URLhaus Database

You are currently viewing the URLhaus database entry for http://djmarcao.com.br/gifss/cxPy2O0VMCbf8DLSnF1COE2mn0i/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2119435
URL: http://djmarcao.com.br/gifss/cxPy2O0VMCbf8DLSnF1COE2mn0i/?i=1
URL Status:Offline
Host: djmarcao.com.br
Date added:2022-03-29 15:02:06 UTC
Last online:2022-04-08 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-04-08 02:45:11 UTC to abuse{at}vieiraarts[dot]com[dot]br)
Takedown time:9 days, 12 hours, 37 minutes Bad (down since 2022-04-08 03:40:27 UTC)
Tags:doc emotet link epoch4 heodo link SilentBuilder

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-31YT-05536999.xlsmxlsm 894658b992050ab6d7ee061f083a48264ce56c1b4fbc5ac87c142765405a47f7Virustotal results 36.51% Heodo
2022-03-31MTP-474496536130.xlsmxlsm 97f11e4cd509aefb731d8b1a4b299c8ab4096e270f05f52d8e0eb6d2366fa501Virustotal results 38.71% Heodo
2022-03-31QPZ-29754459.xlsmxlsm bc2b30e9969aa7dc11544b73955d47d12ec3d2febe998b5cef4b57c89dde7215n/a Heodo
2022-03-31EK-4568982968249.xlsmxlsm 100a059429276f981fa6268ee948f1403f73c2fdd01e41148fbea55e773bb1bcn/a Heodo
2022-03-31LKF-23524031.xlsmxlsm 2e8dfaff0039f7b69af5f699d0efff85cca1b5dbe2a50082b7ccc49503545053Virustotal results 40.32% Heodo
2022-03-31QDO-34554996323.xlsmxlsm eb39b29661d81cbcd7a00f191c61ce9902b80b68e1e03215e56221bfc85863efVirustotal results 39.68% Heodo
2022-03-31NHP-67179438177.xlsmxlsm 764d8e72174b0666952016caf95096e85219dba6554a8ce6db74b8244b3e7590Virustotal results 36.51% Heodo
2022-03-31QS-3141456092.xlsmxlsm 00ea616ce33ef49268a2d6046f588bb73c80b7a90ae6e5e5067938d72e858564n/a Heodo
2022-03-31VU-6298060.xlsmxlsm 162637428037d1f8f3bd675b122e5b830107b9ea7352c8c765e97a3afbce1231n/a Heodo
2022-03-31NE-500266384.xlsmxlsm 355981d4c8400968deaa8a13a04a79c90bf9aab795af2ff1b3273b825a477968Virustotal results 38.10% Heodo
2022-03-30CW-92963972368400.xlsmxlsm ccf8147ef96ae47288019a25336c2935e73d2e06b8fe73823e3596fb1596ba8dVirustotal results 39.34% Heodo
2022-03-30BPP-0001873673.xlsmxlsm 08e64e582d9d42f5f3a21eaff52bcb72b4a3abfc761561ff28f40bf937dedb2cVirustotal results 35.48% Heodo
2022-03-30BT-883713002.xlsmxlsm 7b790cb9f037644da2aa7daf038bef787f020bc8aad1932fb1e8c4c5ab3b4766Virustotal results 32.26% Heodo
2022-03-30WFB-21171296061308.xlsxls f3101b6d16751623f8a025bfbf75ae9a32c68b534dccbab4452ee72a9fbe0f5fVirustotal results 28.33%SilentBuilder
2022-03-30YJD-1679595966877.xlsxls e3fbd4cf6ed31e9adab4c4501c8aa3b5ab01e5d44ec754c1e2ef154b3172c592n/a SilentBuilder
2022-03-30SEN-9780190848320.xlsxls 3d1079de218293926fad741451c1633fbb0b9c99a67d4934c97eef854bf09616n/aHeodo
2022-03-3094500933604.xlsxls e6816092d6eb5bec7ab8d5463c45994379e212925e29994c9a28a826b9f0ee92n/a SilentBuilder
2022-03-306943589440326053.xlsxls de03ab1d198136ce8f5fba27d87ceed99696fc46da6cb9ce7614b3824e02dec1Virustotal results 25.00%SilentBuilder
2022-03-3019194371116346873.xlsxls 6bc82ca44f9547143dd0946b0a5eb849e09e743565f3731328c94506ba8edb7an/a SilentBuilder
2022-03-3018838594229062674441.xlsxls ec525c39ad25d59ac4ac1f1de75dca892bfda29514701e4bf109f00894895fa5Virustotal results 26.67%Heodo
2022-03-30072160424685226492.xlsxls 18620190f7162d9df017a561138e2ee83549e1aab9382f9b29b27542a490a169n/a SilentBuilder
2022-03-30358949477401702449.xlsxls 9277718e39321107cce7abf3ceeac6268c1e01b3e786637f4bfc141352fd0871Virustotal results 23.33% Heodo
