URLhaus Database

You are currently viewing the URLhaus database entry for http://griffinoc.com/wp-includes/paclm/325ZTtBflD/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:757370
URL: http://griffinoc.com/wp-includes/paclm/325ZTtBflD/
URL Status:Offline
Host: griffinoc.com
Date added:2020-10-27 17:37:08 UTC
Last online:2020-11-03 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 17:38:20 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:6 days, 11 hours, 51 minutes Bad (down since 2020-11-03 05:29:23 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-11-02RSK15115 2020_10_29.docdoc 06ee6cdbae9c7a4c2b827a71d2d423e0ef13795289186c65f75983dfb4d450can/a Heodo
2020-11-02RSK15115 2020_10_29.docdoc 107adb57e17d4f1a9e35f5ec86b7c3340d492262e635690a129c950d3f65d008n/a Heodo
2020-10-29MES_2020_10_29_113.docdoc b3c2d3a91a889b5271145af8b15f76ad478500cf875f2718bf94bac2d3932c7aVirustotal results 15.87%Heodo
2020-10-29DAT_2020_10_29_255341.docdoc 57fac90de363fe45e3b4e907b7b4a0801309db3222798204ce4ceaaf95c9c562Virustotal results 16.39%Heodo
2020-10-29DAT_2020_10_29_255341.docdoc 57fac90de363fe45e3b4e907b7b4a0801309db3222798204ce4ceaaf95c9c562Virustotal results 16.39%Heodo
2020-10-29071-2020_10_29-9159.docdoc 804d8a73caefdbeb69c3939a8a01531db4e813e85b3db18efd2e87cd58c132f0n/aHeodo
2020-10-29UNTITLED_R310.docdoc 94e08e3932fdbf68dce59492d22219b9afc8c0effe79517e9d9ea943a40b369aVirustotal results 38.71%Heodo
2020-10-29INF 20201029 1827815.docdoc 2bf0cc9160a59f450f45c68f45679d8333b8149e30c04c74d20be56db019f884Virustotal results 38.10%Heodo
2020-10-29UNTITLED-20201029-AY139.docdoc 71bc58101436a711833b7d8478b9481b6353079f89c0ff4b11760a64e6456afcVirustotal results 38.10%Heodo
2020-10-29Dat 266.docdoc 52ddd756ef29c357fff25ed21534b42e407e5929f9e1d53cd2c153e006168a52Virustotal results 37.93%Heodo
2020-10-29mes 4665.docdoc 6838da271d0d1b3e87290168d3717f5b627a6021ececd73b0408522c0f5f3aaaVirustotal results 37.29%Heodo
2020-10-29dat-2020_10_29-FY9516.docdoc 41ad376a9521ae341bd5a60e9084150f0745b92fb26a5b44001e11579d180316n/aHeodo
2020-10-295438928 2020_10_29 696011.docdoc b9275b6099be967ff38eaab7ab232ce6ec1f903fc98fda4de1f2c057d3f85f70n/aHeodo
2020-10-29doc_20201029_RHW915071.docdoc 0d0ce750d13387b661ae2a3ad059f09dd3ec7adc2cca4afee2262b93dc124fa4Virustotal results 34.92%Heodo
2020-10-29ARC 2020_10_29 59765.docdoc 1760841f07035052ab44e29d6f475c361b1b2c60b6faeb2419abb262bbfd0e26Virustotal results 33.90%Heodo
2020-10-29UNTITLED 2020_10_29.docdoc 772b14f20e166cb1f21d538a8d1dd0c81dc22a2907ca07f299a1c90053c25d5eVirustotal results 34.92%Heodo
2020-10-29doc 2020_10_29 381.docdoc f93b2244f0e3fc1dd8ad428bea4ce02820a32d5a444eb2d4848f150252dc7daan/aHeodo
