URLhaus Database

You are currently viewing the URLhaus database entry for https://staging2.lifebiotic.com/novacms/grassandrocks.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	358161
URL:	https://staging2.lifebiotic.com/novacms/grassandrocks.php
URL Status:	Offline
Host:	staging2.lifebiotic.com
Date added:	2020-05-05 01:16:06 UTC
Last online:	2020-05-07 09:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	p5yb34m
Abuse complaint sent (?):	No
Takedown time:	2 days, 8 hours, 7 minutes (down since 2020-05-07 09:21:13 UTC)
Tags:	exe Gozi ursnif

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Bazaar	Signature
2020-05-07	2980ss029ds37d78.exe	exe	0673928ced0a265f6681d3c4656c6fd34ca812bdbf7742c2a28591505e00ab34	31.43%		Gozi
2020-05-07	1060ss029ds37d78.exe	exe	f3d4c40521d3fdfd7abe77ff69c95ab0dda0ed43b2bc8cc08ddfcdd1abd1cb10	28.99%		Gozi
2020-05-07	1650ss029ds37d78.exe	exe	b5206caf2aec7a71408a5f7dabb58c1fad725594d3d82a7d4724de3cd53d565f	27.78%		Gozi
2020-05-07	3260ss029ds37d78.exe	exe	8a328c17be572a9a3f6764d8fd2d1e15989adc2d9da54ebb953b52d91592a9bb	30.99%		Gozi
2020-05-07	2740ss029ds37d78.exe	exe	79e14181908fcd057d54628b3cb655a6450d82376926e23403e43fd04e3afad5	29.17%
2020-05-07	3240ss029ds37d78.exe	exe	b6ed1ab6b25b34753e1b6615cf62e15301150edbe9147addcbbc8d2c187a5be3	31.43%
2020-05-07	1810ss029ds37d78.exe	exe	5ab0193148dc77cbcb4db08433eefeb6dba6ff33dca556d2568da564f57769c0	30.14%		Gozi
2020-05-07	2810ss029ds37d78.exe	exe	9ee6e02a3e8070a4d501f7033f54d17781d2d4f43bf3b0717e15d63a1fa2e145	29.58%		Gozi
2020-05-07	3510ss029ds37d78.exe	exe	1fc884378f3a0c097af6ecd837cbee6951d41d2c23a780e41cdfaf1fd37580ad	30.56%		Gozi
2020-05-07	2460ss029ds37d78.exe	exe	4b6917ead496f0458c47c59c3291cc26c0d095c6d06b210d78035d3108c8e5a8	27.78%		Gozi
2020-05-07	850ss029ds37d78.exe	exe	6cf9b0e0725d2544a61758b1c3e492dab98ff44f14446c7e411e42268238ae6d	29.58%		Gozi
2020-05-07	2490ss029ds37d78.exe	exe	107ecb451f02eb6207da1468c1e9683a1f5c16b3b5fad4ce0f8b69ed110ca5b7	28.57%		Gozi
2020-05-07	4820ss029ds37d78.exe	exe	9b113f20289f3e8adcea46a2a7949fd7039c541f789a5a8e1647af224bcf5db2	34.72%		Gozi
2020-05-07	4750ss029ds37d78.exe	exe	a71d689da13dee0e15f0b9c2c8ad69c2bcec0c62c1667eaa71496699f8e7ba47	27.78%		Gozi
2020-05-06	2700ss029ds37d78.exe	exe	a235c1d6166ed63cb8522d9ef154ba627ff2c82c441daff91c98d347b9434924	31.94%		Gozi
