URLhaus Database

You are currently viewing the URLhaus database entry for http://blogs.ct.utfpr.edu.br/direc/INC/uIdEMaPKdBqQYlDQHdzQyh/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:195427
URL: http://blogs.ct.utfpr.edu.br/direc/INC/uIdEMaPKdBqQYlDQHdzQyh/
URL Status:Offline
Host: blogs.ct.utfpr.edu.br
Date added:2019-05-13 11:22:04 UTC
Last online:2019-05-21 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-13 11:24:10 UTC to info{at}pop-pr[dot]rnp[dot]br,cais{at}cais[dot]rnp[dot]br)
Takedown time:8 days, 1 hours, 1 minutes Bad (down since 2019-05-21 12:25:38 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-15FILE_17651977414US_May_15_2019.docdoc 13a46bce1ad2b5433a3915060639a5073ae68779da1b599658271d8e9f2932eaVirustotal results 13.33% Heodo
2019-05-15FILE_025130850638US_May_15_2019.docdoc 0e97304127079f3e4c6cc267f2f49eaf6e5a66736f8fd0e8ad73d6e4641243b7Virustotal results 13.11% Heodo
2019-05-15LLC_8062095723US_May_15_2019.docdoc 574f6094f3e77af7915fc6c58b46b969a7f378c4fd2a197721f77013bbcd4f38Virustotal results 11.67% Heodo
2019-05-15INC_5010961332US_May_15_2019.docdoc 4d45957815c0e45c62f076946b505b1b4388d531436dc94238bf407a5e01f1fdVirustotal results 12.28% Heodo
2019-05-15LLC_45353542824US_May_15_2019.docdoc 5193eb38e48695aa084621411de74c0c61759e7dcc253ba2be0947a80c0b322eVirustotal results 11.48% Heodo
2019-05-15SCAN_302093584898US_May_15_2019.docdoc ccbf4c1d8d50c097b3d50b2211242670f8dfafa0f62411cc9fbf671ccbe5b5a5Virustotal results 11.67% Heodo
2019-05-14FILE_619090000954US_May_14_2019.docdoc adc07b7378fe4151f14b3b95e74c2672265af06b3defc0d178101a4f3b471ef0Virustotal results 31.67% 
2019-05-14SCAN_16689029125US_May_14_2019.docdoc 5f7df5ae858abc5f9143bef4fdb5dee06a82fac18181010b7c3ee40d2dab86d1Virustotal results 35.09% 
2019-05-14DOC_1565871827US_May_14_2019.docdoc a5f234ffe4236cbcde90ef95db56e9ce0f2af4dec1a82d3e77cee501920ab4c4Virustotal results 13.11% 
2019-05-14LLC_514748001828US_May_14_2019.docdoc da6e514f25462af15216e863333e4e2d328ce918169e373193cb573236d4277fVirustotal results 34.48% 
2019-05-14DOC_0988354123US_May_14_2019.docdoc 2937b17f1b6bfe747e90133fafe65da59b503f78c9ce84a288e177c4a26c2d87n/a Heodo
2019-05-14FILE_50354877607US_May_14_2019.docdoc 3eddc6f302caa969ec96c25129c1c30c0b3291024bb3a822d85e8a5216b5a378n/a Heodo
2019-05-14Document_9503701558US_May_14_2019.docdoc 012ae3cbcb08ad063dae6f61c5989efdaf8bef9374cd85ac67033724a7b35493Virustotal results 20.00% Heodo
2019-05-14SCAN_817955897360US_May_14_2019.docdoc fc453bf2b437e194f0068004a58dccc68c58bea217aa03f8795153058eac1cb9Virustotal results 14.75% Heodo
2019-05-14LLC_55583751791US_May_14_2019.docdoc 88ba8a7379555c9201d1dde934f2fd7e4b64eb20307aa0ec231a8e6b6779c8a0Virustotal results 14.52% Heodo
2019-05-14INC_982324764997US_May_14_2019.docdoc 0254c5fadf9e3ae658b1c4b8f25bd4e8007cbf92083d9d00371659e21371a15cVirustotal results 15.00% Heodo
2019-05-14LLC_8491893996US_May_14_2019.docdoc b23f739d582fd46ef2bebe99960e05dddc3558d8a637ff8a3270da961f563adaVirustotal results 26.67% Heodo
2019-05-14FILE_082723975418US_May_14_2019.docdoc 4ee32f5983285060104ec1a7699f69a03d77a910a890e494fa0c57de32aa49bdVirustotal results 26.67% Heodo
2019-05-14FILE_721954060326US_May_14_2019.docdoc 1afb2b340b8a3be6033ad42c81444155f25f6ff781634596bf27904a7b9e6620Virustotal results 25.42% Heodo
2019-05-14FILE_777333058841US_May_14_2019.docdoc c252e8aba3dce9ef5cb582e61ad12e68e1db22f9e7aa233f209624c5e0eac8d2Virustotal results 26.23% 
2019-05-14Document_313901267423US_May_14_2019.docdoc 32d970641625a2a33d5e1cdc052c528249b2e4f408ad304d430180fa299d4540Virustotal results 25.00% Heodo
2019-05-14INC_97435285228US_May_14_2019.docdoc 41939451681d0d76293cded1a2826c7f1bd62ba0dd030d7cc823d373efdc9c0cn/a Heodo
