URLhaus Database

You are currently viewing the URLhaus database entry for http://brodez-ie.ro/wp-includes/52195680_IyDRAMXOGi_sector/corporate_forum/76034726320349_Gngor/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:301890
URL: http://brodez-ie.ro/wp-includes/52195680_IyDRAMXOGi_sector/corporate_forum/76034726320349_Gngor/
URL Status:Offline
Host: brodez-ie.ro
Date added:2020-01-29 21:20:05 UTC
Last online:2020-01-31 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-29 21:22:02 UTC to abuse{at}ip[dot]ro)
Takedown time:1 day, 6 hours, 44 minutes Poor (down since 2020-01-31 04:06:03 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-31doc-2020_01_31-92965.docdoc 8c92d4ec69c3abb56aa2bbf048e479ef4129aeaf93c5425063415797f78f151aVirustotal results 33.87% 
2020-01-31DAT-20200131-526820.docdoc 8ac6cda8c7b4094b736c508bc231f782f410a72cecec097edb943014ce610585Virustotal results 33.87% 
2020-01-30inf 20200130 GPE976.docdoc 11078ef33eb1bccdd13fee326af0b5a51e5d9bfb1335c25004cf281c01ccfdc3Virustotal results 37.93% Heodo
2020-01-30Inf_2020_01_30.docdoc eba2dba873ee77550f0381f6e0fabf8501232bc19b5540b15d442e85cf817399Virustotal results 32.81% 
2020-01-30doc_2020_01_30_D4498.docdoc 2d865b1d71a6827ca4eb3b7f884d08cc2acbcea2e862ce53a15cea4128959e8cVirustotal results 30.16% Heodo
2020-01-30dat_20200130_OM95441.docdoc 767b17c9708aa05e3d52db97aa2842a873f2cf8e9d75f19e3e8c84fd32442e32Virustotal results 25.00% Heodo
2020-01-30arc 20200130 46130.docdoc 7099bcda5f0b4caadc077f6bc794a4dc8933e66863535f49c23c8b19ec793b7fVirustotal results 28.57% Heodo
2020-01-30File-2020_01_30-RQ028449.docdoc 6926bc1e1548f432acb621ea14a0a04189aacc9b0d3730cc275ea5be5ab2ddf7n/a Heodo
2020-01-30inf_C012.docdoc 093fe06865cc5cd449e9684d621efaf181505881f5e0e818b0ec9c4459ef1ba9Virustotal results 22.95% Heodo
2020-01-30inf 20200130 QCZ05192.docdoc 479eee421bf4015cb1b00a588e5962438efd1c4dd8125867ddc62109d6e8e3c4n/a 
2020-01-30List 2020_01_30 JLV1384.docdoc cbfd00a796bdd447134f7dc1f38823e8e2eefb7075068cc197ec67c044ecfc24Virustotal results 24.19% Heodo
2020-01-29rep_N72641.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29MES_2020_01_30_24378.docdoc f3e0ea1e9f70b58a16ab7b737be16e81a1868a88fcdd4de0c1fb6c4a3aa6b3b9Virustotal results 40.32% Heodo
2020-01-29REP-20200130-C58317.docdoc f80a337ea4686f15fc7f954c4cc9ffae5db51615010191780a639e67ebbadc11n/a Heodo