URLhaus Database

You are currently viewing the URLhaus database entry for https://mansanz.es/banuelos.mansanz.es/zjiXj-xAok8S8Mcami6Rw_VLwLvjmOk-yAc/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:182285
URL: https://mansanz.es/banuelos.mansanz.es/zjiXj-xAok8S8Mcami6Rw_VLwLvjmOk-yAc/
URL Status:Offline
Host: mansanz.es
Date added:2019-04-22 19:11:09 UTC
Last online:2020-01-04 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-04-22 19:12:04 UTC to cubenode-abuse{at}gestionclientes[dot]org)
Takedown time:8 months, 17 days, 2 hours, 8 minutes Bad (down since 2020-01-04 21:20:11 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-24F-23889385-04242019.zipzip 7dd0c380f563dccba60dcbcc80f22a1d90a8cdef490a819517de227d023788a5n/a 
2019-04-24YC_707711_04242019.zipzip 1048f3cdfd189fafc213a596ca33170a9a1ab38c85008794d6a02d2a1edfc67fn/a 
2019-04-24OO_242665_04242019.zipzip 7037c18a673d5fb2d2809c354fbf752bd99bc3cf37e626d0f87a5e22f7ac9f76n/a 
2019-04-24JD_959934_04242019.zipzip 27feebbb904f7bd80359a4744aa7a79774f96d67ed03ea26eaf3d8bd05eefdfbn/a 
2019-04-24RY_7419364_04242019.zipzip 6a90e88cf927167a86c343e865ed68c46a1a469d62367a4ffcff3b4d5ea513f7n/a 
2019-04-24AD-6486726-04242019.zipzip 95a667e555920243373e8070e7300b91448ceb1b49a25502922a18d84e933dc3n/a 
2019-04-24H_468262134_04242019.zipzip afe0e576083996b5080558ea4a88a21983747af2e7a94ef10bc3f2c49a164f63n/a 
2019-04-24EJ-377724-04242019.zipzip d84a9affe829dfb19e8872403de194af6fdd065826e37be7b6e7ad99d31b3fa1n/a 
2019-04-24S-1592292-04242019.jsjs f9a3d8d2568059bff0da6d27fe8d474fa8dc1c0f97c24433f2fd9caed3594b0fVirustotal results 10.71% Heodo
2019-04-24A-168639-04242019.jsjs da2d68c98cb3e9214a1e0bb58fc5fcd77c1435e63282c0602f085f56f6aa3e29Virustotal results 10.71% Heodo
2019-04-24E_414132497_04242019.docdoc 15b76f000b9a6bdc9237b8b67e2c3e63b5bf72a09b746bdc531de99c14362fd1Virustotal results 24.14% Heodo
2019-04-24QX-449039326-04242019.docdoc c89c4a93830f003dfc0192b8b45c334872b98ec57f081fcfed7976ca4fb344c1Virustotal results 24.56% Heodo
2019-04-24LJ_666360_04242019.docdoc bfc6f5780109d9395f042d83bf54f5bd0b45a0f4a511181e0f0b7f65e6768442Virustotal results 24.56% 
2019-04-24DG_88635030_04242019.docdoc 8f2002168bbdff63ed1e3e257d470ac5f3579a68a2412543f937cbe0e3e7d43eVirustotal results 24.14% 
2019-04-23J_733266_04232019.jsjs 8870927b7fcb804322779608fabf59e1c019245df08aaaf5f9202d131e92efdaVirustotal results 10.91% Heodo
2019-04-23PP_2828417_04232019.docdoc abbd0218bb6170f2a29651775f304ce7242b5e4960549949bb45e2e31087eecaVirustotal results 30.00% Heodo
2019-04-23VK_3915257_04232019.docdoc b66dc10da4466199693f91df5ea7dd2ed60a9cb1a78bc4f0f8fdfce491b2d9faVirustotal results 27.12% Heodo
2019-04-23KL_220660_04232019.docdoc 9cf3e252ff58bda643296cd07649a27244e6ae4335e3f5d876d8ea92c5b90d6fVirustotal results 25.42% Heodo
2019-04-23NB-4805631-04232019.docdoc 97876ee20e38192df516f76fecfff1344d009473c4ac728c488eb4fd1428e42aVirustotal results 27.12% Heodo
2019-04-23H-04641150-04232019.docdoc 3ccc08551639ea7da8a092efdb09741ee02811fd2a184d1251912d1fbac80cb9Virustotal results 26.67% Heodo
2019-04-23R_8982051_04232019.docdoc 2133eac1611dc2053b14dcd5b31a18ba33a97a4ca3c577e3bc9503a758c9b523Virustotal results 29.82% Heodo
2019-04-23L_557709738_04232019.docdoc a13fb3d24e666871b1780e2bf04b62cd827d856043fe644245809f368ac600eaVirustotal results 30.00% Heodo
2019-04-23QS_02490081_04232019.docdoc f7923edcc2b5a2222045ce7c6b655c532d93f1570a09f7f0184a4a1493769d88Virustotal results 28.33% Heodo
2019-04-23OQ-108966784-04232019.docdoc 18bbd30411778c812f8261c8301b1ef6dae3a3a0c004c597ef3188bb4562ead2Virustotal results 28.07% Heodo
2019-04-23JQ_225022160_04232019.docdoc 198386980851d33a9065f13c27b424e89e6914ad9e3b68c03a8bd64c75ac5f72Virustotal results 28.33% Heodo
2019-04-23HJ_8455205_04232019.docdoc b045cf47cdc4739c7f59af29ff7e2ff3e8c00758a790600ef9e875646fb7728an/a Heodo
2019-04-23QX-113025-04232019.docdoc e4e68555c1f99b66a7d9e18723aa2695b38ddf1593d2b6fb13b69de36cae475aVirustotal results 24.56% Heodo
2019-04-23Q_76754429_04232019.docdoc a35b5d2be5e897e676a9f988b4988faec6ed74cfbeb0bcd10818ac95b9293fcfVirustotal results 25.86% Heodo
2019-04-23XL_534727_04232019.docdoc d8223a40d23863346896d66ad28467a4107c744a8f6968803156adaffc639c4bn/a Heodo
2019-04-22T-667366775-04222019.jsjs 79270d1e30b8e29e99db95c42e8d33801b27624fe09b05d51f4dd5c0a945d987Virustotal results 12.07% 
2019-04-22U_855045_04222019.docdoc 8d79dd6fb63bef8ef519d2c4339c27392b7dbf459004fd5942bbc425f24b4f9dVirustotal results 36.84% Heodo