2022-03-307311346843069.xlsxls b5182104502adb4db536519eec2aeccf023a4a085724b971f60dffd20c1c4adeVirustotal results 23.73% SilentBuilder
2022-03-30814879724351948.xlsxls 3539db158b19a2e36c74f8507e77a21350c33afccf49f9d805275cccb7e3a226n/a SilentBuilder
2022-03-307495158404008345.xlsxls bfc4346b81b8cab420b161be78ca4bb5c5451f4342fe4334900389f56b8bdfccn/a SilentBuilder
2022-03-3015062166520330635394.xlsxls 8962aaa71206d6ab184fd4c5d8d8fc956ad277803b3a33e0519943cb304849a8n/a SilentBuilder
2022-03-306820832687.xlsxls b0bb73b26ef4bb7bbfc7a11f9623721be84f3b00cab0c87a0a89597f79cc9be4n/a SilentBuilder
2022-03-30860427776757379.xlsxls c608ea84421874b786b035d63940ce5c0eb73d5ae08770bffa1fa700bca152dan/a SilentBuilder
2022-03-3097914722729951232.xlsxls ed919e7317e9edb91eb7468e26cad1b08ecd328cfb669e1fb95bc2f3171b2ec8n/a SilentBuilder
2022-03-3004718514246725213.xlsxls 86e52f0a682a1df7d90d7bcd0397e524613976d02acd17e8af00191aa679645cn/a SilentBuilder
2022-03-3008469544257515.xlsxls 905937ee43f2fc5221d18f42e0e1b2514bd1059016ddac70a5fe00c2092cf34an/a SilentBuilder
2022-03-307597086689009649170.xlsxls 385fc2720a678cc5b53d3d58caa225e7fa24e29c86ff6acecb609afb7659caa4n/a SilentBuilder
2022-03-3048588434145518.xlsxls 51a8819534ed48bd71579b6e79307358b76ceaae81aafc73cbb8e8b77e977061n/a SilentBuilder
2022-03-30916445900051.xlsxls 188aa320f747429f44c222eb0cc80229ee39b8452b8f119c3553f66b9e9d200dn/a SilentBuilder
2022-03-3060558094090202119977.xlsxls 32f3e722f746ac4acff3f58e739da7e4f035e631b1e425e69d4dc62e69100dc8n/a SilentBuilder
2022-03-301577773518020323741.xlsxls 8d68a2348c7a8e5c21b19f4602a4073af8c4f004aca606dc0bcc1639524e9c65n/a SilentBuilder
2022-03-3012817821865933.xlsxls ea264f889a1a89c80012dd0905c7a11fb6b541b0b0de6f6504e50101dc7bf0can/a Heodo
2022-03-303734428264635992725.xlsxls 04be056f53e92105f9812020c5d320811132f9c1c52a169578a969c1385660c8Virustotal results 23.33% Heodo
2022-03-295065113966925408.xlsxls 97df6ceb1a63712a6b1bf8f40f12d8add7b3a4e7f8191734eaee45dc10aee3ecn/a Heodo
2022-03-29798120733928609852.xlsxls 623f24ebe43fae701e016c72cb568928b5c7005de85b3e95e7b6cdb2d12b1e0an/a SilentBuilder
2022-03-2905147039527.xlsxls 81ba58623792becf40d816c7b68f709ae3ff2985753490501f12ea3987f9bb5eVirustotal results 23.33% SilentBuilder
2022-03-2934449037580547.xlsxls a679c80a799b163cf0ad3f464c4a1bc023c7d6dd0715662da376d6260a4b9040Virustotal results 24.56% Heodo
2022-03-292060550426900.xlsxls 6ddbab092ea3334218e1a42e8c21dacd63db67a4c382a78095e0712c06d9a667n/a SilentBuilder
2022-03-299887766699121.xlsxls f65a94d6277859d9a378a87196fb29020f43daa4f319b0e64d292a3d15fc8b9an/a SilentBuilder
2022-03-29595179518694.xlsxls c52e93e91b5d59d300c8514569b22a800531880de8cf3da12f3bf4166ebb3781Virustotal results 23.73%Heodo
2022-03-2914486639621450788423.xlsxls 0a6154f3c866b22e26356c0459f4b0eabee2bf9a7dffa104440b5db1ea99e2f7n/a Heodo
2022-03-297199180760.xlsxls d0dc2168b3dd4944488dd41feee933b81254176491122d8afdbcd8bafa175694n/a SilentBuilder
2022-03-299402245977.xlsxls 82712ef6878423d4241b9bb9d22d2c9188f6d92ba57da69b6c7da9128fd3dfe6Virustotal results 23.33% Heodo
2022-03-2931548132996191.xlsxls 9575e2971e7e9d0105384f20c77f085a66fe3e95903619289c697f24ab411e42n/a SilentBuilder
2022-03-29246634991580.xlsxls e02116cc9438f4fe65649bcadabd2f0427d734b85bd77f212e841f2a9c477c61Virustotal results 28.33% Heodo
2022-03-29128924808144233.xlsxls 1d2a970a13f178da4a04cec74076a142eeb0fd2d6c9a1c639661da703fa83ec1n/aSilentBuilder