2020-10-29Rep_20201029_M894.docdoc c0351b2b65f42bb0e32e612db2f556a0daa8962bde4491a6f16275680833ddc5n/aHeodo
2020-10-29Arc-2020_10_29-641083.docdoc 01832091bf1c1ecee3623274c0a9d173d305fb1b0f1059cafa86eab41961f498Virustotal results 33.33%Heodo
2020-10-298932P_20201029_701.docdoc 7ef43d002962412af376282a6cf98344219f97bc5ae5ab70b03204fdea131fc9Virustotal results 29.51%Heodo
2020-10-29158UG 20201029.docdoc baa7a5c8cd03cdbad3f018274a9ce821b056f2d7bbb6bdbd6285485e3b56338eVirustotal results 26.98%Heodo
2020-10-29Inf-20201029-64769.docdoc 1b8f86c4ebb6d4e560a7ecb82b42f8dc43dd044dac4dc0ff93161529f524f03eVirustotal results 26.23%Heodo
2020-10-293068 SOE6738.docdoc c70d77f7786f19c28c6d7b174832b42fc69d47808b6aa5ee197250ab24b32cbaVirustotal results 25.40%Heodo
2020-10-29Dat_0068783.docdoc 1720669c203eb51744cdf03c545a98532f1eee40938d99e806fb7a45ca9c6d8en/aHeodo
2020-10-29dat_20201029.docdoc c59b1b726a72aa7b4df2f72a8eb97bca6345ce1d1400b6cbb7896bd8bf41a27cVirustotal results 26.67%Heodo
2020-10-28List.docdoc 04b243a2efe01d1aa2571e0e152e721d4bced5a7f0f115c64b84ed77f2c27be8n/aHeodo
2020-10-28D457 20201029 9474279.docdoc 5c91b9dff81808ba1ba3d21fa9c6ec57d09922af1cfd7ae5d06aef031eee5f11Virustotal results 25.81%Heodo
2020-10-28arc-2020_10_29-6247796.docdoc 79144d6d13b065f90df03aa72c81e9b96492fb861b5e5a46228133dd3994d35bVirustotal results 25.40%Heodo
2020-10-28REP 2020_10_29 2385992.docdoc c47e2824a0c7956c6d3e86bc3b599b19f2eb9c2136949bda71de8e4a5009b49dn/aHeodo
2020-10-28Attachment-2020_10_29-QB99929.docdoc 0141fc68f8d61f3c6ab01420927eb224eb83af6d701944e66d37f19898cf1b4eVirustotal results 24.19%Heodo
2020-10-28DAT-20201029-964701.docdoc 283e6d40d0814da95cb0ec7fe6dc4e4ccdfa1dcaaaf61646c01bc0f0250d62b1n/aHeodo
2020-10-28MES 2020_10_29 4897060.docdoc 76029e7fcd2020aae7857b746d85ce4b9e91d196221d3b731060c7908f45bdd5Virustotal results 24.19%Heodo
2020-10-28Inf_118.docdoc 63e7ee325c79ea137e6cf1af5f7b56ef6767d20edf1d67283a46f0ec1dac902dVirustotal results 23.81%Heodo
2020-10-28Attachments_PBJ945813.docdoc 85679073310e9e6b9f5e274084e661d4947f4c5ab7042d40b9a204ba09447799Virustotal results 23.81%Heodo
2020-10-28inf_L97757.docdoc 694b0629f5e0d7e62b4b5c15c4e49ff1be51d9f8e6a8657dca67e6d1df1e0f85n/aHeodo
2020-10-28S275_20201028_92704.docdoc e7128da1bc0a8c8b0e4a29972b3c1141acf5b7d6f14a7dc7e27aa352e58365efn/aHeodo
2020-10-289024U_2020_10_28_457498.docdoc 83d5e426acb354f79d4d34753eb72ca59aaa11a64226334ade780226e22a8df1Virustotal results 18.03%Heodo
2020-10-28Untitled_QXY71517.docdoc 0b4686326341aa6170756e22822c138bc6d813412182af4238dd97fc39ea37acVirustotal results 17.46%Heodo
