URLhaus Database

You are currently viewing the URLhaus database entry for http://gravitel.org/wp-content/INC/TbQxSZJEoZInJEYtPTcgNVmCnJOpmk/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:241539
URL: http://gravitel.org/wp-content/INC/TbQxSZJEoZInJEYtPTcgNVmCnJOpmk/
URL Status:Offline
Host: gravitel.org
Date added:2019-10-09 06:12:29 UTC
Last online:2019-10-20 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2019-10-09 06:14:20 UTC to lir{at}di-net[dot]ru)
Takedown time:11 days, 12 hours, 54 minutes Bad (down since 2019-10-20 19:08:36 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-10-11DOC_EKJ57P46VL7EPK.docdoc eafeedc8839f64e7cc8c2dd9abef1f0934b65aee4a5716e5637acf79f7083f0aVirustotal results 37.74% Heodo
2019-10-11RE_5B2Z9PG6HNDBOT_H_10112019.docdoc bc6d39faad64e70a270ea4eb06fbcf05c459349b21ea6420f3a04ca23e3cfa3fVirustotal results 32.20% Heodo
2019-10-11FA_JT5IW4P4QL_UM.docdoc c8fc8eedc4b906accb507c39a0908bcf54bf11faadbbfe538d843f3638ef893dVirustotal results 33.90% Heodo
2019-10-11FA_4KZXXJX91.docdoc edd0ab17a61f95c20b02d9c7b58ef29911fc287846fdd80d6804d7e325e6b4e5Virustotal results 32.20% Heodo
2019-10-11FILE_93095300040593_10112019.docdoc 33bd1e5d97265753389685d400934b69456479b92137b4b4ff0457e83e7aa8cbVirustotal results 33.33% Heodo
2019-10-11NMA1FB2OLM5Z.docdoc 803eb60e4df6ced789199f41674ab0e5521dbb469d32ad3a2adfff2a7a2da2d7Virustotal results 30.61% 
2019-10-10INC_04519371399.docdoc 51de13d18a23740342f1c681de4cb6c2baf116f2a4df4730c5338439d05823e4Virustotal results 35.59% Heodo
2019-10-10LLC_30304774707.docdoc 47cad341e26f67d00adaf1c4e3d0adf77eafd64d24999e35500e364f046361ddn/a Heodo
2019-10-10INC_3KBDYEK8TVI748_ZM_10102019.docdoc 7a8a800c29c6e9dbf732d98fd5eccb9e78078101fee30d287dc534e83e58a22dn/a Heodo
2019-10-10INC_GAKX01GEYU_10102019.docdoc cc88b6c2e36692379df13967b38df23ea41e6e39403ea6da5bd20097c74d4142Virustotal results 31.58% Heodo
2019-10-10NO8Y09KYKZ4TR_10102019.docdoc 2edaea083ea39aab08670d19867627d5516f1f78efff05973e3524c3f897a4c9Virustotal results 27.78%Heodo
2019-10-10LLC_7707248709.docdoc cc4e1646b1d94db4dae3f14ca2a85a2c46fc3ed193833e0913959b4a07904e64Virustotal results 30.51% Heodo
2019-10-10812758239925.docdoc 8a55de0566e608798651dff59eaf776fc3a270c09091862fe1e0a089a9a68122Virustotal results 30.51% Heodo
2019-10-10SCAN_0612054224627_U.docdoc 9b3076d6ab321a0bfc1762f3f24fa1896f3bcdfdc9fe22081a37a11a92b4ff74Virustotal results 32.69% Heodo
2019-10-10SCAN_7762124428642_PPZ.docdoc cc82bc7177f26107263871628ac0c38e385d8f26010182f0f7fd6352221fca33Virustotal results 26.32% 
2019-10-10DJI_26952160151255806.docdoc a9c3dd24c5d7018ede1f2c2ed330ac15462510f7bffcaaf8badbdb5a4da623aeVirustotal results 25.86% 