2020-05-06	3750ss029ds37d78.exe	exe	bd384f0f50eabf853934a0eb9b30f6b23374db65f264b72c1458e60ec1491985	31.94%		Gozi
2020-05-06	1970ss029ds37d78.exe	exe	eec92d5c05e77e288e536742da84a419f1204164636c78696774cce1f53c5810	31.51%		Gozi
2020-05-06	450ss029ds37d78.exe	exe	16bf1473161dc8fd4b9cc4b9093491d44bf7d4fb83bb33684bc44280f9faa2ac	30.56%
2020-05-06	4110ss029ds37d78.exe	exe	47d93dd1b1b9616237455ad1a4647dd9b42ba65104108e142e5f87e7f0ac5b6b	30.56%		Gozi
2020-05-06	1340ss029ds37d78.exe	exe	04193f6a924b4b32583a0bdda4e6a8d8299beef1bd27fdf3a7ff3f54fa521f4b	32.86%		Gozi
2020-05-06	4600ss029ds37d78.exe	exe	6d2ff2894dbd9f91bf295fd62804045e1d917a6365c13162ff49b46c50da01e0	28.17%		Gozi
2020-05-06	3810ss029ds37d78.exe	exe	c95adf00211baab1a6e749695fcf2ebe6fff96ec91d5f99c2e12480293ef4a1a	30.99%		Gozi
2020-05-06	3940ss029ds37d78.exe	exe	77d92f059d287b3ab3284eb62804a220580a4072787c59a68c977859e57b8583	30.99%		Gozi
2020-05-06	3330ss029ds37d78.exe	exe	4921d24fe406f55eb7a0eaa57033235a9aca04d74ab9169ffdc425fdeace0515	29.58%		Gozi
2020-05-06	1660ss029ds37d78.exe	exe	2ee42b265537f3583e6f9e26014105964d2bae91e80934021af4d07cefd910d9	27.78%		Gozi
2020-05-06	560ss029ds37d78.exe	exe	7583d718343c7fec31a62c46f7b50bcc57652be827493db2b6582a28ce032efa	26.09%
2020-05-06	2950ss029ds37d78.exe	exe	4212fbcd09248e05f436831df037efa60fa6a71fa0cb4e9be7345802f6e45f27	30.14%
2020-05-06	3350ss029ds37d78.exe	exe	49701154a848e2041078b3be1edeb5c5718e5bfed894404a13ae7cce2a07c42f	26.39%		Gozi
2020-05-06	1620ss029ds37d78.exe	exe	b3080e3dea927ae5c6d02fad35de244bf93c1d2594ad0d8cfb3900aaaa014f30	26.76%
2020-05-06	2530ss029ds37d78.exe	exe	07f581dda497ff68b5b00f7cd382b03996844f36aa82951b9aef9bd6a047c1e7	33.33%		Gozi
2020-05-06	590ss029ds37d78.exe	exe	3bbcaa9c379fb8b1183a7a4c879de37106d0fc787bd7bf79f9840b2f7fd454bc	32.88%		Gozi
2020-05-06	1110ss029ds37d78.exe	exe	61092a5dffd57a7c9779f384863efb961a21e0e1ad4e79960118f0b51cd2663d	29.58%
2020-05-06	810ss029ds37d78.exe	exe	6f41dc807d8b14d70c3e45cf80ec5469c8d7d6eb4882d3829afed00893a4e715	27.14%		Gozi
2020-05-06	3650ss029ds37d78.exe	exe	16ac2c12334829bc1b1c54f17c950e9a6510e2f0ad5dc2c8f18f0237af1c85d8	28.57%		Gozi
2020-05-06	1520ss029ds37d78.exe	exe	4da131f442e64309d0eb892947493abe072812d0dcd5d2d341a825322d9caadb	30.99%		Gozi
2020-05-06	710ss029ds37d78.exe	exe	fe693d5b5c1f587263182d03f0fdb5c16aded33b0c318559c8ab6231e4ea53b0	32.39%		Gozi
