URLhaus Database

You are currently viewing the URLhaus database entry for https://www.gatorsstumpgrinding.com/wp-admin/balance/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:444569
URL: https://www.gatorsstumpgrinding.com/wp-admin/balance/
URL Status:Offline
Host: www.gatorsstumpgrinding.com
Date added:2020-08-26 17:56:06 UTC
Last online:2020-08-26 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-26 17:58:02 UTC to abuse{at}dreamhost[dot]com)
Takedown time:4 hours, 49 minutes Good (down since 2020-08-26 22:47:16 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-26DOC_79EVEL7JRREJWL2U.docdoc c1010a64991ed1fa9519bd2ff0ee0abc2b87853d34efd4a6c2e3f6a7b4fbaa75Virustotal results 30.51%Heodo
2020-08-26DOC_87278196.docdoc 5651215bf90d3d27bf652a23f6f4ab03e32a080fba71d964022a87038fa6f1b0Virustotal results 31.58%Heodo
2020-08-26DOC_EC2940829966WP.docdoc 48d23f9dd578db5e9182540eb52090352d60ee4c49698de167f1273e4e22e449Virustotal results 30.51%Heodo
2020-08-26CBZK_9279514300410.docdoc 4e48203902e2971b1f0046c8b0e664760e818aad6c055903981a67549c91eab6Virustotal results 30.51%Heodo
2020-08-26G_EH2WRP3B.docdoc 41627e3471672730007dc13d026ac234950ae1f71564721c77dd5aff29e9c51bn/aHeodo
2020-08-26BAL_8020711894036.docdoc 3dc40e9a60c8557b94a21581a58c4566273a45eef074c0fc78b62bf39eadf667Virustotal results 28.81%Heodo
2020-08-26N_PIM_080120_CFB_082620.docdoc 5106dc79c277efaea0994fbff2d9683e1a6cb42184857e27a7fd36ef275026f9Virustotal results 30.51%Heodo
2020-08-26LKJLEQ8C58LJ6QE.docdoc 65d504b93571392cb6513b7fa5bed4bdd2a2ae7e3d7666e409f0b13e56f1e314Virustotal results 30.00%Heodo
2020-08-26INV_02807729.docdoc adcff3f1b60e737879478f5ffe1450906166be8f4b197343ea2684bcb11d1f1bVirustotal results 30.51%Heodo
2020-08-26RKS_080120_DCM_082620.docdoc d8b2892cb235a6a574651012133c78ab0928fdd3ce752cc0699681a373778c04n/aHeodo