URLhaus Database

You are currently viewing the URLhaus database entry for https://myinstantguru.com/wp-content/balance/glb3yo1y8i/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:558421
URL: https://myinstantguru.com/wp-content/balance/glb3yo1y8i/
URL Status:Offline
Host: myinstantguru.com
Date added:2020-09-18 17:33:17 UTC
Last online:2021-02-16 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 17:34:44 UTC to abuse{at}subrigo[dot]net)
Takedown time:5 months, 0 days, 20 hours, 18 minutes Bad (down since 2021-02-16 13:52:48 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19INV_WY2LI5P9PTX.docdoc e9325a711e0f6f605b85898c5b507d4320e1f1dc672c68172b06cda359b5107eVirustotal results 34.48%Heodo
2020-09-1952335241.docdoc 2219a032fd67333ac69e83d15651054f5fa2ebf7711e2ff700faf7cf27bb18f1n/aHeodo
2020-09-19PO_09192020EX.docdoc 6f78fbb2d641a076bd2f40a39b2802a3ece7627b834468e1af726bc6bcec7237Virustotal results 40.68%Heodo
2020-09-19REP_32697479.docdoc 9f77870d3740686f81155c4cca802ccb196cdd875714ed8e25d9a920d2d2adb4n/aHeodo
2020-09-19DOC_CVM_090120_LPG_091920.docdoc dd1eb5d6665fa95590fbb058fdfb8311563d8d5b62f6b8b538cb33c967f22362n/aHeodo
2020-09-19DOC_02995055941.docdoc a17adf48e5d1001ed87a1af31344545ee83df584126c6ade083cdec6fd158105n/aHeodo
2020-09-19T_51429542.docdoc fbe339f0f024e007aa6965b220a545dcdbe63fc8c877adfa47c8ba137b8c94een/aHeodo
2020-09-19DOC_957056045321040.docdoc 76908049cadf03a589e4584e32c9fdc00cfb638fa62d691d3fd7dfa3549dd318n/aHeodo
2020-09-19BAL_OGL_090120_XED_091920.docdoc d7f9f33aa1e41e5cf3ed675039323eedced58cb2e29f20b2fb2b6df79ab141d2Virustotal results 32.76%Heodo
2020-09-19DOC_GW6102975333RR.docdoc e5d9bb556a385de29f04eccbf388a0e8f73f556394bfcaff0a6c7ffb15e85a48n/aHeodo
2020-09-19BAL_9255362795698183095044292.docdoc d737e6973c1db753444e7bb9eacd01acd35b8fe2e88cc795f668ff59f0ce2027Virustotal results 35.59%Heodo
2020-09-19NLDP_PO_09192020EX.docdoc b37ef41801c298349f3b8d0e7f0bf41fb621f4925fecc934cf95f84c7ee19782Virustotal results 49.15%Heodo
2020-09-19H_7326578255.docdoc c066bc4500ead9e0889bdaa4bc27671470aaed708c36824216e519d2b9325dfen/aHeodo
2020-09-19INV_PO_09192020EX.docdoc c48a51d8de6403e9edfbd7add130002b895655dfbe014581e64d0fd7bee83155n/aHeodo
2020-09-19FILE_UW5927953444BZ.docdoc 303fd271416f496283edd4c0e35ad5a7704125b4955a80df72b019c3e1cfea9cn/aHeodo
2020-09-19BAL_DG1130389844TV.docdoc 1963ec47acb4c6d57b2e6d75de7d45de3b479c9f24760d5a0456a3accc66ddb0n/aHeodo
2020-09-19BAL_RE7968296178YE.docdoc 5b0a648192c791817089baf85e77206be78ec6b2fc7924b465bb1bd718d78b56Virustotal results 32.76%Heodo
2020-09-19MJD_090120_NFG_091920.docdoc b8818fbdeecde51adf7270365592b9812f1e323c4cdbf81f12885c590727d3f2n/aHeodo
2020-09-19ABJ2ZAZG.docdoc 9075458c2a7a9b59a7e7f9e575757a3069952452198a9c17ce3211d3de14eadbn/aHeodo
2020-09-19JEQ_090120_ZOJ_091920.docdoc 1fdd870e2f8e533d5592145cd1fc37281bd190265fb33663d5f8b0bbab9e8e53n/aHeodo
2020-09-19DOC_HM3JMB7KFYBB52.docdoc 7991a69a5cbfa005b7685a29ded3f4f849b24fed6a340cbba97dc86d6db9b0a6n/aHeodo
2020-09-19CB2450936379AS.docdoc cda0f300f10989d730a1ea43471dfadb97cb10e13a73fbabeb565b5fbfd6bc30Virustotal results 45.76%Heodo
2020-09-19S_JFR_090120_VQQ_091920.docdoc b1be0fa6951b0252445d71a28ba08ada17974551790e1c61194c013249c97425Virustotal results 41.38%Heodo
2020-09-19DOC_O1QOFXVZSIZX34M.docdoc 73620e838eb9f25fb84489e5a9b183790be59e762fb7aa8cd65a6958e83a00c0Virustotal results 40.68%Heodo
2020-09-19AMO_090120_IYD_091920.docdoc 32fb5e68e6524e8f2ea13cdf8686e2f0a5fd28042071482fde48d4110a714158n/aHeodo
2020-09-19INV_83085247.docdoc 3d64095f4564ebc30eadbe6a61d8dd290bf34c82c7c49a9accc8179312fc53edVirustotal results 46.55%Heodo
2020-09-19BAL_16169230.docdoc 7032382798471056e86e6737c338291cdd791a526f78f36db74900e9a5293e4bn/aHeodo
