotal results 22.41% Heodo
2022-01-209439231244731.xlsxls 0450c09d5fe3db81273bb016f057664f805ea0dde2c1c53ad512324c191ac2a5n/a Heodo
2022-01-200932176107600.xlsxls e099be7b0c6f692f34ca73c32d72d85e9f0465fcf630dc6d929ff4280496c27bn/aHeodo
2022-01-20400757155044040293.xlsxls 51dc452edd7c975ac8f632ad888d6cada4233c19aa061416076abbdb2ac596b4n/aHeodo
2022-01-203882699714696673080.xlsxls e33811b4dab432d10d50a8357ec88ab255590ac412e6a386ae3cee55c40df20en/a Heodo
2022-01-2074921069887806566915.xlsxls caa57a0d7208775ee50b80b88384a83804e8b132229162b88db9a3a57abb7acbVirustotal results 20.34%Heodo
2022-01-20291226423320455.xlsxls b1ee7aa00b7884ed02a3f5ddc07419b6e8dd6e7382269d8cc5511f06431d5eafVirustotal results 28.81%Heodo
2022-01-205128583803279439.xlsxls 4102ee23d580a34ad9a1790ea81e7d9739cae27b843165e0daa30b9450585db4Virustotal results 23.73% Heodo
2022-01-2008161167827.xlsxls 88c52c4d1940f16219506b7c10ded1fa314e5f05e0aa03cf441a7dee30f41aa6Virustotal results 22.41%Heodo
2022-01-200772909306.xlsxls 670b10a706a22c6efc34af36bf591688d08eb44be993d5901a66525c6369bd9eVirustotal results 40.68%Heodo
2022-01-200772605814.xlsxls 23dc54d35406a09e9c7ebc21aed24c81434f62784b5a94ff6b762b39008d3a05Virustotal results 17.24%Heodo
2022-01-20580515128484274749.xlsxls ad511015e8c542a03954c1be8721ddcce85dbe997f7b2048bc6e1b35823c5ffcn/aHeodo
2022-01-200309464932316.xlsxls 039adcca4d205850117d5b2348ceec561c57868668ab822350ef94a9b9467842Virustotal results 41.67%Heodo
2022-01-208929452449491990.xlsxls a871770ef1ba329147828026ab5d7d1d0edf83ea93fca2bb2d0faada51cf48e1n/a Heodo
2022-01-20306147052485475.xlsxls de3619e7da8c2b8e8ac00a4de35718d5bc5b618410c3b8948c24ee2f3cbcd593Virustotal results 45.00% Heodo
2022-01-206471871251253294228.xlsxls 909664581c9c1270d91b217c94841e2f6035a12c5f15725c384b2fa746b0b3ddVirustotal results 27.12%Heodo