2019-10-10FA_QRS5Q8P3M.docdoc 396d30709bc95e4e35aa4f3555c72763de26c34ab5b2eb64b1712d287da7ae9eVirustotal results 26.92% Heodo
2019-10-10INC_039433175313.docdoc 6fdaa046ff8def5c39cb32e45cb3755f9997d46fe8db480f1659f6b48f9f9bacVirustotal results 25.00% 
2019-10-10GKTJ9SEF0NOE09E_10102019.docdoc f75488fdecc020cb293614a8864c2108c3406975002d525853e3e1906cda5125Virustotal results 26.42% 
2019-10-10SCAN_3803519558563_UR.docdoc b95fe809d7d628b0f222e07defab508432feaf10b7793dbf665671987ddda6e6Virustotal results 25.53% 
2019-10-10SCAN_BO2OWWY5JBP.docdoc 361b9eb186d6b5b0cb035335a8b2ed19979af4d7f407455891188860f1b82fdeVirustotal results 25.42% 
2019-10-10FA_MYZNXIWJ5GRQM.docdoc 463b181c8a2ab03ea6d9de29ba46f49516d937f5b20c81784bc4baa94efc5feeVirustotal results 25.00% Heodo
2019-10-10DOC_S2IMO4X2ARORMT.docdoc 9721c4330f905e38fab4232eb4971bfea42bf5195b9953e371ca272e5a93f4b8Virustotal results 25.86% Heodo
2019-10-10FA_8161648057850.docdoc 82822a6d9b3d52a07fb3de64bdeefcbe471e2fb5fa06d31452c07a7c0b71c6adVirustotal results 24.14% Heodo
2019-10-10DOC_6172923738260909_10102019.docdoc 6d12ec981fc193f0f70e1396c9b5d1c687a0f922e8d3abef29aea87a92c97603Virustotal results 40.68% 
2019-10-10SCAN_GXE5063XJTB.docdoc 58eded6711ac307b2b48e309d869ed1c4d88c6a23815973779b6d610704a3f12n/a 
2019-10-10DOC_V00I8G7FKI_A.docdoc 4ce3cd5384e274663b11c2b145e0ae0eced9b2061864841ac0adb8f30977ea37Virustotal results 38.98% Heodo
2019-10-10FA_94ZVG90KQY98IIR.docdoc 7344c6d38f46a38419082b72d7ee3d622be05dc86c93e87f55600942b8da470en/a Heodo
2019-10-10LLC_5933758448956525_O_10102019.docdoc 0c421092cfe868bfc29d2e6f007bf424f8d02edf05fda335f832f5d67fa57d27Virustotal results 33.93% 
2019-10-10FILE_G5F6W0B8W2_PIB.docdoc 81df3c431ac69a6e7e3a86c8dadb02988b5babec45dc15e7c7ef71bd566fe262Virustotal results 36.21% Heodo
2019-10-10BL_681152748834146.docdoc c0e484299000d1bfa92236a4e9dddbff222c9da2d7176c7714737def791a27f3Virustotal results 33.33% Heodo
2019-10-10DOC_4885216050973889_SRL.docdoc 93d3e110f803099c89c63c9e08bece512f373ea47bb55949e2fc9c3d221c6370n/a Heodo
2019-10-1074059199980888376_V.docdoc 6da107e20a4bde15076e46114cd08f53e2a082c6afd30a36b05de9b97fa66474Virustotal results 34.48% Heodo
2019-10-10FT_CSH51ONP4ACG1.docdoc b4dd04c27697f3b87422d720c09d3a81af3823ba993e20e05de8a285932f047cVirustotal results 30.00% Heodo
2019-10-10INC_3976593914272_10102019.docdoc 144d03ea075288b15252acf044fc37f946c00e044fe29ede864507d477c3129dVirustotal results 30.00% Heodo
2019-10-10FA_DJOQJFVY49GOAA2_I_10102019.docdoc f6656a930a16a48259f70d4042f09c64afb7d19cc29e17ce719ea4840eb68e6an/a Heodo
2019-10-10SCAN_447847447849678_BN.docdoc fc13915dcf6948edbe4bb35e72d68abc124fd2703b6d7cb8e54901b490010a75Virustotal results 30.51% Heodo
