URLhaus Database

You are currently viewing the URLhaus database entry for https://vitalgranos.com/wp-includes/theme-compat/parts_service/baohd68r/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:618325
URL: https://vitalgranos.com/wp-includes/theme-compat/parts_service/baohd68r/
URL Status:Offline
Host: vitalgranos.com
Date added:2020-09-28 18:27:35 UTC
Last online:2020-10-01 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-28 18:28:06 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:2 days, 12 hours, 15 minutes Poor (down since 2020-10-01 06:43:29 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30V_PO_09302020EX.docdoc 7d2c8d827a62c501876d11119d9989eae86dc953f1f0ced0c65a9567cb616fbbVirustotal results 22.58%Heodo
2020-09-3094598508.docdoc 27b242f5eb32bacc3010e0a947f1dbbab9d920948241c349a3aec7063d216ed2Virustotal results 23.33%Heodo
2020-09-30PO_09302020EX.docdoc fc6f0ac3e38b970866e30342911b1f72bc2a028a33a093badc8c5694321d5808Virustotal results 20.97%Heodo
2020-09-30DOC_PO_09302020EX.docdoc 8ab2e6cb8892b88bad960fc01887038298cebc93804c11f3bf92624541fd00deVirustotal results 21.31%Heodo
2020-09-30BAL_VFB_090120_ZKM_093020.docdoc ecc336e27a1ff6eba45106abf4d47adf3ed98c94f40a5dfc80e9e3287d79c099Virustotal results 45.90%Heodo
2020-09-3035386491.docdoc d0ce4cd7cb0a84604bbd7f40f0aa48a2f09e21fb9eb3d4b72d64cf88790f3081n/aHeodo
2020-09-301327754161090436.docdoc 9c8962de4c40c27a546d2347cc878f099354ae9f5cc7e799e78d864d74a6a72eVirustotal results 43.55%Heodo
2020-09-30PO_09302020EX.docdoc 1f7fb407f4aa9c2e8d59826ce97d6fa642f0103b0c140bb54dc65cbe8f8c92f4Virustotal results 45.90%Heodo
2020-09-3010337678.docdoc 896b1086164f16900fa21fd364f85761da882abeb87573d0eac49e7dfaf2524bVirustotal results 43.55%Heodo
2020-09-30DOC_F495UA58.docdoc 1a2856f6dfce0f239bb89c2fa41ba26f9d1761dd09caa8312e58c26aa1411369Virustotal results 38.71%Heodo
2020-09-30DOC_EVH_090120_NTE_093020.docdoc 1854226276e84dabaf5ceaefe8e33cd56360b60752eef6ff1a0e8e1657931e53Virustotal results 37.10%Heodo
2020-09-30PO_09302020EX.docdoc 797ac0be9b6e1c912dab41fdf6c487642e027c1a24c2a6510ee3a1a326ef7bb0Virustotal results 37.10%Heodo
2020-09-30FILE_GU8208692146SW.docdoc aabd54aa244d3a19daa025d685a63495581f02a35c44e11bdb76ea7bbf7360baVirustotal results 32.26%Heodo
2020-09-3079737725.docdoc 98d73b34a062ee1b2c37410e0e1780a6fa53a694ff1df676a5b0213206078d85Virustotal results 32.79%Heodo
2020-09-30H_L2LKA75R4IH7.docdoc b3e10600287dfaee56f53325acb38c44c75d92fdda24bce58c9d231eebc0bd06n/aHeodo
2020-09-3091527634.docdoc 48e23cb77f6629ddf1c1b70ff1af00789fe9ed39014db2e97b4be24c2e13a168Virustotal results 30.65%Heodo
2020-09-30BAL_84674875.docdoc 75f032ed1b4c5d9738c4ebee1d878f1fe5307cba5c43dc44ce2443a640e7fb2fVirustotal results 30.65%Heodo
2020-09-30REP_PO_09302020EX.docdoc bbbd4c73bc383a0187533459a3e99105ef733893b116bda7aebf13a371dba532Virustotal results 32.26%Heodo
2020-09-29M_0816159455.docdoc d6baf92252e2e3e673077f1cea8fc4bf0e240f4383dffc91c53d88857ba5fdf7Virustotal results 30.65%Heodo
2020-09-29PJYZ_ZKB_090120_IJH_093020.docdoc 5d9881c8900498814ca049d263ca3339b113198bfe781ccb5e5ffbc2b23eb325Virustotal results 30.65%Heodo
2020-09-2991597366.docdoc fbdacf9e30368d59414b52f459d935964b7833d6d8467bf0eb4ccfa97f71e4d6Virustotal results 29.03%Heodo
2020-09-29U15PW4B0PW5.docdoc 91d4d101c3e8a665106bb48847dbee3791e2a9a04c0adb2f363ae7767e463337Virustotal results 29.03% Heodo
2020-09-29LAP_090120_FCF_093020.docdoc ec406f315de493ed38f3fc8e7bdd65664965b74a7215c69123b3e1c08ec28fc8Virustotal results 32.26%Heodo
2020-09-29INV_QMY_090120_GYO_092920.docdoc 80c77811d31daab98c1ec0882d3c59b98ad3faadb511c21e4ac662cb9673e1b2Virustotal results 41.94%Heodo
2020-09-28FILE_4219057616376170.docdoc a1d3732aabef441bac4f6c5a0f3893d8cf0026cfa88abf87fe0e771c8e5b025dVirustotal results 29.51%Heodo
2020-09-28REP_HQ6196941572II.docdoc c1fbcebe132d37abf1aced2c45ec02b1c8e78db1bb8befb8b3cf1f12bd2e5398Virustotal results 29.03%Heodo