URLhaus Database

You are currently viewing the URLhaus database entry for http://drviniciusterra.com.br/wp-admin/fs7sEFczaMBhWq/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2118864
URL: http://drviniciusterra.com.br/wp-admin/fs7sEFczaMBhWq/
URL Status:Offline
Host: drviniciusterra.com.br
Date added:2022-03-29 11:46:05 UTC
Last online:2022-03-31 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-03-29 11:47:08 UTC to abuse{at}hospedagem[dot]net)
Takedown time:2 days, 8 hours, 49 minutes Poor (down since 2022-03-31 20:36:46 UTC)
Tags:emotet link epoch4 heodo link redir-doc SilentBuilder xls

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-31EZV-765817996254452.xlsmxlsm 894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7Virustotal results 36.51% Heodo
2022-03-31JIU-416610375.xlsmxlsm 97f11e4cd509aefb731d8b1a4b299c8ab4096e270f05f52d8e0eb6d2366fa501Virustotal results 38.71% Heodo
2022-03-31EME-178024586429933.xlsmxlsm b034cfc88c6603dc0f5519ecba2dbba8c5382b26b8c25da23f8d40368ce8e7b5Virustotal results 33.87% Heodo
2022-03-31BQT-0049505642.xlsmxlsm ed2c24997ee2d47a9cc1d73571d3466166ce479c5bc10602b744894b32f9a009n/a Heodo
2022-03-31KH-6062093391.xlsmxlsm 7b790cb9f037644da2aa7daf038bef787f020bc8aad1932fb1e8c4c5ab3b4766Virustotal results 38.71% Heodo
2022-03-31JM-023371707702.xlsmxlsm 23dd125c7c3f736b183b9ba66bdd5ee5565f575fbb6c8c593f78f6da0b84e621n/a Heodo
2022-03-31LRX-5845167079614.xlsmxlsm 1307e68be83cfe870bd173adacc15538d13394117209f1df836b2656adb85383n/a Heodo
2022-03-31FOM-81588569079137.xlsmxlsm 081762e77d8d1979eba6eed37c3e0f2108e8ae2e8624e1ea81d59258f336bd45n/a Heodo
2022-03-31VA-539589981380.xlsmxlsm 162637428037d1f8f3bd675b122e5b830107b9ea7352c8c765e97a3afbce1231n/a Heodo
2022-03-31LO-2579110832779.xlsmxlsm 9da38d7964f16ed0c46e5a0ee55152196bf8368f5e2d2b08cbf8c24932ec490dVirustotal results 33.87% Heodo
2022-03-30ZRW-0188769.xlsmxlsm ccf8147ef96ae47288019a25336c2935e73d2e06b8fe73823e3596fb1596ba8dVirustotal results 39.34% Heodo
2022-03-30FZ-8379940.xlsmxlsm 8eb161bd22ea52d987b19953ebebe364df8a0779ed9f42ad96c6dec32f8cce52Virustotal results 36.51% Heodo
2022-03-30VU-923016383.xlsmxlsm 168a9aa1b5fa37a354fd6ccba71dcd29cbcd503a578504c69feb38bd84a8a691n/a Heodo
2022-03-30HSG-6431607.xlsxls b154f6087e88d4cdf6449d2bef5b4a4b58a012e8d6e6cd6956f11fc9da110227Virustotal results 26.67% SilentBuilder
2022-03-30UK-70252069.xlsxls 2fba5997186a1e4e2da7496bd7a1bca3eaf425971cc76dd7be878f3fd88add07n/a SilentBuilder
2022-03-29n/ahtml 4d1045bb16cfcf713ad228bff73c7e5d692804c2a43fd3dc3e6a1de1b791b3e8n/a