URLhaus Database

You are currently viewing the URLhaus database entry for https://www.ces-cl.edu.br/conipc/wp-content/multifunctional_giSPQcN7B_vhIJlZPywx/individual_cloud/8bmet_w4y36/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:301490
URL: https://www.ces-cl.edu.br/conipc/wp-content/multifunctional_giSPQcN7B_vhIJlZPywx/individual_cloud/8bmet_w4y36/
URL Status:Offline
Host: www.ces-cl.edu.br
Date added:2020-01-29 15:13:30 UTC
Last online:2020-02-01 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-29 15:14:04 UTC to abuse{at}lacnic[dot]net)
Takedown time:2 days, 23 hours, 39 minutes Poor (down since 2020-02-01 14:53:07 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-31rep-20200131-074.docdoc 017390814ce8eda79de47b58a534f724da0983b3467d7e1db0c33311ffc26a8fVirustotal results 24.19% Heodo
2020-01-31mes_20200131_JB710.docdoc 98d4100547490c9809f92a82a3afc57c4927ce1e84664bad304d005b9754a02fVirustotal results 20.63% Heodo
2020-01-31dat_2020_01_31_8631.docdoc 5d3c3461c678241da390d525ded034273d14a57ccd4d0169627f753fcc9fd91aVirustotal results 20.97% Heodo
2020-01-31arc-20200131-O257975.docdoc de7f46042c7b7869dbce7edfd31fee0818897274c069167ec5b6950b69137b39Virustotal results 34.38% Heodo
2020-01-31file_2020_01_31_S7606.docdoc cf37de24304aa0dd3b5ad32a824118e7e0b5621b5c65a382297f480b4d2290c1Virustotal results 35.94% Heodo
2020-01-31FILE_20200131_IR59953.docdoc 8ac6cda8c7b4094b736c508bc231f782f410a72cecec097edb943014ce610585Virustotal results 33.87% 
2020-01-30file_20200131_34954.docdoc d7a27e0a8ed759ceb61c4f2adb2b371edbe91d4234889c238b976a2ed62c379cVirustotal results 34.38% Heodo
2020-01-30rep 20200131 N618411.docdoc 710bca7eb8f1b38ff3ff591ffce42780c42d513d5db8e8edbed62b2a30a41145Virustotal results 33.87% 
2020-01-30Mes 314.docdoc b591041c0ff11bf9d334cc3c52ffe363663bda3b2af2dddbb0641b746bf8f123Virustotal results 38.10% Heodo
2020-01-30Dat-2020_01_30-308174.docdoc 2d3704d70a241dbcd409a1795470714a4458938eb29c160def982de82fe45c28Virustotal results 38.71% 
2020-01-30ARC_053.docdoc 11078ef33eb1bccdd13fee326af0b5a51e5d9bfb1335c25004cf281c01ccfdc3Virustotal results 37.93% Heodo
2020-01-30DAT 2020_01_30 483731.docdoc eba2dba873ee77550f0381f6e0fabf8501232bc19b5540b15d442e85cf817399Virustotal results 32.81% 
2020-01-30rep_20200130_R580.docdoc cd3214c911c1d942daf6c996111cd99097c00e5fc450d39c2abfdb45c27658c8Virustotal results 31.75% Heodo
2020-01-30DAT_20200130_HO3358.docdoc 767b17c9708aa05e3d52db97aa2842a873f2cf8e9d75f19e3e8c84fd32442e32Virustotal results 25.00% Heodo
2020-01-30rep_5109.docdoc ddf014e6d9e70bc1709c2ccde24524fc72092f929ea37df901ee88f152ae4c43Virustotal results 28.57% Heodo
2020-01-30doc-2020_01_30-898.docdoc 6926bc1e1548f432acb621ea14a0a04189aacc9b0d3730cc275ea5be5ab2ddf7n/a Heodo
2020-01-30LIST_063.docdoc 1db0c100dfea192f88767bedda9beef583fcfb5c7797f32d7f93dcf045d3239cVirustotal results 25.40% Heodo
2020-01-30Mes_2020_01_30_ZG129500.docdoc ded73d524fe7544ecb69b5779a5bddbef01386b55ac338c83fb4d25d31745584Virustotal results 25.00%Heodo
2020-01-30REP MP0404.docdoc cbfd00a796bdd447134f7dc1f38823e8e2eefb7075068cc197ec67c044ecfc24Virustotal results 24.19% Heodo
2020-01-29Rep_2020_01_30_DC44376.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29rep_20200130_ZRT2740.docdoc f3e0ea1e9f70b58a16ab7b737be16e81a1868a88fcdd4de0c1fb6c4a3aa6b3b9Virustotal results 40.32% Heodo
2020-01-29Doc-20200129.docdoc e49d66744b97eaa47dae870c0fdd5f6b3a52e1b2245e8567ffa6b8a344663fe8Virustotal results 34.92% Heodo
2020-01-29dat 2020_01_29 N879276.docdoc 7e8c0e91d30b485bed7963d9d3169c243edb3f5f2ce5e8049df4731007ea4d61Virustotal results 32.26% Heodo
2020-01-29list_20200129_GNB882.docdoc 93e6b158ccceb81017a551ff0ede39622381a6ee79e572a206f2756b342a47fbVirustotal results 28.57% Heodo
2020-01-29List 5795225.docdoc c0ebbfa695c1e2d054d32b340956dfffb4c155a4e420caaf593b0f1bbccbbd18Virustotal results 27.87% 
2020-01-29Rep 2020_01_29 0027.docdoc ac41ec25e6ec00aebc8f955b7a555f4510b16069331fea05e144d182128f9ea4Virustotal results 26.98% Heodo
2020-01-29List-A9871.docdoc b4645c7c4d03f35ca6bf54ef468f9f46ddeee10607ce4c5fb6b3405157264bffn/a Heodo