URLhaus Database

You are currently viewing the URLhaus database entry for http://efh.com.mx/css/KUvvT-iieMX91ZnK0xxh_xHdZPvrnC-qd0/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:178316
URL: http://efh.com.mx/css/KUvvT-iieMX91ZnK0xxh_xHdZPvrnC-qd0/
URL Status:Offline
Host: efh.com.mx
Date added:2019-04-16 05:57:21 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL :Not listed
SURBL :Not listed
Quad9 :Not blocked
AdGuard :Not blocked
Reporter:@spamhaus
Abuse complaint sent (?): Yes (2019-04-16 05:58:09 UTC to abuse{at}amazonaws[dot]com)
Takedown time:4 days, 3 hours, 47 minutes Bad (down since 2019-04-20 09:45:27 UTC)
Tags:emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-04-176731691146_Apr_17_2019.docdoc 87a20a2166ff08eb1fc5e1be844927bfa8e88b74fef29895fc40b94654d43d4cVirustotal results 24.14%Heodo
2019-04-1762888486568_Apr_17_2019.docdoc de05a81b032326fc39700039304035f207e806048aa3ac35707e297ae623cf2cVirustotal results 22.81%Heodo
2019-04-173807969996_Apr_17_2019.zipzip 7e655403855a4b5919af22f34b1474470ad3e71729c4ff7f95e7f650116b8123n/a
2019-04-171483253625_Apr_17_2019.zipzip 125fbfc1d0dc709bffd65406dec4896a8d76391024a09ec68143e645c0c91d03n/a
2019-04-177523894119_Apr_17_2019.zipzip 082a04bc90b57364f55974a9db630398fc87597064672f7da10a27a4b1b30adfn/a
2019-04-1752794246038_Apr_17_2019.zipzip adc659013017d11de91d4fd743b4a4b8cd7f57cbf78f45098d7f42e98b7a3634n/a
2019-04-177438807429_Apr_17_2019.zipzip 00248b17a6289fe106e48ea0785c2ca2b635be1aad27f525732747b9484447can/a
2019-04-178026438536_Apr_17_2019.zipzip cbbd15b3f392099e3242ae060e0fe8d8d84ce858cb4c0107d0b1918727cefc48n/a
2019-04-17552985372997_Apr_17_2019.zipzip 8c3d62554e4cd85616d1423b39b66fe52a330665817f928790cec4e6514679ean/a
2019-04-1749208015694_Apr_17_2019.zipzip 3e0f526b11697b52ff87fd3f05495b6f67087b07f4125bca2b17ef52cd0daa99n/a
2019-04-17102355030279_Apr_17_2019.zipzip 979f0f4cbc7749a4d9ab9998fc2bf0a7803f7aaae45a213ba4789655da3c20ecn/a
2019-04-177632812918_Apr_17_2019.zipzip 00caa1775daeb982786651b00870344fa13dc078f7f38492d10772c4d5ef4fdan/a
2019-04-17616662151684_Apr_17_2019.zipzip 59880714f6d7eb35cfb4c4669d41b7adc509cea98fffbca24229c80f8327c3c1n/a
2019-04-17034679610621_Apr_17_2019.zipzip bf5589f4346e1131cf9e3b8b4fc5a146f7f96116b0f72dcf169840dfd7d64662n/a
2019-04-17865407458337_Apr_17_2019.zipzip 222fb2ce916db0167b9b7860a74a9e65a53849694c344d5bb92dd7a927324947n/a
2019-04-176329330248_Apr_17_2019.zipzip 417d62fe2f6a336eaa74fbdaa22cb502e79507259ee66de34b7afe2f4620aa49n/a
2019-04-171314132338_Apr_17_2019.zipzip 512188963fef49fb9d130cf0c5fa68297ee280c11f61657217335f1f42fbb9d7n/a
2019-04-1703707052170_Apr_17_2019.zipzip 6273f14f14b5c48240bed2b6c2efd24e6dbc2ded2c08d83c5302aea37ed8e05fn/a
2019-04-1765589693007_Apr_17_2019.zipzip a96fea480c9b38f033f1efe30936c756ec5b30db1f10ae5b222f99de4efb3d25n/a
2019-04-1720474928814_Apr_17_2019.zipzip 7a8aa8f5106a06ccde6bd47870a39dc7929731aa1770fa73e5fb5e15e7288d5cn/a