2020-09-19BAL_84039884.docdoc e3917f2ed0855bcc9400817a19340a2e860e4235af3697c42483a6f2d69642b0n/aHeodo
2020-09-19V_24941038.docdoc 9cd1ed00043bfb185a3b497fb855abad25261f016f8882ae085daa73ffb32deeVirustotal results 46.55%Heodo
2020-09-19WHMS6IGJXU90.docdoc ebb66d12381191a931ebf207ea13eebdca01c5860177d35a6a5967bf1dd00586n/aHeodo
2020-09-19B_0984522777992235650149.docdoc 7df3447e0e3af084cc5d6ad9a9f333ac88e09c1d60c0f9c0f00fcccb6d04b708Virustotal results 33.33%Heodo
2020-09-19PO_09192020EX.docdoc 9e45686cb73bef12f43a2a0f24595a5a9bb7d13d1c9fa1db682ce1f62a152c49n/aHeodo
2020-09-198P285KFGOSH766.docdoc 283fa803d0bcd99ac43b6d04b267e8fe8de71ea98d41f73ff426fc27fcba6dc2Virustotal results 35.59%Heodo
2020-09-19PO_09192020EX.docdoc 99eda692ad8e7b4355aa54a8bbe79740fedcf0500c775ade59cd67ed7c7ecaaaVirustotal results 41.67%Heodo
2020-09-19REP_00207509443115455753045.docdoc 9ccda2e6b37df2289f65dfac9606ad6b9a8638c5ee524ca0ed76e7db70bcba24Virustotal results 30.51%Heodo
2020-09-19MK3795802462MG.docdoc cdb7ce8fb7effdc8c98c363838bd824c3fbcc6a08290601a0e6027f1c6faffddVirustotal results 25.86%Heodo
2020-09-19REP_92028604.docdoc e8ba52929c7417d389ec7c09ee6326be03a51186987ca74d8ef79a98803150b5Virustotal results 40.68%Heodo
2020-09-19REP_QI8703857339OL.docdoc 30c629812a610192dc5b3898cb7b30101d998bf327a9bae06c357cc2108a08a6n/aHeodo
2020-09-18INV_AE4552213603XE.docdoc 3a245c3c3ba3257272ead17995d6b4913540dd24162a40430a05199d36f50768Virustotal results 34.48%Heodo
2020-09-18PO_09192020EX.docdoc c536931bec7f39621f1f86cd9b7b49ba58e35ba7a7f6ce7b92724de491137e3dVirustotal results 38.98%Heodo
2020-09-18PO_09192020EX.docdoc e6efa97f9a08f01b78d5a5e02d3ef06892f126a52bacb798cd5546dbfcb5e139Virustotal results 28.07%Heodo
2020-09-18557085262959550812210.docdoc e767562438c04ed2d3dee57114d125b4446278c036106d12eb8e7fd9d9a93940n/aHeodo
2020-09-18BAL_556471955943186023.docdoc f517a93071e1c1603f17e27fcacb8895394f49626d63add12daa6f605b453ca3Virustotal results 32.76%Heodo
2020-09-18PO_09192020EX.docdoc 6a500490be1db393b419c4d2dc1bd43557bd87fe40b7b996037834fb137d8d0eVirustotal results 31.03%Heodo
2020-09-18REP_FW4197025857UR.docdoc f5fb5d637a37ec6c6c5288f46bb6ad3cb9559037f8df024aba1f9bde1d477a4aVirustotal results 42.37%Heodo
2020-09-18REP_Z7QO4GBHNNOP.docdoc 9d18ad242b906738ecf1a87d38dfa1b46320cbed0c62244a23c7585251350efbVirustotal results 44.07%Heodo
2020-09-18YCO_PO_09182020EX.docdoc 2207a632a023bbb96b9b2e0dc6b930a3c725420713dfce30b4b47c7fa3a46932n/aHeodo
2020-09-18INV_SC7994882881BC.docdoc e3c7337d6899a5aa8ee475f563c6c84af325ac88c2a30a676f56d6182a75b59bVirustotal results 45.61%Heodo
2020-09-18BAL_PO_09182020EX.docdoc 4e500dc20300e081376f4f6951330ba0b37700ae0b23ac5662a2e96e2cd9a755Virustotal results 42.37%Heodo
2020-09-18CYLS_PO_09182020EX.docdoc e6c59aa272b0319132af611954aba4331117e24c05ed652fdbf58c0ff36e991dn/aHeodo
2020-09-18FILE_HPBRGJMR7LLNTG.docdoc fbb0768a54c96daabef7659e5ec321d26211a023027f8beb9b9b5bf49f36d583n/aHeodo
2020-09-18A_S97BP2CBQ8BRN.docdoc fe79ed4902c209d55bd37446fc8d4ce7b37f241e85e7d17264051a8cb300fa5eVirustotal results 38.60%Heodo
2020-09-18NCI_090120_RYZ_091820.docdoc d23fa82b132d789d0acf534793a6437c0fbd0b86e7e85475b6856e558b964ca7Virustotal results 40.68%Heodo
2020-09-18I_65VHT96.docdoc 2be116761f944e13024bcdd5438723cefa835893e4fff5b6469836a25303c683Virustotal results 29.09%Heodo
2020-09-18XL_KVQ_090120_BGF_091820.docdoc 529620cd21b208f373dc72c4efcc0cf9f3ce6bfbb8bd0e44bf371084cc1bb9afVirustotal results 32.14%Heodo
2020-09-18REP_TIQ7WTV137M91K.docdoc e95b010a8ff840d370f7b1443ff23aecb562b6a5eafe6c28a393798046565870n/aHeodo
2020-09-18526133170.docdoc f6dee1b273f9ff061e9c1bcd320d7f98484283f3f6ce1973877bf93231a08562n/aHeodo