URLhaus Database

You are currently viewing the URLhaus database entry for https://giantsinthesky.com/cgi-bin/wt-8trrq-3417/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:433140
URL: https://giantsinthesky.com/cgi-bin/wt-8trrq-3417/
URL Status:Offline
Host: giantsinthesky.com
Date added:2020-08-14 11:39:35 UTC
Last online:2020-10-12 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-14 11:40:05 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:1 month, 29 days, 5 hours, 21 minutes Bad (down since 2020-10-12 17:02:04 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-15INVOICEVZLC20484586885.docdoc b9d2bc9624f1e81b007fd1d89170294eb6eb29c779f83f4e75576a0fa3fa421aVirustotal results 41.38%Heodo
2020-08-15invoice-WRNH224-4870671.docdoc 8166f9d5647da264c416fb5151e8f329302965d5717c6d4210d146fc41acd16aVirustotal results 40.68%Heodo
2020-08-15invoice NAD328 1735540.docdoc 8f88dd80520ccf01a78eb649cc1a7918ff8a0c36019a7b5ecf59ae9c79afae7dVirustotal results 40.68%Heodo
2020-08-15Invoice-BZS4-527024.docdoc 715b876221f1b5e1bcb052a019ee033638ba9829c8ee712edc2ef66cc27c0e7dVirustotal results 40.68%Heodo
2020-08-15Invoice_LA5_276417.docdoc 39e1005ce7b833af7d15208f045080aff3d0cea6b1695169d52a4eebece6ed61Virustotal results 40.68%Heodo
2020-08-15invoicePYFY7574543535.docdoc dae18dd9a3dbbfc06b5e5c10fc7dc93c670a0c191d7cb7065e9d478503274567n/aHeodo
2020-08-15INVOICE-MS86-6122627.docdoc fa32b3496f672c072efeef0acc1a6083d4a8512e1497629916d25cb5959b217dVirustotal results 41.67%Heodo
2020-08-15Invoice_X694_1194070.docdoc 5028de3ce60c62f1e99fcc961491a81d8a3315f89afef5015243cf80d77872fdVirustotal results 40.68%Heodo
2020-08-15invoice_ZQML643_8760366.docdoc 40f8be090c2e10a4175b11315d5adbd548b1a079fb450c6ff18b82b5ad0d75ccVirustotal results 40.68%Heodo
2020-08-15invoice_9913_312316723.docdoc f77afce2b8d4472fbcf09e30d3fddb8903ce48eebae03a294d7ca7819c07fdf5Virustotal results 40.68%Heodo
2020-08-15Invoice-EQ2-83697257.docdoc 6d849f43785ca5cf641082748de6d9fd4c8b5d11863de48acfff9ebe7ab20b32Virustotal results 41.67%Heodo
2020-08-15invoice ALMV904 2318950.docdoc 4ac2ea7a4562ab7ea7c23ad733c0e4d0767936120e16b62e0248ce2af1beec1fVirustotal results 41.38%Heodo
2020-08-15invoice-GQ021-7059199.docdoc 94b9821024615e536b2196b18ad6a0c092e4030cc19a99f35d6cf7637a4a3eafVirustotal results 40.68%Heodo
2020-08-15Inv_953_3304863.docdoc 911f2bfa86abc00f8fc2ea9dfbe597349baff6522fff47de22aa0ae77f31ece9Virustotal results 41.38%Heodo
2020-08-15INVOICE Z651 6043346.docdoc fadbd33657aa2e9150143d82b696f5792afa254e412b4954693fbc91b55641e1Virustotal results 41.38%Heodo
2020-08-15InvHVW5457101633.docdoc b3b1d9de78d806f5d6869abbcf8eca4d70fc0167946479c7a173ac9729ef799eVirustotal results 40.68%Heodo
2020-08-15invoice BWS457 159941.docdoc c7214b10c8cbeef517f4c966a111017a37e144cad39e215bf93f5632109d4040Virustotal results 40.35%Heodo
