URLhaus Database

You are currently viewing the URLhaus database entry for http://topsystemautomacao.com.br/Produtos/sec.myaccount.send.com/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:154622
URL: http://topsystemautomacao.com.br/Produtos/sec.myaccount.send.com/
URL Status:Offline
Host: topsystemautomacao.com.br
Date added:2019-03-07 20:28:04 UTC
Last online:2019-03-14 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-03-07 20:30:02 UTC to abuse{at}hospedagem[dot]net)
Takedown time:6 days, 16 hours, 19 minutes Bad (down since 2019-03-14 12:49:47 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-09eform_03_09_19117005.docdoc a59baef40e417773d15a3f15028bd4a0d580778e7320fc648e92e8961dc31281Virustotal results 29.63% Heodo
2019-03-08eFORM_201903098027.docdoc 1f176c577d49747520566003300e6b73da418550b44734826234a2bbbcc59fa5n/a Heodo
2019-03-08eform_2019030875926.docdoc 66fd72d2fcd11f4b369903f28687f701c0e8c165da481c28216e8950c027b100Virustotal results 31.58% Heodo
2019-03-08eFORM_20190308635301.docdoc 8deea743467e95136dfa0114c8297d7ea034ebd4ddc596b07b4f6c9bca70189cVirustotal results 27.78% Heodo
2019-03-08eFile_03082019842471.docdoc cf0580d255063e46aac35d24f7222b9789de3e2e62c971e050551a1c7e98a5c0Virustotal results 26.32% Heodo
2019-03-08eform_03_08_194010937.docdoc 0f68f035991bc2559d7d06ae07571e49745d46f1690d12758dec39c572cc1e4cVirustotal results 29.31% Heodo
2019-03-08eINVOICE_0308201953694.docdoc 8ecbea15be645ca63bb9dc055627c78578cc5e582724ec6db03fc8dc78c49c0bVirustotal results 27.59% Heodo
2019-03-08eform_03_08_19328433.docdoc 674ff37406bc313bec7cbe68760bff2f8231391613b8c72e1f399989ca103adfVirustotal results 25.45% Heodo
2019-03-08eBill_030820199179857.docdoc bc2a94679f8ddec5fd9c29be022d9f288d79e227d2876e5d0db7597dd672a94fn/a Heodo
2019-03-08eFILE_03_08_1919517.docdoc ef1be53df4b6aba4f43e86a7ee2c8d02bc4981ac6d129df3cb9a53b63abfd9bfn/a Heodo
2019-03-08eINVOICE_0308201952334.docdoc d4a51830ff7184f28c6b7f7f54d1b61e9adb8072fe831baaf5b8c06490547ad6n/a Heodo
2019-03-08eFile_0308201917726.docdoc 1ec49ca9afa8f94df7b34fd2459b4cfb5575c23d9c25f11af8c5b52d4f5b77a5Virustotal results 34.48% Heodo
2019-03-07eBILL_2019030838727.docdoc 5087985b3ac7b85851f5818131aa21f2cc6e6e2d04bd5195899d8434d56ca346Virustotal results 30.36% Heodo
2019-03-07eBILL_03_08_19852743.docdoc e03e86617ec68c57307e6bcbc13d3d923d07a3656bcc993d8c6eb7d88e6885f5Virustotal results 32.76% Heodo
2019-03-07eBILL_03082019299534.docdoc 97125c1e713992e7b3a87601c1ad87d3c826b16eef337baec53959ec27ac8568Virustotal results 35.85% Heodo
2019-03-07eINVOICE_03082019263306.docdoc d11de50ccf6e60d9fa3acfb4265adbfbf21fc85a1f77e30e3ecf894deba25d7bVirustotal results 29.63% Heodo
2019-03-07eBILL_03_08_199335564.docdoc 9d2f461038779c2e84bc23fd9e18fd5bdbe0f563eb6ee2dee899fb898702cf29Virustotal results 31.48% Heodo
2019-03-07eFORM_2019030875272.docdoc 42eac4d0ff65d910c380eeb9293d1513dfd86443ad93061ee6b33a773da0b33aVirustotal results 26.92% 
2019-03-07eFILE_20190308932983.docdoc 4413bd5a280105f55e4cb1a117fc3541a218e877655bcd96d811adf628a740dbVirustotal results 29.09% 
2019-03-07eInvoice_0307201993575.docdoc 12565e35cb87dacbb2b7e8fdaca9909722e0dc7f6940f22682240f5dcef3a356n/a