URLhaus Database

You are currently viewing the URLhaus database entry for https://www.zhycron.com.br/admin_ldown/paclm/TrZdUfcnfIvF/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:241363
URL: https://www.zhycron.com.br/admin_ldown/paclm/TrZdUfcnfIvF/
URL Status:Offline
Host: www.zhycron.com.br
Date added:2019-10-08 23:46:05 UTC
Last online:2019-12-01 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?):mail Yes (Ticket DCU001994406 created on 2019-10-08 23:48:05 UTC)
Takedown time:1 month, 23 days, 6 hours, 7 minutes Bad (down since 2019-12-01 05:55:42 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-11-30n/ahtml 9fa60d3bc44f18358e0cdd713f01cf489dfaf57b8107e0a7e93777f4f2d90d81n/a 
2019-10-10LLC_8503320103_10112019.docdoc 51de13d18a23740342f1c681de4cb6c2baf116f2a4df4730c5338439d05823e4Virustotal results 35.59% Heodo
2019-10-10BL_70731035211387_10112019.docdoc 3703388fa4515756bfa53d35d2647585d591d9d139280626688be604f01c03f0Virustotal results 34.00% Heodo
2019-10-10JP_1RFSXNBU2DP7O21_10102019.docdoc 5abe8af115d25a49da2b007f9a0220518b72ce4b5ba70f6f243157b240c15182n/a Heodo
2019-10-10FT_25505069782357103.docdoc cc88b6c2e36692379df13967b38df23ea41e6e39403ea6da5bd20097c74d4142Virustotal results 31.58% Heodo
2019-10-10FA_K14YNDBNY_Z.docdoc 2edaea083ea39aab08670d19867627d5516f1f78efff05973e3524c3f897a4c9Virustotal results 27.78%Heodo
2019-10-104D52F7DUJ2JZX_10102019.docdoc f61b3e7db47761a36ea24ecf8d0213a63cd82d07d84c422f46784f85275e04cdn/a Heodo
2019-10-10FT_818400423885344.docdoc b42bef60b590a42952b0473bedcadbf27b0aa9cb2c6206d08aa1271579133dd4Virustotal results 30.51% Heodo
2019-10-10RE_4066162888961_ZY.docdoc 705e55a252475b5ae7fa7258eb04be795347a8eeaa929dabe7660e33ed392264Virustotal results 30.51% Heodo
2019-10-10FT_F53PXCH9ZGY.docdoc cc82bc7177f26107263871628ac0c38e385d8f26010182f0f7fd6352221fca33Virustotal results 26.32% 
2019-10-10INC_91YSG8FZ38QM_TJ.docdoc a9c3dd24c5d7018ede1f2c2ed330ac15462510f7bffcaaf8badbdb5a4da623aeVirustotal results 25.86% 
2019-10-10SCAN_IU9ZBVTS4_SV_10102019.docdoc 7e5c45cc547d770601dd7dcc29186fcc8ad1e00dd7d36ac9d58b9dd279998dedVirustotal results 26.42% 
2019-10-10INC_5783941628236_10102019.docdoc 6fdaa046ff8def5c39cb32e45cb3755f9997d46fe8db480f1659f6b48f9f9bacVirustotal results 25.00% 
2019-10-10OOAIUFOD4M4.docdoc f75488fdecc020cb293614a8864c2108c3406975002d525853e3e1906cda5125Virustotal results 26.42% 
2019-10-10LLC_VB0MTSNCY_10102019.docdoc 5111aee3697b7e6d97f54f97bb11bcbaedda8eb0a8f759e5fb491853b4352c82Virustotal results 26.32% Heodo
2019-10-10BHG_3C22KH1QS_10102019.docdoc 4a1f8d0d29be162a66f63cb5e2cb82ecf4311882dfd59986455d77698a5df9c4Virustotal results 26.09% 
2019-10-1036190800833617004.docdoc d6ba47dba7a4b5d3edbc954990704573281e71239ffd59490f13290d2f19694bVirustotal results 25.42% Heodo
