URLhaus Database

You are currently viewing the URLhaus database entry for https://kanttum.com.br/blog/wp-content/uploads/39zi-a4yxm-omryan/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:159878
URL: https://kanttum.com.br/blog/wp-content/uploads/39zi-a4yxm-omryan/
URL Status:Offline
Host: kanttum.com.br
Date added:2019-03-15 08:29:04 UTC
Last online:2019-04-16 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-03-15 08:30:03 UTC to abuse{at}digitalocean[dot]com)
Takedown time:1 month, 2 days, 10 hours, 12 minutes Bad (down since 2019-04-16 18:42:10 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-15AHN485275772.docdoc 39752866b4e0aab0bccc1d8a153619ab2e6b01d18802d2e0db2590576e85d263Virustotal results 25.00% Heodo
2019-03-15PAY754181227930750995.docdoc e26f27fc9f96fd81d4ea35e8a646abc2dffc19025b758a19b80511d9f4c77c07n/a Heodo
2019-03-159497650793925819.docdoc c523c1feaf944ceda2f7cd3f7153826adde1c17bc1cfd23315e1b1d853adf4ceVirustotal results 39.66% Heodo
2019-03-15INSTR369828989163725.docdoc af8e2888bd64490a70b1309b3860118339130a019d32a57de1d95d8d73123d69n/a Heodo
2019-03-15US7375105763532183448.docdoc bbf554b9fb07d7fb4b3bf21b4c53b1769b678d6bd5a3023c62e344b7ecbe07cbVirustotal results 33.33% Heodo
2019-03-15QA860858612830252.docdoc ddf8088e8d20e6320e6b8381ffc11303bae71c0ced56739ccc4a00cdd5ebd249Virustotal results 25.42% Heodo
2019-03-15INSTR646274167.docdoc 362b8a185f5462bc87c79f3774eb02399bde94bbb3890f2cc5042e12ada68c2fVirustotal results 26.79% Heodo
2019-03-15INSTR956970612197995.docdoc 2fbd64621b79df5e283e3a678f8e19f5d6915606c3c3b76aa51b8ec43be5115fVirustotal results 24.14% Heodo
2019-03-15PAY31274050802.docdoc ede18ac09dd9ab563bc95d5a3a3d91e0319bfc5b0bbae509fb03ba8c11228e22n/a Heodo
2019-03-15ACC308118107308652.docdoc 509067b017fc594b417b93d6fb8b122ac7fd467fc384ed3e06b34d4fea8e36cfVirustotal results 25.00% 
2019-03-15US195071551054.docdoc f236525e9c45c8f47c90b25f282b107183b7d0926d4e9f821bf2c50a8b6e959dVirustotal results 24.14% Heodo
2019-03-15US306615226068589.docdoc 1e897b6aa1607f22a9016bd31302ba7666a9d89b3ef509a70d580d4faf0fa0d6Virustotal results 21.67% Heodo
2019-03-15ACC038558118024745.docdoc e54ce33083b377ac80463785d9300214958673ff30797750da30d0661f82f35fVirustotal results 22.03% Heodo
2019-03-15ACC24475773602178.docdoc db407e674507467231a1a24ebd21199212ab21a70a35bf4e735419d22f32c89aVirustotal results 21.43% Heodo
2019-03-15PAY49593913950605.docdoc 56443b5dcae8501d615a7b2982bdb51c47bb7fe239224ea898da35bcad6511aaVirustotal results 21.82% Heodo
2019-03-15BHDI9651170371.docdoc ba95bec390cf5b946e1fcd0021d188c4a7cf3198cd2aeb9d48cbbdf173de7660Virustotal results 23.73% Heodo
2019-03-15PAY0146211407561.docdoc 58a852c0f098dda910e51699d10c457e0e5f329bbf36074eaa42b189a0670afaVirustotal results 24.14% Heodo
2019-03-150098520400968774850.docdoc 2d90727ed2fe84052ac39eab12e5a2b5423b7433702f143813c31b74df3d03f9Virustotal results 21.43% Heodo
2019-03-15US97753103162402187.docdoc c2aa60c14d857f98e372b34e710a13341c110c0b57baa52f5feb30e461bfe122Virustotal results 22.03% Heodo
2019-03-15ACC5898013122587123711.docdoc 1846e510c68959be3da55f9c9779b33c86b056aa0027add02dc1bc37d6917ca3Virustotal results 21.05% Heodo
2019-03-15INSTR523266103848454196.docdoc bf1a1ef70a4d2f45740c873eb408f2c8d8a4a90da6479afcb93a6fcd75b1ef11Virustotal results 21.05% Heodo
2019-03-15IAFC424895283.docdoc 8f8cf818f62abe9a0228bbe73247cac12c9c76a28c656145dfb45b1b95245bf8n/a Heodo
2019-03-156184883804267053219.docdoc 3e8d1d3cbecdc6d8de0d0331bf79ebb6ff555b575e2e91c66f2040bd9f744a3eVirustotal results 22.03% Heodo
2019-03-15Y77573010235041522.docdoc fb46729bc2d71e7467f8fbb25a967882172b8de20b7777729593ed18ec2be2ceVirustotal results 22.41% Heodo
2019-03-15ACC99095875536055827.docdoc 07e992db0d01560e68faf557acb2b60b9978577c27522d70a4f2fa2f347bb430Virustotal results 21.43% Heodo
2019-03-15998892454307779.docdoc 799bb9af040ba880f789ab9307a2b5ebff334849698481279f4c4f1c1fdb2340n/a Heodo
2019-03-15PAY15078798460461333702.docdoc 2669686968d5761cbd9ccf6cfb1e2cbf2b36b174c9b7595b15b82971ad131573n/a Heodo
2019-03-15US7100857051.docdoc 7dbccbdcad299185bba7f79d61b63d13cfa4a4c4dd514c519e97ec649bb1d71fVirustotal results 22.41% Heodo