2020-05-06	4700ss029ds37d78.exe	exe	171cbf22942431121b01dba9cffed822cf814787ba4ffa0b71d50e113095a092	29.17%		Gozi
2020-05-06	3580ss029ds37d78.exe	exe	a38fabbf649de27d9e8e686e08e430910346ff0f5dcb962bdc7a612e79091d8c	29.17%		Gozi
2020-05-06	870ss029ds37d78.exe	exe	6739521c7d86855c6a2b8cce0a81e2573536113fe5d3a88845bd77c743199717	30.99%		Gozi
2020-05-06	3100ss029ds37d78.exe	exe	0f8dc727784920b894cd68ddca6c52a15c0591a8ba43dbf5fd62446faf8c0541	30.56%		Gozi
2020-05-06	1400ss029ds37d78.exe	exe	f5423de71d5c5bbddec27e7ac3ad59624e2b69a5fafdb0e72b181fab8129c779	29.58%		Gozi
2020-05-06	2590ss029ds37d78.exe	exe	105d4101a28e7580142d64505229c15e05dee1fa216821125b3d918403dd1bc3	30.56%		Gozi
2020-05-06	4250ss029ds37d78.exe	exe	a65156bc3715eb41fa8e66ab4746dd803b3ee7b6e581352fc4a1d9d4cffa734c	30.14%		Gozi
2020-05-06	300ss029ds37d78.exe	exe	49413e8f0727505fa732fb2640409f4c0b42a5734a369e679bd4ff86851c2f8e	32.86%		Gozi
2020-05-06	3950ss029ds37d78.exe	exe	1efecec82ded6794c331759b1cc037bda939a7a68f7d371b678a648acb267262	27.78%		Gozi
2020-05-06	4010ss029ds37d78.exe	exe	c2825b58869fc9dc93731b81ea329704904b9dc9482d2e413e7545c98924987f	30.56%		Gozi
2020-05-06	30ss029ds37d78.exe	exe	6dacd8743d379bde74831ff24fed11d09a912ee8b8cf5b1fd00811b245ff9799	30.00%		Gozi
2020-05-06	3550ss029ds37d78.exe	exe	eabb2f2033df31e72441616bbf6e9a9de27901c7a22be4e103f0dac8a0d068bd	31.94%		Gozi
2020-05-06	120ss029ds37d78.exe	exe	08d504f6ccbb9cd85f0e060804a09141ba3e9d312966d1ae3e4f16174c9cc4d5	33.80%
2020-05-06	2300ss029ds37d78.exe	exe	f90539b4a57ff3ee2a1aebb1f1401867b955bf80bfca09845764c982f1f93aa8	29.17%		Gozi
2020-05-06	2900ss029ds37d78.exe	exe	32815f5ef276a605b75ec13565151a20ade6b678720af6dd4e19a8da12caba5b	29.58%		Gozi
2020-05-06	4050ss029ds37d78.exe	exe	2f006c1f4c1104bd8d778fd32ab0e6f8d944e8abfcb4e8f39b17e9b657230b7d	30.56%
2020-05-06	860ss029ds37d78.exe	exe	e0809e6308a2ad575ae3e5cb159716aa9534806445eaef352462b6dc352f8d82	29.58%
2020-05-06	4810ss029ds37d78.exe	exe	1c05fffbe3804b84d0c987e16f963979d6149f57fb267997a9652e8c3016f5df	31.43%		Gozi
2020-05-06	4370ss029ds37d78.exe	exe	a735710c41733363e37ce11d8f1c36b941606f3cf45806b32e4a3955de483e29	31.94%		Gozi
2020-05-06	4090ss029ds37d78.exe	exe	04c9f32da8fefb898638f079508e88bb5b915ea8721c2b78a9e07d3b2cfebc06	31.94%		Gozi
2020-05-06	370ss029ds37d78.exe	exe	c348c1531cea6ac710ae4df1c49ff331a5983c9d4274ac7815eda1f137ae27db	30.14%