2020-10-28Attachments_2020_10_28_DD045390.docdoc 3fb10a7eeb13516354cf1e4f1aad7f811ab0eccc9bbf89a06d81f2ee11d1c7d2Virustotal results 15.87%Heodo
2020-10-28list 2020_10_28 KNT984.docdoc 8ff6258aa02f76f35f8a2a22164c938e0c28b2b8b906c2e1530d70d2675ce356Virustotal results 15.87%Heodo
2020-10-28ARC 2020_10_28 PL46725.docdoc 03616286275b9a1fc46caf41606be27bef1624414a0af8cafa54567658230dc3Virustotal results 16.39%Heodo
2020-10-287497 2020_10_28 497704.docdoc f98113f3bb223fabcb8f2c799d49abbef50eee542d323aae513a4fd656da82b0Virustotal results 15.25% Heodo
2020-10-289304OBW.docdoc 66bec951e026a392e0adfc69b614a9ef4e22bad0ed2bf7b99ea2c1a3a83800efn/aHeodo
2020-10-28Inf_2020_10_28_HVH285638.docdoc 32fecc60c5ad5628caed3644dcff3a29ba6a97fa44cf37911169801f1dd79738n/aHeodo
2020-10-28DAT 2020_10_28 B82147.docdoc b6830a87d4b0190a7ab22d5f1e81bb4cd42a8a746e5ca60104304cfac33066aan/aHeodo
2020-10-28Rep 2653500.docdoc 26f1a5b95dde0bb2e8ec7c762def74db46a6d4e280784faa7665f997221ec5d7n/aHeodo
2020-10-28INF J50082.docdoc 1abdbe7c354ae63b40f95bb1e8de6b2f9ba2fa8be03e8aadf221b6d7144cb04en/aHeodo
2020-10-2833251 T8208.docdoc fadb9f507214862924f94fe92c13282054a2522a4b0776d5ecd2fcb203c05a38n/aHeodo
2020-10-28rep O1740.docdoc d67bac7dbe75fbb08f68108c847dd12d7061acf4ffb725a8bb61e0fe86f9432bn/aHeodo
2020-10-28Dat_2020_10_28.docdoc 7a72109b0acc2550c896a52c28eea9bbb2ad5f22579e0b57bd5f5fc2559cee90n/aHeodo
2020-10-28Y424_H288.docdoc f071821e1cff4a6252b3d1e2dfa72c74cb4f0ce2c02b3e012a356ca29421e4e6n/aHeodo
2020-10-28UNTITLED-2020_10_28-WC094.docdoc ae3d650ba24dd80404c0a514f6455bb2a56e61df533ef1704cab33e46f41b1cbn/aHeodo
2020-10-28MES 20201028 YH57782.docdoc a41e4d1738fe2c3ffab80802b9a6ecf92d32c0e4c1180fddac1a9e733b24bbcfn/aHeodo
2020-10-28rep_20201028_417335.docdoc ae14a8bfd6863ef8c39e36774089e581aaed45e5e6cf5af493f18e676c4e6bd4Virustotal results 34.92%Heodo
2020-10-28List-20201028-XE956.docdoc 76f9fd95516f2170f2a2b98d549bd1a7acfb32b14b68e37d3179f1b26c540a55Virustotal results 33.33%Heodo
2020-10-28Inf 2020_10_28 XH5488.docdoc 5cf54e1bb1d28b6fe18106c2ab05c35a90362e5eebdfea67e4f42f3f9f6f3e3bVirustotal results 31.75%Heodo
2020-10-28rep-20201028-705.docdoc e6bb4b2e5f64a9731c9bcdc71588f88a8a7859bcb6c7660ed8dfeec07f866de0n/aHeodo
2020-10-28LIST.docdoc 499fcdb158cd348b3e2d3b24bc3c589dd4ddc7ea3bcf7feced943fd52c28eda3n/aHeodo
2020-10-28ARC-2020_10_28-E749347.docdoc c3308829a284660d312505ca8f8cfea5a9f7453b63e7cbd0fd6fb615451eb2dcn/aHeodo
2020-10-28inf_2020_10_28.docdoc 072751c1432883b1d8eedc16c5af25355d8e49aa2207b3ebf401b5641ecec311n/aHeodo
2020-10-28Arc_XHW685545.docdoc d0407229837e16300869db2286f98ba2f503d302a76aa7f006e16190accc9115n/aHeodo