2019-10-10BL_282124865302.docdoc 5124cd27665210e6f3f8609cd77cc4f7dd875bda403f9bf76d09abd83691d4adn/a Heodo
2019-10-10FILE_P2FQ8IBVU_RT_10102019.docdoc 82822a6d9b3d52a07fb3de64bdeefcbe471e2fb5fa06d31452c07a7c0b71c6adVirustotal results 24.14% Heodo
2019-10-10987478212075.docdoc 6d12ec981fc193f0f70e1396c9b5d1c687a0f922e8d3abef29aea87a92c97603Virustotal results 40.68% 
2019-10-10LLC_93609121092257860.docdoc a62b9fe2845005b9d6c3a84b44e7553f810b5ec1080b4598789ce4cfdc314e3cn/a Heodo
2019-10-10FA_4FCE9P7CHH2EC.docdoc 3f90a20aa7c21e5d785814d6521649e9b99c8dffe61a910e5ed63f8a70bac08eVirustotal results 37.29% 
2019-10-10FILE_P009YRLKKD2H_YJT_10102019.docdoc 0c421092cfe868bfc29d2e6f007bf424f8d02edf05fda335f832f5d67fa57d27Virustotal results 33.93% 
2019-10-10FT_76KHVZEKM.docdoc f9cdaed775eb3635df2b10e792da181de1c0fd3e9a5f01f5b7ead25ebfc9bb9eVirustotal results 36.21% Heodo
2019-10-10XGUUCT9WQFI005H_10102019.docdoc c0e484299000d1bfa92236a4e9dddbff222c9da2d7176c7714737def791a27f3Virustotal results 33.33% Heodo
2019-10-105021594606038010.docdoc f0229f9d03be90dd3424637d9832125d43a75e6f65a4aa5ce92fcc192b303111n/a Heodo
2019-10-10BL_10382579898.docdoc 6da107e20a4bde15076e46114cd08f53e2a082c6afd30a36b05de9b97fa66474Virustotal results 34.48% Heodo
2019-10-10FILE_ZXGL4R4KSLEQOWW.docdoc b4dd04c27697f3b87422d720c09d3a81af3823ba993e20e05de8a285932f047cVirustotal results 30.00% Heodo
2019-10-10FT_O23ZT72Z4WV7G7L_WQN_10102019.docdoc 144d03ea075288b15252acf044fc37f946c00e044fe29ede864507d477c3129dVirustotal results 30.00% Heodo
2019-10-10FA_YLLKE27OA_10102019.docdoc f6656a930a16a48259f70d4042f09c64afb7d19cc29e17ce719ea4840eb68e6an/a Heodo
2019-10-10AED_YD7QL39QR6_10102019.docdoc fc13915dcf6948edbe4bb35e72d68abc124fd2703b6d7cb8e54901b490010a75Virustotal results 30.51% Heodo
2019-10-10BL_M1400HW17QB_NMC.docdoc 6cadae1df63f52f3abcb5a95d3d4fe31b90f238da742e61e8edc716373a52375Virustotal results 29.82% Heodo
2019-10-10VMQ_JH2CGXCXH7_10102019.docdoc 4fc7f7b3f725c62a8cbc0ebdb3ce31b92406bd9fd895823d08e478c5440d3e36Virustotal results 30.51% Heodo
2019-10-10INC_XTU05FFA6LI8H.docdoc e333768e423c4aa3e8d064045ab3245ce04700293b0ea520ebf5e5475ebf8da4Virustotal results 27.12% Heodo
2019-10-10FT_J0Y3TS31Q_10102019.docdoc c923b3272f267788fd3b9324de97192cac0839d72c742b492a6a5e8240858548n/a Heodo
2019-10-10FILE_2VG0GFHDCZD2.docdoc 795a55ce16a6e032f51bfc5db65f4051a3c0df955a50e17a6bde4cf2c907d9e6n/a Heodo
2019-10-10LLC_28050679895757273.docdoc 4f25f7d86cf0f77dc97ebd3184a7e03e8da522ad421766bb559b8f928e53cd45Virustotal results 27.12% Heodo
2019-10-09FT_948259806673458_10102019.docdoc fb847e82ace6fa7c71a842b528ac6c6854cb62edc6b3e168522900507d261c67Virustotal results 28.33% Heodo