2020-05-06	2090ss029ds37d78.exe	exe	98175fd3921e4f35e3f478957971072d843d62c5136665e0be1e33890fd07470	30.99%		Gozi
2020-05-05	640ss029ds37d78.exe	exe	eec06e583f99020191dcaafa6f09f33edacce3d4eca6fec4c71381776ac2025f	30.99%		Gozi
2020-05-05	3000ss029ds37d78.exe	exe	524c196326fbe00619cb7430bf2a2b8cc3e6178135049b43f1d211e765766e3a	29.58%		Gozi
2020-05-05	670ss029ds37d78.exe	exe	b71d40dfb624d133662c88026bd55884a56a467fde70978a539c2a0a1b088ab1	30.99%		Gozi
2020-05-05	950ss029ds37d78.exe	exe	e4f2120b125612efd78b9c3e6b41e0022e33e525b0ef92a5d99846c23a274051	29.58%		Gozi
2020-05-05	2520ss029ds37d78.exe	exe	68d9c2f90d6a55b89d94527a25f245811881fc1e45154507dc9ea24f07b87cf3	29.17%		Gozi
2020-05-05	2060ss029ds37d78.exe	exe	39f81d13093eaf49585de330f3289499d27d84d072e708848832115ea3dd3131	32.39%		Gozi
2020-05-05	4310ss029ds37d78.exe	exe	3136c51c99bfef093dc35145d9a1d1628e67675f4d7361c2ae356b8edab11644	29.17%		Gozi
2020-05-05	1240ss029ds37d78.exe	exe	3c87309ceaa2572cab339266f5cc6c6e065e601862e04e72d093b46b76684507	30.56%		Gozi
2020-05-05	3690ss029ds37d78.exe	exe	7ef311097d8361da867b32d63acc39666a375e0b1f82dd1f11e182ba0f445239	32.86%		Gozi
2020-05-05	900ss029ds37d78.exe	exe	35f3987cbc2985de46338c7654675250461ace27bc214d019a7e91e892456ca3	30.56%		Gozi
2020-05-05	4190ss029ds37d78.exe	exe	e8ce620540f588f93dc3566d313b38896644ca75496e4311b6e97c5d3c76d20d	32.88%
2020-05-05	4120ss029ds37d78.exe	exe	a4f032df0f3c5c993b4ffa1b80afb32ed379ecb2bfb80c3fb3efd2952b980780	32.39%		Gozi
2020-05-05	2320ss029ds37d78.exe	exe	0136e85154ff32a89b6c756d258641fcf730361cc7cbfafa27543b2bae7f0b42	30.56%		Gozi
2020-05-05	140ss029ds37d78.exe	exe	628652ca8b3ced795fae1394656180050d6942d1c688ef3878855d14c3805ad6	31.94%
2020-05-05	1960ss029ds37d78.exe	exe	4131bd5d948c96fe4962d8d1145615e24e4e85911c8a05f0c5006a84e89d3301	28.77%		Gozi
2020-05-05	1410ss029ds37d78.exe	exe	d52d8c8ed40aa2485a6a4a17b7bd2f25532e7921db33b47552cb8a52c5f2aa34	31.88%
2020-05-05	3710ss029ds37d78.exe	exe	36acaab783c6fcd23cbf6a77346527a5ceec92ffa7bccb38bded11435833b56c	30.99%		Gozi
2020-05-05	1070ss029ds37d78.exe	exe	9ef810d888913d5adf5f2a4c877809f483564f37fb1530fc8feb756f25165f52	30.99%		Gozi
2020-05-05	380ss029ds37d78.exe	exe	f5d36bd4dce5863b39705e463242583ca1931baa0c623a3f298a83a97173fa07	32.88%		Gozi
