URLhaus Database

You are currently viewing the URLhaus database entry for http://omegaconsultoriacontabil.com.br/site/wAKkbOEwy/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	203528
URL:	http://omegaconsultoriacontabil.com.br/site/wAKkbOEwy/
URL Status:	Offline
Host:	omegaconsultoriacontabil.com.br
Date added:	2019-05-29 14:11:07 UTC
Last online:	2019-11-19 02:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-05-29 14:12:08 UTC to abuse{at}limestonenetworks[dot]com)
Takedown time:	5 months, 23 days, 12 hours, 23 minutes (down since 2019-11-19 02:35:36 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-08-03	n6q_875699469.exe	exe	e7a56be355ad99686f280b2a83ea070777ed81890a65c3ece8f0898d7d6750bf	n/a
2019-07-29	n6q_875699469.exe	exe	a11b5a590e8fef2fdf9db1c5c64b86e9193820ef2fd6e6164e81b00677c41d46	n/a
2019-07-24	n6q_875699469.exe	exe	e40f24e5b82d9abe41b4e1781737af1ee1024a0ce61d3fd9938a17d6367c82c6	n/a
2019-06-17	n6q_875699469.exe	exe	fde2b60bf418e34dda838de2b19634cb8a38e283b10c44ead6b611c0697efb71	n/a
2019-05-31	n6q_875699469.exe	exe	1ae24354c8151a3ffa0992b0fe2877c17ff69891a5e5115f9d3438ea5f96ba9c	37.50%
2019-05-31	6v92u_427.exe	exe	ee8eac341f77f9c0d52065c787245933e305a5c20de9097365665669a34d386a	29.17%	Heodo
2019-05-31	81j_508276411.exe	exe	4bfc940e5354b36df128e8eaa3b18cae76678b8f1038055a439be347fbce72a2	37.68%	Heodo
2019-05-31	whf4waxlet_31160.exe	exe	bff0e404f0249f2d4cbd0d602e7b30f5dbecdd5f67bc62577518f7664d215b59	n/a	Heodo
2019-05-31	dc_1192665604.exe	exe	75b33f293bba66b7813275e73ca537825f753891ba1331a753145aa10e2356fa	32.39%	Heodo
2019-05-31	mt87wa5_75.exe	exe	2dc759d207dd72d1f12d6459a83085a197244ce9e3b0b1919133e20a40134839	36.62%	Heodo
2019-05-31	wsk0c_8129975449.exe	exe	35c6039f9844d8a3bd110942e6b97a5f8a1d3f02eb400342ab225623d027ca6b	28.57%	Heodo
2019-05-31	4rhkd3r_43522552.exe	exe	7e2f7a61a5e46ca5adefbd3bcf38ba87ab0ad7864a989a030b7c8a587dfd4d21	35.21%
2019-05-31	wy6xcnyxz_8321.exe	exe	5a29f6b60c2c18ffc91acbe62d68d6dd4de188348d1c4373915481f46d738736	35.71%	Heodo
2019-05-30	7r84rg_624.exe	exe	525e72da48f2db8eee60a2cda794ff96c152c1e177ed6fa11ba48d76cfbb57a4	30.14%	Heodo
2019-05-30	jo7i_7390.exe	exe	6051270500093c2ab1c557f10f937557007418a54122f59752527dadc64dd0ef	33.33%	Heodo
2019-05-30	uyp6_98.exe	exe	837d4d8f3f8fe6d7e2562ed0e453397aaaa8a59c3c4ea830e6264a7c01d0c1fb	39.13%	Heodo
2019-05-30	ap9c63d_5562742742.exe	exe	5cde05d5a2d2ad486ad3cb6ff037cd3cce010d94457a1f62d12defd23f48f250	32.39%	Heodo
2019-05-30	ejlr_633485443.exe	exe	ffefd2bb524d00e8ae376e141cf8a3a2e4eb18155bc3481fbe75204551515867	36.11%	Heodo
2019-05-30	ts8jju72_88537588.exe	exe	c74c0b7952cdc83e9bbff05d47706e843f82e3ad8f5255ad9d34c4836acb3379	33.85%	Heodo
2019-05-30	if_481096.exe	exe	2928ce934df8369f06899ac9d1d94f5fc35cc66708825748922078162321b321	23.94%	Heodo
2019-05-30	jf_502780.exe	exe	4764ec39155c325c1042604fc7b97630c62c1352b5150d610bf2e2e6237c31c4	33.33%
2019-05-30	pk1a_06.exe	exe	7898789fb638224b50460ed58607bed96b0103894fa520b8ec781fd07a7ae225	28.77%	Heodo
