URLhaus Database

You are currently viewing the URLhaus database entry for http://blog.almeidaboer.adv.br/vo3mynw/UPS.com/Mar-26-19-01-48-01/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:165832
URL: http://blog.almeidaboer.adv.br/vo3mynw/UPS.com/Mar-26-19-01-48-01/
URL Status:Offline
Host: blog.almeidaboer.adv.br
Date added:2019-03-25 23:10:07 UTC
Last online:2019-03-26 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-03-25 23:12:02 UTC to netops{at}singlehop[dot]com)
Takedown time:2 hours, 28 minutes Good (down since 2019-03-26 01:40:13 UTC)

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-26UPS-CG7OIYHU1F.zipzip 1f3be5b55aa3bf367074305aecf64bf5198e4b55176896c3aaa30da7b540a349n/a 
2019-03-26UPS-DNRIED8HII980.zipzip be405787e7d47a80f48745a317c91ca6eeafb77ecf33fd3816fd5cfeeb683e33Virustotal results 20.00% 
2019-03-26UPS-ABM7JS9943UA.zipzip a297d4e3bd0350461711ea526d56791aa7abbbc083b5b9cc1576b4a1824c4196n/a 
2019-03-25UPS-TM6ZAFURP671.zipzip 64dec895c4812cb3e340cadaa1f59c56ab17cd88bc6e12ba14e862058fe10aebn/a 
2019-03-25UPS-PPFECIDAR50J.zipzip c94d525916b2213c9952e6eba4bfe2474122b84fbcd0e570ee25de4380edc5a2n/a 
2019-03-25UPS-GM94SJURXPNGY.zipzip dd8c74e43378b00571067f6a7d03600291c79361849671a8a2bc4d732e9fe5ean/a