2020-10-28Inf_2327.docdoc 2cf3d4913e94c3a564e5c9e16a395ed68e8d693a91818fbe5f2fed1a86ce6b0fn/aHeodo
2020-10-28MES_33560.docdoc 41df63441f779c2dbcc1f298638d0ac777c90fa3015f56c6111917d8975d53c1n/a Heodo
2020-10-2892992-2020_10_28-SZ731.docdoc 5ba6a0db5fe221f32f4a9cd85cf69ab066cc4f6186d6e93b5669571a32a35d7an/aHeodo
2020-10-28Attachment_T5932.docdoc cfa7b0b510a2266be87eafb4820fd7c2168406cd0088d49bb69953c15c4c29den/aHeodo
2020-10-28rep_208.docdoc ad54fee328880e35c49fb53421e627a2258c3bb67b79ef615dd242b9cd6e301eVirustotal results 30.00%Heodo
2020-10-28Attachments 2020_10_28.docdoc ef4f0320bc9b1630b65794bd9002483b4befdb4cd786cc1e950fae7424d0d789n/aHeodo
2020-10-28Doc 2020_10_28 1436484.docdoc e6634dfb115145a532b355b726aba5759dffd436d25c324d31557d1739bd6edcn/aHeodo
2020-10-28259ZCU_2020_10_28_5997.docdoc 0535f517190e281fbbda0914f15162d4b5d14512d1a7fb69acc39525b1a44333n/aHeodo
2020-10-28Dat 2020_10_28 337087.docdoc 7f9c1d73618a8d01a1bab1833ae057b59a7f348f84635afa633c714d22dc64c1Virustotal results 40.32%Heodo
2020-10-28Dat Z21819.docdoc cdba75792bcf44a350ab83ecd05679196648d93ea60f426ff3e28d4239bf1826n/aHeodo
2020-10-28314527 20201028 036864.docdoc 785d6c0b148d8dddf3cbb492f290386eed4b1e54c7960b26263014af5b68b783n/aHeodo
2020-10-28DAT 20201028 340.docdoc 0d1b1abb174a0d844bca3ed5d58ad573622e243d7e1fec3bf2bbfcf78d53ed61n/aHeodo
2020-10-28UNTITLED.docdoc f3f544d1ebc8663d6d4d375f2fd7e749d0b34bfb3aeca33e3ce7c598f5748f3an/aHeodo
2020-10-28Arc_PQ4208.docdoc 813a0235960db2fd8d631f28e2f6a1f3bc4028058aa089f296696b34265f3170Virustotal results 35.19%Heodo
2020-10-28Inf_20201028_9893.docdoc 64b7e5242a5c60c2b2031129ad5ff53540b70c43ac2530d09a627c3f8d4f4c43n/aHeodo
2020-10-28473F_20201028_PK03263.docdoc 13578189ba67b1b728017c0e96a3708199a8c879f2be7531e35e6570b09f31ban/aHeodo
2020-10-28Attachment 20201028 B1965.docdoc f0c1677fe438fd6ffe9e4d5236396062d106d01fabce19561b919795cbaf7f18n/aHeodo
2020-10-28Attachment_20201028.docdoc 52d21414a206f853f6469fd112297a132aa6ff3dcca6b0a710e9cf642ecc1ad7n/aHeodo
2020-10-28Dat-20201028-WU3840.docdoc 9ca8226ef71916dee3526b14cb6e112f6d9c12c2365d5bf4ef43eabfa3c844d3n/aHeodo
2020-10-28mes 2020_10_28 RUN55930.docdoc a9a06039ba32a804f7bf78b29bb381099158a60fd7ef4670d249ff4dd67188d0Virustotal results 31.48%Heodo
2020-10-28Inf_20201028_K44458.docdoc 2219322a4c1658799d82b293a749cd136d660fce20f47a72682fada10e6a7628n/aHeodo
2020-10-28UNTITLED_Q0372.docdoc bb767a987c3bb38d105c55a5e17fe4bec3ce116f87235dce04be1f03c3ba6fccn/aHeodo
2020-10-28List.docdoc 9e4cc073d920beade6850d07ab612e9898dd652e564e6c5f8346893ca489d5d4n/aHeodo
2020-10-28File_014.docdoc a1e19706a93e53e657ae474f58a7e0e0d452d2f95a832d25464a5e7509624aa8n/aHeodo