2019-10-10DOC_79S06EN5DPWQAX6.docdoc 6cadae1df63f52f3abcb5a95d3d4fe31b90f238da742e61e8edc716373a52375Virustotal results 29.82% Heodo
2019-10-10LLC_S49KE71CCW7JD4I.docdoc 4fc7f7b3f725c62a8cbc0ebdb3ce31b92406bd9fd895823d08e478c5440d3e36Virustotal results 30.51% Heodo
2019-10-10RE_34222927347.docdoc e333768e423c4aa3e8d064045ab3245ce04700293b0ea520ebf5e5475ebf8da4Virustotal results 27.12% Heodo
2019-10-106481045062686.docdoc 15d5d87f6ba3c6aee2c9a3f3bc9c4f83f6c42ed0ea305eec19c678160d6d15b3Virustotal results 27.59% 
2019-10-10FT_UFSSKSKHQLB87V.docdoc 8f9307bb59d42b4317ed47e23470dc886580d809a3caa7026614baa348dd50e2Virustotal results 26.67% Heodo
2019-10-10DOC_3268876121_FC_10102019.docdoc 4f25f7d86cf0f77dc97ebd3184a7e03e8da522ad421766bb559b8f928e53cd45Virustotal results 27.12% Heodo
2019-10-09DOC_BALD5Q2XYT.docdoc fcda00e376d44602c901c96c3a681e04a68ccf5e78ab8eb476872998eb23ad27Virustotal results 28.81% 
2019-10-09DOC_12745346721650_VAK.docdoc ab90dea096c0cd0114ae6aaf4fa406b524a5f503d2a5188a7742403c8cf48a33Virustotal results 28.81% Heodo
2019-10-09FT_6EC46BDU8AP66_10102019.docdoc 746b0fb6a5475d9362ae677bd66041c4bf14a17adb5516546ca3393eaabeebc5Virustotal results 25.42% Heodo
2019-10-09DA_0W4PYZ8HI_U.docdoc 72e80950c7a2f21ef7f6934e4fae280f8401fe83de4d6995fba8e0dfc559ef53Virustotal results 25.42% Heodo
2019-10-09RE_35172518703491.docdoc 57f050a32c6ebd5ee2dfc81069588a910df9917b9770db07d84b5242629fa012Virustotal results 27.12% Heodo
2019-10-09GH_4993819084592498_10102019.docdoc b48704fe8b054beb0191bc2d7fcca10ac463af8fc2d9cb232026ec4c4aac92e6Virustotal results 27.12% Heodo
2019-10-09KJQRDGSW63_10092019.docdoc f19c01010e1074a20dab25d568e6459c73ad15d1866d8f701960eaf78d945c26Virustotal results 28.07% Heodo
2019-10-09NHI_68566078008018710_OQF_10092019.docdoc e1a5c331ed5d89af9ed1bd575692f6f5a7f80775cb43aa338becfd0019eb8442Virustotal results 26.67% Heodo
2019-10-09FT_2695106375.docdoc 7222676fa925ced8216a6173b82d365e994e644690b628d33102d13d6ddd37c4Virustotal results 27.12% 
2019-10-09LLC_18271572159963_R.docdoc 864b8b9d2b33b2902a9795d894be4833fa1e1fb62c79b45dfa292c8d5b2d5fdeVirustotal results 27.12% Heodo
2019-10-09LLC_EZX0D12CMA0T_EYN.docdoc 95dca0e1440d64cd9b0a1f67381772e46ec1828e77e48544239f031300382defVirustotal results 26.67% 
2019-10-09LLC_P7QW3PFF9.docdoc 227111ce7f8b8b2fdc4bbd53fab958b27e33feebd790ee17ba8d06da410fac10Virustotal results 27.12% Heodo
2019-10-09INC_6JX78QJDSF5Z.docdoc 534e91a24004f6a7738d6ea5a566447853a093f279603ec098964596322afd62n/a Heodo
2019-10-09INC_72RBB9SBZZKV7H4_10092019.docdoc 680e0f26be549bf15d1c04358e331056889a26edd605ff2870680b7f9cc83d53Virustotal results 27.12% Heodo