2019-10-09LL67UJ088JWU.docdoc e8e6f8650526c21d34aa43a33b4e70d79d7aa4d2c39434582b88a9109f89de04n/a Heodo
2019-10-09FILE_42974801990413_L.docdoc 688b36ddccba7411cfdd5b7289f698cc1a0eb9f0f22fe9313ac4a97706067b08Virustotal results 25.42% Heodo
2019-10-09FA_1908279786_Q.docdoc 72e80950c7a2f21ef7f6934e4fae280f8401fe83de4d6995fba8e0dfc559ef53Virustotal results 25.42% Heodo
2019-10-09DOC_3455483610.docdoc e8d6e1eed928ef0fc54b01edb5df0f45caed43e5c0c2bf907322d085536495cdVirustotal results 27.12% Heodo
2019-10-09033026805994_10102019.docdoc d0ec402c6420a7a773c4a95acccdbde2f4ec2bb5bf3b1b13f86e8e762a37bf7dVirustotal results 27.59% Heodo
2019-10-09SCAN_JGDU5KZ6A5OSH_PWY.docdoc f19c01010e1074a20dab25d568e6459c73ad15d1866d8f701960eaf78d945c26Virustotal results 28.07% Heodo
2019-10-09COV_07217199224.docdoc e1a5c331ed5d89af9ed1bd575692f6f5a7f80775cb43aa338becfd0019eb8442Virustotal results 26.67% Heodo
2019-10-09FA_568266453836848.docdoc 7222676fa925ced8216a6173b82d365e994e644690b628d33102d13d6ddd37c4Virustotal results 27.12% 
2019-10-094252054628027_BQ.docdoc 864b8b9d2b33b2902a9795d894be4833fa1e1fb62c79b45dfa292c8d5b2d5fdeVirustotal results 27.12% Heodo
2019-10-09RE_DPGHIDAF9IL08.docdoc 95dca0e1440d64cd9b0a1f67381772e46ec1828e77e48544239f031300382defVirustotal results 26.67% 
2019-10-09DZ745DLU1EQERQ_EKO.docdoc 227111ce7f8b8b2fdc4bbd53fab958b27e33feebd790ee17ba8d06da410fac10Virustotal results 27.12% Heodo
2019-10-09SCAN_KMVO7CTE7VLB_OIT.docdoc 7197b03dec44235f9e44560e18fa14b02f7021e2f2ffa5ccafb39fcd415e8aacVirustotal results 27.12% Heodo
2019-10-09RE_TVKCMTPGE_10092019.docdoc 680e0f26be549bf15d1c04358e331056889a26edd605ff2870680b7f9cc83d53Virustotal results 27.12% Heodo
2019-10-09RE_792843037953_10092019.docdoc 45d8f08d687befefa8950853a1dc483c2b5d2df3012ee15c45e166673330a12bVirustotal results 26.67% Heodo
2019-10-09INC_60735237442847.docdoc a8be0caac4bdc870e46a5fe401f5b6e86350b0b858517f27d309d2823ee93270Virustotal results 27.12% Heodo
2019-10-09INC_4008393759959.docdoc 717415998233e6c11784a3d7de4c81cbd1cf1631e0c7c37ad2fca26d8c8f4b03Virustotal results 25.00% 
2019-10-09DOC_9285062445300121_10092019.docdoc bb960450c2b0089d24590ccdf5e9771f674257b38388afc26d4fa195b60acd7aVirustotal results 25.42% Heodo
2019-10-09G5B465XD57Q4.docdoc ab47a7deb307f5d70096f44b7698c17c814d0cc9b37dafebefd1759b64ced6b8Virustotal results 28.07% Heodo
2019-10-09BL_2825674365_IN_10092019.docdoc 197a06f462b11d818f1efb361aa61425dfc0a7264d40deb8e3890fee1271d6f1Virustotal results 23.73% 
2019-10-09FA_MH9QUH1WN48C5.docdoc 83b5e481119a6df670ccf18d3a18b16d8d44c503fd15dfbfe0cb43afdebebaafVirustotal results 25.42% Heodo
2019-10-09FA_WFWJEO8SQGOE_GQ.docdoc 8b5db5a8fb38b8ae91a42ef038d1a9404dc3237c57cbf208ec17cb80b3440dcdVirustotal results 25.00% Heodo
