URLhaus Database

You are currently viewing the URLhaus database entry for http://crservicos.com.br/cftv/v54ucb6oe1ycj93_fusektth-564258474/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:197893
URL: http://crservicos.com.br/cftv/v54ucb6oe1ycj93_fusektth-564258474/
URL Status:Offline
Host: crservicos.com.br
Date added:2019-05-17 18:13:06 UTC
Last online:2019-05-17 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-17 18:16:04 UTC to abuse{at}locaweb[dot]com[dot]br)
Takedown time:4 hours, 52 minutes Good (down since 2019-05-17 23:08:06 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-17DOC_340355157132US_May_18_2019.docdoc b8c88fb199d1b85bbdadfa6eb18900e10b45d9648d58813a3299bd78ffff95caVirustotal results 28.81% Heodo
2019-05-17Document_08362546472US_May_18_2019.docdoc 905054a52591125d76babef888817ac143acfd554b34129b3eefc4ed3354f63eVirustotal results 27.87% 
2019-05-17SCAN_015485482446US_May_18_2019.docdoc d6d51555cc035085285e322944c51cec777dffa169b38eb06ab1c9aea8160d84Virustotal results 28.81% Heodo
2019-05-17Document_459992072883US_May_17_2019.docdoc b25a8e099d490509c036caee67954897a8640a214b708325802f61828f8053c4Virustotal results 25.42% Heodo
2019-05-17LLC_1637850570US_May_17_2019.docdoc a00d938cc78698d9d5c30a475c012748592258d6a5b9a98c5760b6c4f818f1c9Virustotal results 25.86% Heodo
2019-05-17Document_207136787044US_May_17_2019.docdoc 02cfd79618fda7eade1d4d54d40e00a15a73449c06a3e97b4b121a8d4d6f040cVirustotal results 25.86% Heodo
2019-05-17FILE_2229922796US_May_17_2019.docdoc e9e9f78904bfff3c083ac80f14b6b67eb9548de76c70c074436c5c3be0fcd6e6Virustotal results 25.00%Heodo
2019-05-17FILE_667669002131US_May_17_2019.docdoc bf87ade5d3fbd0a6cd7b0f8df8ee288b908db87a97a7cfab811932b9f33daefdVirustotal results 25.86% Heodo
2019-05-17FILE_104985684110US_May_17_2019.docdoc 867694a9389b1ccb6e0398fe65cfce4abb2342dc96227a70e0752f4674c31b3cVirustotal results 24.14% Heodo