2020-08-15Invoice KTKZ34 964583137.docdoc 608640cc09523824170abe5439a993ab6057204ad82c3c3af46ac0ebcf7cf38dVirustotal results 41.38%Heodo
2020-08-15InvoiceGT452515644.docdoc bae86b6997572490c22ffc81ad1e24ecce68f3d2124066b202be498fbd9b7d72Virustotal results 42.37%Heodo
2020-08-15Inv-ABZ8282-766245.docdoc d2e560f82d7e334c790e0731e12d7e9bc0fb862acf7adb2016be7bae7417ef94Virustotal results 40.68%Heodo
2020-08-14Inv_E3_959278.docdoc d99946584345419df67e395ca69df43a7bf3aa628f35da4c7d7c6780c6268e44Virustotal results 37.93%Heodo
2020-08-14invoiceLWNI579199642.docdoc 5ac2b940e6a9bb518d04bcaa38e706d0604dd1c60691ebf2730c04e82aa11524Virustotal results 37.29%Heodo
2020-08-14invoice_T8334_5268795.docdoc f6df2e3de41f0526c8d86612ff313c43bb5b6a8d118fa21459ee00eae061aec6Virustotal results 37.29%Heodo
2020-08-14invoice M4631 657749578.docdoc 284869d2f6bf8757c4361deba6f72989a57e8fc84c93be00e7d2e9be8b979d61n/aHeodo
2020-08-14Inv-W39-9503235.docdoc 7eb258707741948c75f55c0599568543ba813a784b43d4323049531b3d432caeVirustotal results 38.33%Heodo
2020-08-14INVOICES67985024749.docdoc ecad5745af706bbb7ea9c6ec69d389e2e6c4899ca17cb7fdf29ac1230375503cVirustotal results 37.29%Heodo
2020-08-14INVOICE_R408_484013.docdoc 95cc5ce9259454f349e823d4c1e4c546a303dacfd17dd01c60af5f9dfb171cb6Virustotal results 36.21%Heodo
2020-08-14Invoice VA41 3220094.docdoc c2e044af01e5ba139d873400d8594ed2349fcb2f9005243a69c8476d0570b32aVirustotal results 36.21%Heodo
2020-08-14Inv DCQJ8326 369273103.docdoc 3094c95131725d76223248c088e38463f85bca709c4b229e0e9c11814ddf672dVirustotal results 39.34%Heodo
2020-08-14invoice FHU14 210584907.docdoc 083e11235390ac8cbbb0906b63e031656bae5d82f5a658b83d4901ed186eaf94Virustotal results 34.48%Heodo
2020-08-14Invoice_002_35925626.docdoc 5dff91cf6d41a1afd397c3c21a5b5a401acbb9abf2dc6e09df6f45b8f8dd9af2Virustotal results 31.67%Heodo
2020-08-14INVOICE-YM7-15624255.docdoc 3faefaec25266917cdada868fc8076b16e9b42382e82bfb5018562978d0085a1Virustotal results 31.67%Heodo
2020-08-14Invoice-868-5201347.docdoc 4b13402181491e81721d3129182c033f1ce4f14f4956c41426c51b2c92488d65n/aHeodo
2020-08-14Inv-AGS7-95945862.docdoc 022cf3a8bcb181e5218ff3a6b7e759e94462df01ff93902560371dfa2ffc0950Virustotal results 28.81%Heodo
2020-08-14invoice-E6-2781887.docdoc 47e583738beea94617d095118319318193630be4e2ddf5ae8ce66ebb131df7ffVirustotal results 27.87%Heodo
2020-08-14Inv-583-19160612.docdoc 8668a5aae3e7db513fdb925e16313049037536bc67a86ed756b682c98b7f6f09Virustotal results 25.86%Heodo
2020-08-14Inv_BIQ8431_592912524.docdoc 946ce7bab4b96c0fd40f3bb134b7d616880bc04dc8eacdf9d4cf10f4c0287cb5Virustotal results 26.23%Heodo
2020-08-14invoice-KELW0-734523272.docdoc 21c03f89445c00697538e5c37bbb08c294916530de14212a348e7fabbe09a554Virustotal results 25.00%Heodo
2020-08-14Invoice MKL67 557494688.docdoc 4b1f4de38d23df072402ff46c59faadafed1bcd11b7158106edc189d8433845cVirustotal results 25.42%Heodo