URLhaus Database

You are currently viewing the URLhaus database entry for https://spinneywx.com/free-itunes/public/65350089263/OMqGkWgPj/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:724978
URL: https://spinneywx.com/free-itunes/public/65350089263/OMqGkWgPj/
URL Status:Offline
Host: spinneywx.com
Date added:2020-10-20 18:44:05 UTC
Last online:2020-10-20 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 18:46:03 UTC to abuse{at}digitalocean[dot]com)
Takedown time:3 hours, 37 minutes Good (down since 2020-10-20 22:23:13 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-20invoice #90529.docdoc aa207e703858f3b5b98f6dde826e16108e94a533e26cc478693b1d39a14c7135Virustotal results 37.10%Heodo
2020-10-20Copy invoice #660640.docdoc c1a2f053ac0b9cafe6d08072e6971d0dfad8f938cc167753df413b1a5ee4065bVirustotal results 32.79%Heodo
2020-10-20Payment status.docdoc 80112c9d5f76aa1687aa0df70c0d7f1d96f1b7524da942b87480ff37231091e8Virustotal results 32.79%Heodo
2020-10-20invoice.docdoc 36bf9ecc1a8a1ba3e8b3adf9e916e0f5d5e7f0247f6c4efc53dcdc496443de74Virustotal results 33.33%Heodo
2020-10-20Inv. 080956.docdoc 15e191fa2be80a5d0b1b3af67b1ed360c006e3634442bb6255e4cc0f901abcd3Virustotal results 32.26%Heodo
2020-10-20R-100120 JCVU-102020.docdoc 36a9973c36b4c8891b4ff704670f49374aab0db27ba22546659b76a7f9c942d7Virustotal results 33.96% Heodo
2020-10-200602922264.docdoc 3bc3a1ea24bd194a23d6c8493b9754de9a41127025a14052754eba04dd1dda70Virustotal results 33.96% Heodo
2020-10-20Invoice 0408091.docdoc d725a9584594c0da62483ec85e99ce8baa89ab5be45320176bb3576abddcabe9Virustotal results 35.85% Heodo
2020-10-20Payment.docdoc 5de10aad274888c1ae2d0b13f1cc5199b0fbf596200f2f0d567aa2e2df2e2e22Virustotal results 32.20% Heodo