2020-05-05	4710ss029ds37d78.exe	exe	5a4713e49a864096a6ff22ac76dca38b387977dd552477faa6f76675469ad725	34.72%		Gozi
2020-05-05	3790ss029ds37d78.exe	exe	fb22eb1848c40927711a0ba23b2aa5e90778247ccbdf461e165dc2b6a0378cfe	28.99%		Gozi
2020-05-05	2610ss029ds37d78.exe	exe	97cdcaefa465b89f1452be0c971152c98271a37a988fccc6f670e22ff5230110	29.58%		Gozi
2020-05-05	3110ss029ds37d78.exe	exe	0e3f734d098780edce7f624d917d975e6986513584d449cc6bac313db9a213a9	29.58%
2020-05-05	1050ss029ds37d78.exe	exe	f713f1bcf8885f37beb62eaaab9c75b4c05206400c2590ffa921f4f5e2c98241	30.99%
2020-05-05	4060ss029ds37d78.exe	exe	56758d9b33579603933a8c9e4c922e539a1af7bfa76708f4f762033041063717	33.80%		Gozi
2020-05-05	2930ss029ds37d78.exe	exe	acd61ec26fbd7804b478055254a3158b9d0e10c6227fe1825bf70791d6790a65	34.72%		Gozi
2020-05-05	3190ss029ds37d78.exe	exe	746f7f5f89333a7acab3e1c627a685cddffbb59f98df2da1a35cbb543c9e0316	31.43%		Gozi
2020-05-05	1940ss029ds37d78.exe	exe	a04482cb19cfe8f18e60f2be91bcbc8a1caa1b21368b143c36ff56bc05808b73	28.77%		Gozi
2020-05-05	1640ss029ds37d78.exe	exe	20b72662d84625a5ec979a5aa92834a03d8c27d8b42ad6c79f25355aca4676be	29.17%		Gozi
2020-05-05	4430ss029ds37d78.exe	exe	d2fc203264e53a51a77839a46c886a8c99b50486deaebb529271a91e113819de	29.41%		Gozi
2020-05-05	580ss029ds37d78.exe	exe	b93ea0e4a3ce262d8ecb8d8bed0d4483bc4520ae4461afe6e21e712c79452b3a	33.33%
2020-05-05	960ss029ds37d78.exe	exe	3c584a2bd0d94734be7b3a0ecd5cc92572779d2859b0c339bb19b6122538ae85	28.57%		Gozi
2020-05-05	3220ss029ds37d78.exe	exe	5b5d731ba60d8e35a6c1d9ad5f4175d57d844054508434b821e4550a020af43d	31.43%		Gozi
2020-05-05	3860ss029ds37d78.exe	exe	ea10982857a90ca269f39fa0154840f2057bfe02367e3ada0f290cecb684ad6f	30.56%		Gozi
2020-05-05	4410ss029ds37d78.exe	exe	c501091c05fdbd95da8d09069bc9c39857f1e06bd518fbcf45154753e85f1587	28.17%		Gozi
2020-05-05	3060ss029ds37d78.exe	exe	07d87d5331a70bc6a4bd99c7a1f7369a33f846cc3d0fad73fb33fa0784894a99	31.51%		Gozi
2020-05-05	4280ss029ds37d78.exe	exe	c56a9f1098a0814fc0db5347d04efc02301258ef199ac0899ac8ac7515acdd1a	29.17%		Gozi
2020-05-05	910ss029ds37d78.exe	exe	6f88356bc0ec54784a8fa824951ce29a4c2bb464a6574075de90918b9ea26e67	31.94%		Gozi
2020-05-05	1130ss029ds37d78.exe	exe	3f6d434f6d7ecf4f5ef6b4463ef584d80b7bcbaac2a2fe0835c8680c43407b72	30.99%		Gozi
2020-05-05	4970ss029ds37d78.exe	exe	2c9245f2dccaf0df4b5b3a12d49059b3fa7a0d8e0620076d9bc2d59fbb1f0165	29.17%