2019-05-14INC_7794485583US_May_14_2019.docdoc 6e27b70e10089e9b815f7eab1b80e637e40733060f22a20e6b010b25287122acn/a Heodo
2019-05-14Document_611783998588US_May_14_2019.docdoc a2c86ee442e6189003747b161dcc36c2c569a74d96f0cc68e9150bbccefde54cVirustotal results 24.59% Heodo
2019-05-13SCAN_837069131433US_May_14_2019.docdoc a7292870d07de0b4afc626e495e40af4daac91c7e19b36a7a783572f26b35662n/a Heodo
2019-05-13FILE_99600955248US_May_14_2019.docdoc 95b76cb37e2e3caa0e07f01c9aab219e128ea4ac3cab80aa48e9fc2733713343n/a 
2019-05-13Document_07708404713US_May_14_2019.docdoc cee6e8328110a0ba748a787b78d8eebed99ed183922003aa96a7ef7e235f306cVirustotal results 16.13% 
2019-05-13DOC_7861260575US_May_14_2019.docdoc 0028a8ec6e89822bc3faa5e797caf836c057153d3f019d590741060716a55343Virustotal results 16.39% 
2019-05-13Document_61490481046US_May_14_2019.docdoc 2ee3c7107a9831e1b1d90d57365700c94ab4033e6515890204c82203e25c7808Virustotal results 16.39% Heodo
2019-05-13INC_8981327157US_May_14_2019.docdoc 8813cd8261963dcbca65371321507b6502aa57883cd91ec4dfe8c5fe17e48076Virustotal results 16.39% Heodo
2019-05-13Document_9367552291US_May_14_2019.docdoc b311c5c0a459527071166668752e087223a3e5ca6a8c8319ec6ddb0f8ebb110eVirustotal results 14.75% 
2019-05-13FILE_011180851724US_May_13_2019.docdoc 492db6ac548104b627ee2881120eae5538f20e1db315e718e3b25de35f5f1bf6Virustotal results 16.67% Heodo
2019-05-13DOC_514139413278US_May_13_2019.docdoc 9f5351f25afca434053ad6ff7799422a3f59a83f09982e32a20048730fd0b5f4Virustotal results 16.67% Heodo
2019-05-13INC_042114677346US_May_13_2019.docdoc 3081d8809d6e4dfddec906b6bc2fde8ea99ae2f2e6c96fc09ce6216ec413189dVirustotal results 22.03% Heodo
2019-05-13FILE_47140114596US_May_13_2019.docdoc d1fe265dd306d12a23abe6fb309fb7a55df3cd5072b13e87f9441bfb27bd98b2Virustotal results 19.67% Heodo
2019-05-13LLC_695236753594US_May_13_2019.docdoc 6c91e700f82440568c9bb8af07957861829be2801cda74f1634b68080007f492Virustotal results 18.03% Heodo
2019-05-13SCAN_74169374579US_May_13_2019.docdoc ac752ed59742f0aa2e2d9fda8cf70400e1697c456461ab7ad1667b50bb47ced4Virustotal results 18.33% 
2019-05-13Document_194009301619US_May_13_2019.docdoc a483c77b4894eb63fb7c53b45d9a7cf8b7d2a11bf1b0a2f81f193d84053bc9baVirustotal results 18.03% Heodo
2019-05-13INC_5511275159US_May_13_2019.docdoc 321386030e3165c45f3bbe0f42dc5832bfc6cc2c7546eee11b4fb1b8238a1ef0Virustotal results 18.03% Heodo
2019-05-13SCAN_10241972527US_May_13_2019.docdoc 6106e070e2c8b40a9994e18ad813479efe44ab0034d6c9d2fa38c306d335f95eVirustotal results 18.03% Heodo
2019-05-13DOC_886239482559US_May_13_2019.docdoc a01eff028804839919ecf103267f2a7122e9ef008451f4139f7f2a5c10a12628Virustotal results 16.39% Heodo
2019-05-13DOC_8645705702US_May_13_2019.docdoc b94bdb5e5bb0320f6a98aae2374552b1ae7eb1a0ed6d8cdb7f7165d406c88f17Virustotal results 16.67% Heodo
2019-05-13SCAN_806830058790US_May_13_2019.docdoc d74e281cbbbf1e4bfa5a07e46cbf41398393cd3ba620c414d9dfa39809951a0fVirustotal results 16.39% Heodo
2019-05-13LLC_083679621648US_May_13_2019.docdoc cf2c316569c7df1157e658c7fc5939808a79d02defa7d1972c6150dba2673166Virustotal results 27.42% Heodo
2019-05-13Document_076591205044US_May_13_2019.docdoc 91bdd80a862adc5a695327cc6b51199ea04b89fa9cbfea94fe2b1094623af433Virustotal results 28.33% Heodo
2019-05-13SCAN_029622219311US_May_13_2019.docdoc 6b6feaf5c5b705ee1a1d906b58da9eecf7fbb483674c113b40e5c3ec3998b6c5Virustotal results 28.33% Heodo
2019-05-13LLC_62759038449US_May_13_2019.docdoc 5a2697ff84c4be628abeb20461bb9e931b48ec3aae0af53208ad21dd726622ben/a Heodo
2019-05-13SCAN_46240618520US_May_13_2019.docjs 2b695b354e1485292556309baf5e876b4a7ba956bedf9c2bfab60b3ecbe625c8Virustotal results 31.58%