2019-04-16998952622072_Apr_17_2019.zipzip 4485ae5a8e5183f8f4b78b50d7deaf5f0c6bbce79b16aaf67c5fcea3f4471edan/a
2019-04-161575519486_Apr_17_2019.docdoc d335a1d0c38e751f9376bbe88c7b18ab19c9459773a6951740a6782676e3834cVirustotal results 26.32%Heodo
2019-04-1670811874457_Apr_17_2019.docdoc 318647298c1370e2a454acf4afaed6bf692d1bd51759b4a7e0e78e925148f1a9n/a
2019-04-162789203544_Apr_17_2019.docdoc da113158c502b1128ea80c1a110708a22c510dc5dcc88939b20d87c2994f5c5dVirustotal results 25.86%Heodo
2019-04-1622863249930_Apr_16_2019.docdoc a39e96bb339abf98493d3ba90dcfa68795b464fa75de8ac6122d35c28da6a582n/aHeodo
2019-04-166496283997_Apr_16_2019.docdoc 8eba23049d725aabd84b63f8cd4b079c78f26cde6f7bb8be1d2477df0c0d5127Virustotal results 32.76%Heodo
2019-04-16555284027467_Apr_16_2019.docdoc 141e277b2165595334f404edd83397057b2a4ef8a52eb8edba79203f0aba44d9Virustotal results 30.51%Heodo
2019-04-1601150765464_Apr_16_2019.docdoc fa660e7b9ff937c7e5c479dc9cde90110956fb283453d09e1dfde4853b96296bVirustotal results 30.51%Heodo
2019-04-168097943487_Apr_16_2019.docdoc 3a4b689a95d70548cd86ea5280a5ca10220d49290818cf48f5130858ff399b85Virustotal results 30.00%Heodo
2019-04-1622163537699_Apr_16_2019.docdoc 7fae139edf9512b5788f271e05878e6d556721b4eddd8f556096824c3b9bec69Virustotal results 31.03%Heodo
2019-04-16099873469523_Apr_16_2019.docdoc 7147bcbc0854554068d051c589da76772d019dd8f1d56ee17b6ef90ba54c2706Virustotal results 31.58%Heodo
2019-04-161998861003_Apr_16_2019.docdoc 304a8542a85af048259d4d87cf12c686d4af0c4ecdbd85b2ec7ccd6ba4284db4Virustotal results 30.51%Heodo
2019-04-16913393362166_Apr_16_2019.docdoc ebbd8471022a4d525eb5bd3537e6a1688980bcd861300807f5c4a14ec7ea777fVirustotal results 30.51%Heodo
2019-04-1655253609918_Apr_16_2019.docdoc cd9387ca69fa3aa30380f5e513313980b26805181f235dea5596a7d9b6c21c41n/aHeodo
2019-04-1634252288242_Apr_16_2019.docdoc 6280cad89edea53c8bd3f428396c3a736f6d67e6f8279026effbbc8f27c35035Virustotal results 26.32%Heodo
2019-04-1652942615084_Apr_16_2019.docdoc 05e9d6de0d75faf602a7666ff6287e1e9ee367d57d2abaeac780e14325833dcaVirustotal results 28.33%Heodo
2019-04-161639919705_Apr_16_2019.docdoc eaebef573b834cac77673e625c36f4e363a94a294e37a18e68547a3b19308fdbVirustotal results 27.12%Heodo
2019-04-16406633624994_Apr_16_2019.docdoc 90c260b2469174d1c60fca12bc1a31728a1219a71c5f27a5b1cf21db2271f123Virustotal results 28.81%Heodo
2019-04-1662513296006_Apr_16_2019.docdoc de95a51d1056dab1f56d407447c1028fd989fd0aa4ff8aab109f93117bc7c258Virustotal results 28.33%Heodo
2019-04-16819231609581_Apr_16_2019.docdoc 0c42ff307f9831e057e019051253081abc1001fd290feb13f5467ce2c4ad435aVirustotal results 26.32%Heodo
2019-04-163939216660_Apr_16_2019.docdoc eb68fdf25e93c5d896e8b7f3d1216c20545cf2f3b3ecac3c850d4d48dcc853deVirustotal results 27.59%Heodo
2019-04-16805006697442_Apr_16_2019.docdoc a98f3b7c60b12dd81f190b67c0b42dfc7ab23d10a4ef3cdceb43625dd9ff6133n/aHeodo
2019-04-1669024745271_Apr_16_2019.jsjs e328f1a48cce3e9220c38d847ccea9f81b6135d120bd76b224c4be21405f700eVirustotal results 9.26%Heodo