2020-05-05	1890ss029ds37d78.exe	exe	2e28bf412a6f6c0c10d1c2db0b70fb87c45d5316a826783ef97adf2929a43e2c	27.40%		Gozi
2020-05-05	2790ss029ds37d78.exe	exe	06131a43944835e14ce0e9cbc58e5282d3634d75a3d5df9f718ac95d40a6fda7	30.56%
2020-05-05	510ss029ds37d78.exe	exe	c07575364c64aed511d07437b3df847fe793184cddbdd3b9d4177e903e2d9b68	33.33%		Gozi
2020-05-05	4580ss029ds37d78.exe	exe	5d5daa8706ad6d9255ed3c321e7f289fef9646ebca809b0ca63a3bcf12075c74	34.72%		Gozi
2020-05-05	1500ss029ds37d78.exe	exe	7decedbfdaff285f10788b9b240cc2408bc0db834b5ecf13c374147fd05f8056	34.72%		Gozi
2020-05-05	2030ss029ds37d78.exe	exe	14ab8402543a2c89741dc1366f181326ec11443f43421f5c2a0a0a4d7cc40ff8	29.17%		Gozi
2020-05-05	890ss029ds37d78.exe	exe	26298a142eeced1394db34993dd63919a7051aaa8d24ea33e615346277764ac1	30.99%		Gozi
2020-05-05	1440ss029ds37d78.exe	exe	3bd3103667b8a2570ac117aad46cda0809557ac0e1672cfa5d4c783cd7537ca3	30.14%		Gozi
2020-05-05	4670ss029ds37d78.exe	exe	46c3967587341853d4f40fc133d8967ff98e4ca5920f13ed53b50db463417ab6	30.14%		Gozi
2020-05-05	2660ss029ds37d78.exe	exe	446c3b4cd29f4357964e2212debad42a0d8531a82a09d386fdc3b4593665600a	28.17%		Gozi
2020-05-05	4380ss029ds37d78.exe	exe	eda4bd4a6ece5d57a3ddcc20b569cadd1459cb7205c913ccb5a3102b0e5c469c	33.80%		Gozi
2020-05-05	570ss029ds37d78.exe	exe	e6d33df0dfab92868e946aecfcec7c7d3fbac3d3a8c00c8fe7c098e7ef30ec37	29.17%		Gozi
2020-05-05	4460ss029ds37d78.exe	exe	6059508f86877fe308ccdab4307d9c0e168b65d1441f1dac22507ee3b7f9f831	n/a		Gozi
2020-05-05	2080ss029ds37d78.exe	exe	b491109a6577e883e367962de2527436e0b3c395889ef603b74376eefdea09b1	n/a		Gozi
2020-05-05	4320ss029ds37d78.exe	exe	5ecaf5678e4480b3c4c0103e3c94eb4d783422c2419049dc18588688de7de314	n/a		Gozi
2020-05-05	1630ss029ds37d78.exe	exe	8137ff907bf19de9e2a300d88672e4756e837f877cfcc7aa145105f535351ed3	n/a		Gozi
2020-05-05	4440ss029ds37d78.exe	exe	8ffebff683b8ac4733578b91bd384895e1f5f5ea724cc5cce1ad503a6dcd1b16	n/a		Gozi
2020-05-05	3990ss029ds37d78.exe	exe	249a901a5e7c69f41e31cb23dd1bcc8dd02980a17270bb3664e771cfa0f4f60c	n/a		Gozi
2020-05-05	3640ss029ds37d78.exe	exe	30c57f5803c861c2d36fc003f855ee9857e4aebc864be6b9f898176f93e3cbd3	n/a		Gozi
2020-05-05	760ss029ds37d78.exe	exe	6f74cf01f5434cc177fc902d15a5ce8590fd541503f5bee34c0393dd423c15ae	n/a		Gozi
2020-05-05	1290ss029ds37d78.exe	exe	1fd8632c41699c22150ad1b8097450f039276a7f3eb55c8935fde52996a77b39	n/a		Gozi