URLhaus Database

You are currently viewing the URLhaus database entry for http://gratitudedesign.com/gstore/3Q8IBYs4G-eDPUjK2RolDub-zone/security-warehouse/kfdS46Nvj5v-Ni51wnGM9kdviK/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:296309
URL: http://gratitudedesign.com/gstore/3Q8IBYs4G-eDPUjK2RolDub-zone/security-warehouse/kfdS46Nvj5v-Ni51wnGM9kdviK/
URL Status:Offline
Host: gratitudedesign.com
Date added:2020-01-23 19:41:18 UTC
Last online:2020-01-27 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-23 19:42:04 UTC to ip_admin{at}csl[dot]co[dot]th)
Takedown time:3 days, 15 hours, 36 minutes Bad (down since 2020-01-27 11:18:44 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-25dat-20200125-3913022.docdoc 7a257b44a9fb62afa665bf698344474aa5ad6ab256a2ba1692223bb491dd938eVirustotal results 45.90%Heodo
2020-01-25list_20200125_587448.docdoc 84232ef58a9e4bcd7f0694bb51bf6ddf5969514899f00cee26e1a3d01ed204b2Virustotal results 35.94% Heodo
2020-01-24Mes 20200125 2635940.docdoc defd19dc0965ed1754ec41768935e488f9bb92ea9cddc5c13b68a441ffe11d9bVirustotal results 31.67% 
2020-01-24list-20200124-KTY6192.docdoc 12b1c47065bb26f7e8287db3578565cf90d40919b69387bc5bdc74c29204827aVirustotal results 28.57%Heodo
2020-01-24MES_20200124_FCR118798.docdoc 1aa48b25e1b297298e379766ff3f10d1e6810677ef345ad026e708878e891c9bVirustotal results 27.59% Heodo
2020-01-24Rep_I09854.docdoc 6fc2d15314b9d2e44125c8767a92143770cf55f4a9ce38728eb265b390b33687Virustotal results 28.57% Heodo
2020-01-23MES_20200124.docdoc 52ad175f7d8c6193694d0ca48fab321c48a2f4d28b78f0469173ce5ac87fe395Virustotal results 37.10% 
2020-01-23dat_20200124.docdoc 356d9d432807a2d7fb61e5893fffec5494ff1c4500b5e0786e8548fa32ca930an/a Heodo
2020-01-23LIST_400.docdoc 896f2aa2b32a68993941bfcf83d13844d0729441fb870d3bc6c9e7626da650d1Virustotal results 33.87% Heodo
2020-01-23MES 20200123.docdoc 62a0ea1700c5b36e288276a509d57d106f4c00ae155bdb4cda166eb71dc075b0Virustotal results 29.51%