2019-05-30	fbkv_98.exe	exe	13e3c76d38458d365bf51dd93f6ecb43f02268abe352cfdd695cb787e8c7a0a4	30.56%
2019-05-30	tixpui2a_517.exe	exe	e2a925e4d7f56eaf6803456847049924903495b13af99231494f4d5ce53d7341	29.17%	Heodo
2019-05-30	dir9qeh_3.exe	exe	b574e372df7146902ad2e2f479bc708b2ff0de17a082964b58862567abd3baf6	26.39%	Heodo
2019-05-30	v9f6j_7032440.exe	exe	3e62b4591a3cd19f078cf8171c520a84667202c516584c37df169cd58898ba4a	28.17%	Heodo
2019-05-30	7wzgi_946929.exe	exe	aa9cedc16ac1c23231d438c749e1e4d10a64a18d44e164bee54ccc739cbb7018	29.17%
2019-05-30	4_936.exe	exe	2e731aac8121cac328c06647a906995cce2eddcc98cc7049d1d8fa2fa4a51798	27.40%
2019-05-30	2k6zzvz_74283.exe	exe	b65379f11aa7875da82797a5133cefb62b8eddaa8cc774bbbc4afaded1ff3ff6	26.03%	Heodo
2019-05-30	8v_572616805.exe	exe	e724abc62c654a0115800185ab2354446d4f696777def7f062d98c971d9a4e75	26.76%
2019-05-30	r8ecbb_138.exe	exe	66edbd54b9283da3b83e8fd81f0a9722f3447b308c53eb817707bfe75921d014	26.76%	Heodo
2019-05-30	h_155683546.exe	exe	9563f71380f0fa02034d0554151872fe6a637ad0036a764b781cbee0e1c250d0	36.11%	Heodo
2019-05-30	0dtc1m5_12091312.exe	exe	ee4d3c418d065b701851fa607a325308e113f99d8fab479a6b93f4f929f75a47	28.17%	Heodo
2019-05-30	jeuu44t_9.exe	exe	57f0449b822e3de6a4653fe43571f7e547116e337e52acfd3aaee3b38a55c74e	27.78%	Heodo
2019-05-30	j0655_119815.exe	exe	ef3b8194d9f0872f20d80f2a19983539be6a83f3b504a4e9185f1b784f385b16	29.58%	Heodo
2019-05-30	gm5m_86481598.exe	exe	d0de6fa065bca9517222e815dcf73ac54b23f1df219c0ffafc5c2d6b9d826e6f	32.39%
2019-05-30	mwyce8v_40.exe	exe	9564796f42342e0a231269486e1faeb1995973abeb3769c926bc4c73d686da96	n/a	Heodo
2019-05-30	r7yao_750.exe	exe	8f831df11feeadcf237b038c432d4fe706cf9afcb940c4e88c165a9d1930e9fa	27.78%	Heodo
2019-05-30	m9i9jpm7_3352.exe	exe	5b2d5986c950662faa5f3e2caa6d9e1cb5649aeba1fcecd360f7628d32a7d808	26.76%	Heodo
2019-05-30	qi9q7_704762.exe	exe	23af4fccf4ecf994e93c39b21a85b9562179764d733cea3093f1c91ae28c1574	26.76%	Heodo
2019-05-29	63tw3_76982138.exe	exe	4422c70a46ae30c8b4e198d88b210001784d14edae31a5b41d271c5f36988b1b	23.94%	Heodo
2019-05-29	nyae2w_0500832368.exe	exe	79dd32af2ad9878c7fe2311e6ce290f8bb313b0f240f3517b5ac6c2bbae887d0	22.06%
2019-05-29	r8vhgf4g_441979.exe	exe	6116b8b34753bf6c393f7c34b209f34cc582ada6b5d259a71d26d58fbec4da87	22.54%	Heodo
2019-05-29	5_939447.exe	exe	2a56c5e001a8f1f1d2984b83983d2faf412686cc3ca8354176bd01bd665aadb0	29.17%
2019-05-29	hqf9_619676171.exe	exe	2c4eefa44987a71690b58dae201cbe79c135c498b670683b690d18f86a96d1ee	25.71%
2019-05-29	dm_90.exe	exe	c56db25233f20888525f027aaf9d24a9e111798dc4d24454ca79f1ec434f06d0	21.13%	Heodo
2019-05-29	y_9647475056.exe	exe	5be764f22ff7428d95e3437186a8f540f2c00b3a613f76857f49caa6af7e2294	n/a	Heodo
2019-05-29	2pv27eb80_1.exe	exe	8c444330d522b540eebc8fd67814ef4ab8cba6705f5b856b32d5b7508f0f6a1c	n/a	Heodo
2019-05-29	yvb8mtp_91094266.exe	exe	0203632d35ddac01f92b4e959d592185f673b1dfd0007d9d5cb63676450e9270	29.58%	Heodo
2019-05-29	c0v_74026.exe	exe	7221a5ac575f1c4812be871a2ba7cfaf793d95e510e330da59fe5329dda3fcb6	33.33%	Heodo