2019-10-09RE_J77NXOZ9DBZ.docdoc 45d8f08d687befefa8950853a1dc483c2b5d2df3012ee15c45e166673330a12bVirustotal results 26.67% Heodo
2019-10-09SCAN_76482285657052496_IL.docdoc 072a7e6f654adb46e871bab6b3e6a43a8021ac60a7cb4f1659596b79fac0d5dbVirustotal results 25.86% Heodo
2019-10-09DOC_J31BJ07F0BIW.docdoc 717415998233e6c11784a3d7de4c81cbd1cf1631e0c7c37ad2fca26d8c8f4b03Virustotal results 25.00% 
2019-10-09FT_48766362713145.docdoc a5c3f1dc9c03fe2df101ea82a64fc7b2d8c3aee0bf3e0d265c1cbf3da2ad8815Virustotal results 25.42% Heodo
2019-10-09RE_4UBM42HJAYU_CQU_10092019.docdoc ab47a7deb307f5d70096f44b7698c17c814d0cc9b37dafebefd1759b64ced6b8Virustotal results 28.07% Heodo
2019-10-09DOC_7M2YTP036_CAO.docdoc 765e97c7ce884767fc2038e235edd2dd1a81a78d2c10a9b93d4c88a098dc7e37Virustotal results 25.00% Heodo
2019-10-09BL_91275255336_B_10092019.docdoc 83b5e481119a6df670ccf18d3a18b16d8d44c503fd15dfbfe0cb43afdebebaafVirustotal results 25.42% Heodo
2019-10-09DOC_0P0AWGNRM_IRM.docdoc 8b5db5a8fb38b8ae91a42ef038d1a9404dc3237c57cbf208ec17cb80b3440dcdVirustotal results 25.00% Heodo
2019-10-0967497455197202.docdoc 42105c19ae3c59353da42fd93f7d1e418fdbf47ddd14b057708b31a9115edfddn/a Heodo
2019-10-09Z1N3WX8LI_10092019.docdoc 051e6598ac379949458a7cc477846784ec21a6c5d4050395a87851db626becd1Virustotal results 25.42% 
2019-10-09DOC_VN8CCDF1BCJ1V_E.docdoc 6b402b98e05150b7cd6cfe353232c9c90edc357c900487e7fd60adcc2b4ccb66Virustotal results 20.69% Heodo
2019-10-09SCAN_MMCFNLM3D6.docdoc fd50554b37b4bbd917bcd4ca8d79fc5cde03c68176430512f68af16a6f5439daVirustotal results 20.34% Heodo
2019-10-09DOC_C8E7EPHM9OEFYVL.docdoc bc0b6c060df94512811bed06c66e36528b6cbd2bb0861ed4cd1ca0be3956f836Virustotal results 20.34% Heodo
2019-10-09INC_1053660462920_DL_10092019.docdoc 69aa75b522f9d32a2d9a58bcc7d72cc7a389b889844b1cb56431d25546bb0227n/a Heodo
2019-10-09P3UGTLNOHQSN5.docdoc 764be4e80aca56a9c315869b45ff6c2fbfc4a9ff24e0252ed19a1e1f2a17f2eaVirustotal results 20.69% Heodo
2019-10-09PB_8Z7FHKESP2_IZF_10092019.docdoc 2f39759fe463f2863e147b4613ba800e82858c41c2d840053e8ff6f97e49fa30Virustotal results 20.34% Heodo
2019-10-09FT_V0Q69COA7BO.docdoc 6d259f0fe9e4df9055b7c5dbcbd92f4673952ffa3023e4407db60350b3b82937Virustotal results 20.34% Heodo
2019-10-09645296993810_EJW.docdoc a1360aaf0123b9b2fbadf26ef1179696232af15c356dad56f0a3819164e6bb5fVirustotal results 21.05% Heodo
2019-10-09583753249906.docdoc c2e96967dfa38d75c6b1294b2bbaf318950edf1337aa779b7c7fc05b732fa478Virustotal results 22.03% Heodo
2019-10-09XQY0087N79ETZE_VU_10092019.docdoc e87bb68914c0ef7b9f18211e433f91bc4a6c4d82eba8436d98dce32167ffc1f9Virustotal results 36.67% Heodo