URLhaus Database

You are currently viewing the URLhaus database entry for http://www.thymedentalcare.com/Facturas/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:24971
URL: http://www.thymedentalcare.com/Facturas/
URL Status:Offline
Host: www.thymedentalcare.com
Date added:2018-06-28 15:57:12 UTC
Last online:2018-09-08 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-06-28 16:00:04 UTC to abuse{at}digitalocean[dot]com)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-06-30factura-CFC-5173628.docdoc 027c6eff88fad90897f116eb96b21980bdf0d89f36f72df4960726e3334331c6Virustotal results 33.33%Heodo
2018-06-29Factura-jun-69/38316184.docdoc 63d44ddc7164565d400424f93ad7bbd0f5d4f38e28297f3003294d4c7fe52532Virustotal results 31.58% Heodo
2018-06-29Factura-jun-459/311771915.docdoc 276e5e230766222ed208b1d4d1bd994acc2e763ca71c6d28f41a17988375d099Virustotal results 30.51%Heodo
2018-06-29Factura-jun-884/31538168.docdoc 25cfc7d6465780763306f6ff79d879d88885f0a442ba9e6e840e8485e1f85317Virustotal results 28.07% Heodo
2018-06-29FACT-AGD/9914581.docdoc 5d70cb021518ceabc2cfefefadf74f4918717fe4a3e91d8e7b54f65d42b55e92Virustotal results 28.81% Heodo
2018-06-29FACT-RTH/51027500.docdoc b478023cf8d6951f92a7df241475478c2e3af6615577e5f032e0a1bc5320c76cn/a Heodo
2018-06-29FACT-QBW/567137.docdoc 54d457be6608e3521c066b65e9fdc7cac8b7ceac14ed866e06e8c7adc9452b25Virustotal results 17.54% Heodo
2018-06-29FACT-BNV/55973100.docdoc ca77b3b2ee91b1f0ceae4fb0b97120392bc75e7616d068813746f6c7dfa87cdeVirustotal results 15.79% Heodo
2018-06-29factura-AWC-212221753.docdoc b7de3c07adfd4487a46a38799060a96635ec079d1944ed72e2cdfc76af1f0ea1Virustotal results 15.79% Heodo
2018-06-29factura-GRW-618061.docdoc ce6ece4f3586cc2306e1a37543c4b9fe5e8d71271016bc953c6ac87b642ab629n/a Heodo
2018-06-29Factura-jun-198/937262335.docdoc 9ad074c5dbb428c4bf699efee12342afa701a707c1c9f3c3dab9e9abf29cf2f6Virustotal results 20.00% Heodo
2018-06-29FACT-EKZ/8118836.docdoc 394f8061f4ad6714a72092b327f8d3f8268da7c881ff0b2ea1fe29c7a26ac34aVirustotal results 21.67% Heodo
2018-06-29FACT-FQK/1183095.docdoc 6864655577a22f5f289b9b8e092d6506909c28dd843438064842bab21947807cVirustotal results 20.34% Heodo
2018-06-29FACT-ZTO/554266114.docdoc e888c8a6f8384f0987a15741f5a865d4beccb38e460a6d1626ca1972a2656df0Virustotal results 26.67% Heodo
2018-06-28Factura-jun-77/8181559.docdoc 27f47adadba6d9f62e8239c19813f2256a86091af65868d18fe5a122ffdfcc12Virustotal results 18.33% Heodo
2018-06-28FACT-BLP/113380.docdoc a1b27163ca2b7f89956e1c8e80e53ed389b63974437b4a2855f4f478f28a7e5cVirustotal results 18.33% Heodo
2018-06-28Factura-jun-889/88667559.docdoc b72a7ee805fdbf8af7e1509515e1e25236c7322aa6407b148ac5b435b95ce7f9Virustotal results 18.64% Heodo
2018-06-28factura-BHP-617128.docdoc a5298687c326b6cc13238592c593b08320bae3139ac6427192343da8faec5f25Virustotal results 30.51% Heodo
2018-06-28factura-PZI-82916453.docdoc c7de9964d8f9f8fe725197c0baeb773f4c99bc45a148addab8190a50291bfedaVirustotal results 28.81% Heodo
2018-06-28Factura-jun-787/8135472.docdoc ef5b263d537d9acae7ca0f3c985d1e9bfc9d3447e0de7edb882048d6730757d2Virustotal results 31.03% Heodo