2020-10-28rep-20201028-H4034.docdoc 933899c854d4e9166cbfa37c763338c236faac01e87a8baba170ac0ee5f33a2dn/aHeodo
2020-10-28ARC_E1084.docdoc 3a0c91d1af39d69f3f8da8e51e87d2e7e9f161385011a794b8b14db045ae3a97Virustotal results 26.98%Heodo
2020-10-28Untitled-2020_10_28-924725.docdoc 9bd0e68a4d1b0b3fa07441324dbc77574a04628efd26d801f15105057255e5fcVirustotal results 28.85%Heodo
2020-10-27MES 20201028 95316.docdoc 9768f4ad74f231794339cb3b22a411e463959ef76116f148db611989ab353f84n/aHeodo
2020-10-27rep_2020_10_28_CL208.docdoc 50e88bc6d83377ced68b131f8302b2a6230dab484f955b728584499d227ef75an/aHeodo
2020-10-27File_2020_10_28.docdoc 26eead61c6edbde1e06d00ecf89571be284ba247df2081239f5bcb0632b4c1dfn/aHeodo
2020-10-27File-20201028-F11196.docdoc a7b5befccf3dd1276a60f1cea3f930219e35aa634b378b23b57772f480d9fe2cVirustotal results 29.63%Heodo
2020-10-27UR23716 2020_10_28 FI583.docdoc a97d0d9b4dc3721d627ef5df398f56c03281aacd47b15299f409a1f2a3c70fb1Virustotal results 28.30%Heodo
2020-10-27dat-20201028.docdoc 97fec953a0cff6d4e8e25bcf13a04df5c1d40b00b5cfbd5f0054b8e819247843n/aHeodo
2020-10-27FILE-T327579.docdoc 07fc16d318c59095f8f65b3eccf82c8a9578ef9013cd329b072610c318762a6an/aHeodo
2020-10-27REP_2020_10_28_GJO332.docdoc 414730c09b8914aad74e763d7ccacbfe96361572d2f1c53fd6210f913dc96549n/aHeodo
2020-10-27QNX06883_2020_10_28_RZ434918.docdoc 8db742a5d40812d9f9324e4a00305210957fb14ef36e038895070b73c3fdb398n/aHeodo
2020-10-27FILE 2020_10_27.docdoc fdc02372ac6d7b4a8701285360493b05002f7036df6d3fec2cde93f7e8a5de75n/aHeodo
2020-10-27Dat_20201027_F982054.docdoc a851a17be48fb9f40d25b14949caffd6ad3f90a89f3ade23e49634e2649edc0bn/aHeodo
2020-10-27Untitled QCD085.docdoc 46f70d977914154210a5ab7879423bab2c3cc66d01fa83bc33989525a1b0fcc6n/aHeodo
2020-10-27arc_20201027_435703.docdoc 65ca688afc9a4a3542b3f24aec0d15a23d4ff309adc0aec528c289ed1630fee2Virustotal results 20.37%Heodo
2020-10-27arc_2020_10_27.docdoc be937cc53bc89c68684381e254ea5664f66b9768303dd4785f47cb80a1f74ac8n/aHeodo
2020-10-27Inf-4995.docdoc 486838cbf31e36e048d22c4684c571196e1410811269ebbd7f7f33c640bd1838n/a Heodo
2020-10-27Attachments_20201027_RF33583.docdoc 9a665625762701ef94a2ebac83e7afc5fe24eeb05095df8655a980ba20f75343Virustotal results 19.35%Heodo
2020-10-27HA072_WMG23521.docdoc 3d8169eb16fa0973f3703c7888f5cb1606d226f0bd32f262ee332385c5dc4470n/aHeodo
2020-10-27inf_20201027_908.docdoc 672df5031e725bfac0c97e002d436bd64cd9be2565a07608954b264221464464n/aHeodo
2020-10-27INF 20201027 97771.docdoc cd091663187479497342114baa33245900686aa0cbecc305a1d65e6942fa10d0n/a Heodo
2020-10-27File_2020_10_27_AY947180.docdoc b91805dd757e2c22fd237b95a5414b7ecf4bfff23e7e48d024ac493fc7af96c5Virustotal results 33.33% Heodo