2019-10-09FILE_552415655906_RR_10092019.docdoc 9a1c2f37c694cae03eba825550a69d528d43f0f157df9dc83bd893d3e4b79ec6Virustotal results 25.42% Heodo
2019-10-09RE_0153214748527598.docdoc 051e6598ac379949458a7cc477846784ec21a6c5d4050395a87851db626becd1Virustotal results 25.42% 
2019-10-09FA_1474738760075.docdoc 6b402b98e05150b7cd6cfe353232c9c90edc357c900487e7fd60adcc2b4ccb66Virustotal results 18.97% Heodo
2019-10-09MMO_ZE57KCX455DIZ.docdoc 1aff2e97b2120bfed781b58989d7b9ceaec3ffe671622a0301ba4d72b20dfeebVirustotal results 18.97% Heodo
2019-10-09MPF0CZBQ5ZB7.docdoc e7ff479f4adb4434b10983fc64d9f5d442da4427792a66f2ae4f4e47bfbe7391Virustotal results 20.69% Heodo
2019-10-09DOC_KXO2OFWBY6XK_10092019.docdoc bd1eb12f63c1ac2aabd42a261abf137798238f94b22bd858d8f196a0bad04cb5Virustotal results 20.34% Heodo
2019-10-09FA_03893835662111.docdoc d05bb19ed89433a6cb34cf69d96f5b6327b800c959829b8c18e78663f9926018n/a Heodo
2019-10-09RE_GJ8FJRFSRF_10092019.docdoc 705ab1b0d425dbc8ca373e4ccee0916a7ab18547c3ea500cd3c2b3ba4d02a835n/a Heodo
2019-10-09FILE_8Q88J0NZ4Q6TJ_10092019.docdoc 9d0dc1eb88f28b66626e405c5e43632c8edcdc55e2b645b319a4759ada545f39n/a Heodo
2019-10-09INC_730773058223.docdoc 5fab189daa357cda0edba516934aab089d3f30e444a393ded5805fc750256ba4n/a Heodo
2019-10-09LLC_DRRIH4TUZO0.docdoc be82d9dcdfabeff2daf4616933afcd121be737b2d3c1ed7f3edc877fe8d60c04n/a Heodo
2019-10-09FILE_1985324805431329_HGB.docdoc caed5c43bcff43b5779a7f8a779690f52a14e34a3b96ac3bbdf94d28107f77cbVirustotal results 22.03% 
2019-10-09XWD3QW9STOXJS7I_LYH_10092019.docdoc f77de6d5346828a0d4e5f22d9db199a1b786973f458940ff26b5a35347066f1eVirustotal results 21.67% 
2019-10-09LLC_QOKI5S07HKVB8K_10092019.docdoc e87bb68914c0ef7b9f18211e433f91bc4a6c4d82eba8436d98dce32167ffc1f9Virustotal results 27.59% Heodo
2019-10-09DOC_4292873331_10092019.docdoc 8b60b7de0518d45996047862812f6641abe43a34cc8c561668bb6259c45ca712Virustotal results 27.59% Heodo
2019-10-09FILE_PMEJ7XYCMFNT_10092019.docdoc 51583c7646007e7491706c652f15feb0219febdba42ff614beb0cb98a3ba3204Virustotal results 27.12% Heodo
2019-10-09INC_394075621254_10092019.docdoc 936259c6c919bd5f3271486b487fd320c443e047af82335b84bc6f533647efebVirustotal results 27.59% Heodo
2019-10-09DOC_78076565737992115.docdoc b64a15991bce0d746e47a8c7fd6cfca5dc81b323990801076870096762e1ed7dVirustotal results 27.27% Heodo
2019-10-09INC_77684717602_DT.docdoc 7b0b8d45e3d779abc31f490bd2d955810bc6e10c057206ef0326e97057f84dadVirustotal results 27.59% Heodo
2019-10-09FT_8755698465_10092019.docdoc b808bc7ca3d26aa8bb213695326842a4b5d26dfa9a8f3a46dfcc283a381c7b04Virustotal results 27.12% Heodo
2019-10-08RE_698283987555974.docdoc f10e99aae65c36b2a922124f399a2df8800ee000f723007633f809a0b98aa72dVirustotal results 25.42% Heodo