URLhaus Database

You are currently viewing the URLhaus database entry for http://aftelecom.com.br/programas1/UlDqi-I7Q4VMdrQzVbBg_qjUhGzkB-Vr2/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:173380
URL: http://aftelecom.com.br/programas1/UlDqi-I7Q4VMdrQzVbBg_qjUhGzkB-Vr2/
URL Status:flame Online (spreading malware for 7 years, 4 months, 16 days, 7 hours, 15 minutes)
Host: aftelecom.com.br
Date added:2019-04-08 19:51:05 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-04-08 19:52:02 UTC to abuse{at}locaweb[dot]com[dot]br)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-06-10Payroll_09314520653_Apr_09_2019.docdoc 2f83adfa100ba0e07a874b3f282fa4ff9643d984107c92d94c08dc4c4a4e17f7n/a Heodo
2019-04-08Statement_7613466832_Apr_09_2019.docdoc 1101786b6274fef99f63032922d70fbc8c2f84e6ebce34a8f9282edbab1d7367Virustotal results 40.35% Heodo
2019-04-08Statement_408295646807_Apr_09_2019.docdoc 25d4c7ac03e2e88874550c286293eb78dd07c80cf89484527ef7152f99c324a5n/a Heodo
2019-04-08Payroll_11007381116_Apr_09_2019.docdoc ad348aa277dc9d5f5348a035a74ed3b42fe38dcf2856ecd825f5d483d0b76b6fVirustotal results 40.68% Heodo
2019-04-08Statement_00838906227_Apr_09_2019.docdoc ccd4c1b814feb00eaa05224c0b807d9640b9fcbb6529337b01dc7be9e139e421n/a Heodo
2019-04-08Payroll_049008546362_Apr_09_2019.docdoc 4d4f7f3a0790c7364f18a1b2d570e9dd39c421dd425dd77a31669925e492d66bVirustotal results 33.33% Heodo
2019-04-08Statement_5519767062_Apr_09_2019.docdoc 1ad7606d7e3166a75ad8e1ec4feefa04c86948e537593034ea9d5d25bba028a2n/a Heodo
2019-04-08Payroll_5273528741_Apr_08_2019.docdoc 81b23c4b5b4c866ddee5c1e51c6b172c1842c0fdb94dfc46d40c46eeecc5b9a3n/a Heodo
2019-04-08Payroll_336529081294_Apr_08_2019.docdoc 4b00e9316c9cdf3a3e5a4bb26a67da2743d841187b066a0d3156fac0534ba556Virustotal results 26.32% Heodo
2019-04-08Statement_41770391032_Apr_08_2019.docdoc fe6bac880375061600fd0a279ace88e231faedb0c6486c9fb7bb20b1be9df320Virustotal results 25.42% Heodo