URLhaus Database

You are currently viewing the URLhaus database entry for http://mztransporteeturismo.com.br/wp-includes/53757968_0/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1984650
URL: http://mztransporteeturismo.com.br/wp-includes/53757968_0/?i=1
URL Status:Offline
Host: mztransporteeturismo.com.br
Date added:2022-01-17 21:43:04 UTC
Last online:2022-01-26 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-26 02:18:22 UTC to abuse{at}dimenoc[dot]com)
Takedown time:8 days, 5 hours, 13 minutes Bad (down since 2022-01-26 02:57:43 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-181373170415134231361.xlsxls 59cb2552a34b231acb92fcee121b13d662ca7f0049a70aae86fe312270f548e5Virustotal results 15.25% SilentBuilder
2022-01-182996473021552958.xlsxls 32151a8459b973e9f407a6baf3722a9a1eb6fb27a7db9f9693fc033b64e30219n/a Heodo
2022-01-1892520045149977.xlsxls 42086786392d71f57268416d14275638e2955c797babcbd5ec21b7eed6703652n/a Heodo
2022-01-1814024076438.xlsxls 4dd34288d1597de3f5939787b91e85331964708a0f7c73655e6d8239c4688756n/a Heodo
2022-01-186340063791.xlsxls 26b4ee804e6a317a802f1c370398c6629f516477378bf94cad94413237e05c34n/a SilentBuilder
2022-01-18898954482487.xlsxls ef7820c85bc6c3df2447132bbed914ed101aeb7baf6e6edf25026375f9df3980n/a Heodo
2022-01-1837459477412453.xlsxls a35ccc0277367ef2660f2eb7b2c5702b33e04ecabb9e9dc69f0e089d31b24abfn/a SilentBuilder
2022-01-18620985649120916.xlsxls 35da04ff2a62f8c0275a0e10151c69d9cfd7fd35dfc2ef154105492a517023d3n/a Heodo
2022-01-189608519700149837.xlsxls fa10d4c1be08f4e283bdaaa42a1d800768187162e2d90bb494fa4367dcd494adn/aSilentBuilder
2022-01-189799556238176650.xlsxls f992f21f03b86aefe34db46f747ad9c063feebaac70cc1eff8cb76806aed499dn/a SilentBuilder
2022-01-1847200464416395212.xlsxls 0971b78a1fa100002ec0c3cd1d18af109e56369c4a52b4445f10c30ea8ade7fcn/a SilentBuilder
2022-01-184053226739368087970.xlsxls dab9f48f4ae76936b59d34d7be449dbc15e45ba29d6dd1a861eca70b8ab4c6d1n/a Heodo
2022-01-1837138519142.xlsxls 4ad545641ce10800bcd2a75f03ae32b78d9fce1feb504c5353da50438959e3b0n/a SilentBuilder
2022-01-181487313932.xlsxls 14e06e9395a20e63635c321d4e8f23e03da439bfd81766dab0a621ec1c4627aen/a SilentBuilder
2022-01-18924689413440631.xlsxls 909cae6e044629c7d0356bc96ced029549d3a1572031da350ee6b96489664f31n/a SilentBuilder
2022-01-183336159077945872778.xlsxls 7c92ba7d9752e651b0bf808e5bddbc3f107ccf9ef6ee0c272339621eb8908e04n/a Heodo
2022-01-1829309851484700958.xlsxls e07cb07d8a2b296d0f506a805e5721233820e0f8d4c9d552940f71fca7be7a8cn/a SilentBuilder
2022-01-18489190769543268544.xlsxls e64f53d96cf4624502733103a45f67cc0635e35e624610cbec57ea9844d43203n/a Heodo
2022-01-18200654391624613.xlsxls eb7193559a0f423ea0f4c9d50884ff6e053a6cd4b1a81563ac619e72595779ecn/a SilentBuilder
2022-01-18081784746141.xlsxls 027a72970eec77e5214269c8f79a87f5f614a1ecee11257b3feac2fbf54740f2n/a SilentBuilder
2022-01-1859706509775477724.xlsxls 6627edac0e7bcc8f7615afe466232eeb380497a02666fed395e330d866dba379n/a SilentBuilder
2022-01-184014098625.xlsxls ba5cec050921142c70a9666d32ed2689badaae0afbf6105f2c3a570638634d84n/a SilentBuilder
2022-01-186406930628.xlsxls 5255b0788b382c41d46027fda6dc4e3c717a4cbc46469614299d184bf77037dfn/a SilentBuilder
2022-01-1814678444858032155.xlsxls 321d80f76297387803acdb4fd4e6a4dc6073d515955445752390767e95884b67n/a SilentBuilder
2022-01-187105940160894912864.xlsxls 6e4b969192c1648bf70e8a371d404eb2c612c6d1868141bfcd15ee165bdb0715n/aSilentBuilder
2022-01-1848922754452077.xlsxls b933c6fc1ce4b9df0d65fae6724a3053c183cbdf921053873252181bf50ed7a0n/aSilentBuilder
2022-01-1739347382032753178290.xlsxls b9cf7499338b7ce6d879b0093cddd093f329e54f080335bc602f3b30f055978an/a SilentBuilder
2022-01-1753181688434319028.xlsxls 5edfa18d54052256d62cd14523eee828be94dbd74b83296ece55b13122e94c56n/aSilentBuilder
2022-01-17183243132382.xlsxls 5feb30d01fb35d5fde34eb531e533bbfe6870e26612f2b397214636aed65988dn/aHeodo
2022-01-1787524017886868833.xlsxls f93414304904cf04ee75d5594bbd6b17a29aeea92d9e719a3e53ae25e077c08an/aSilentBuilder
2022-01-171997551TBDFX_09006.xlsxls 3bffdc24f84177cd3c0cb5d7a9eed6da2b8f55d4b121f155de26ca172706742aVirustotal results 20.34%Heodo
2022-01-172356356-808.xlsxls 6b815375aaaaa7e540cba3c63239e027be255248ad6ee8599db14d9860061597n/aSilentBuilder
2022-01-17486396_7792148.xlsxls 7ab8fdb32c73c5d578dfa7eb5fb86a309ba5aa7d830e43f7f3acbadc23eec71an/aHeodo
2022-01-1753757968_0.xlsxls 8976395bbc9ade87e7ecaf509860c9a460299dba5418b0c536818a7d14d5941fVirustotal results 20.34% SilentBuilder