URLhaus Database

You are currently viewing the URLhaus database entry for http://ghostdesigners.com.br/senna/vUfb-C5rrF5GSM34OOl_guMotwmxD-jQn/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:182247
URL: http://ghostdesigners.com.br/senna/vUfb-C5rrF5GSM34OOl_guMotwmxD-jQn/
URL Status:Offline
Host: ghostdesigners.com.br
Date added:2019-04-22 17:45:08 UTC
Last online:2019-04-23 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-04-22 17:46:03 UTC to abuse{at}hospedagem[dot]net)
Takedown time:19 hours, 35 minutes Good (down since 2019-04-23 13:21:47 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-23MY-169564804-04232019.docdoc 2133eac1611dc2053b14dcd5b31a18ba33a97a4ca3c577e3bc9503a758c9b523Virustotal results 29.82% Heodo
2019-04-23CY_309924438_04232019.docdoc a13fb3d24e666871b1780e2bf04b62cd827d856043fe644245809f368ac600eaVirustotal results 30.00% Heodo
2019-04-23UA_781269_04232019.docdoc f7923edcc2b5a2222045ce7c6b655c532d93f1570a09f7f0184a4a1493769d88Virustotal results 28.33% Heodo
2019-04-23FG-896401634-04232019.docdoc 18bbd30411778c812f8261c8301b1ef6dae3a3a0c004c597ef3188bb4562ead2Virustotal results 28.07% Heodo
2019-04-23QP-755199498-04232019.docdoc 198386980851d33a9065f13c27b424e89e6914ad9e3b68c03a8bd64c75ac5f72Virustotal results 28.33% Heodo
2019-04-23S_494507658_04232019.docdoc b045cf47cdc4739c7f59af29ff7e2ff3e8c00758a790600ef9e875646fb7728an/a Heodo
2019-04-23AZ_26774828_04232019.docdoc 0613a5d290dd56c9f205c408e5f101f40c8a49066db7c76d7138e8c0d2975a75Virustotal results 27.12% Heodo
2019-04-23Z_585769838_04232019.docdoc a35b5d2be5e897e676a9f988b4988faec6ed74cfbeb0bcd10818ac95b9293fcfVirustotal results 25.86% Heodo
2019-04-22T-403066-04222019.jsjs 79270d1e30b8e29e99db95c42e8d33801b27624fe09b05d51f4dd5c0a945d987Virustotal results 12.07% 
2019-04-22PR-0975624-04222019.docdoc e7c30e1d477a0e0aea2af37e95eaaf00ab04f4a070935922dbdadd3fc6fc2129Virustotal results 34.48% Heodo
2019-04-22DS-482037-04222019.docdoc 9b4857d525a4a4684abc18441f138fc6f0a0fc29420de07e5a0b8da94117c494Virustotal results 35.09% Heodo
2019-04-22WS_187121_04222019.docdoc 252397f7d0d4b66ee657f3fa2d5c5cf0da3cf4f4463a473929f81160e1d5faa1Virustotal results 32.79% Heodo