URLhaus Database

You are currently viewing the URLhaus database entry for http://plenimax.com.br/sites/Scan/Fakturierung/Fakturierung-WJG-37-17102/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:30845
URL: http://plenimax.com.br/sites/Scan/Fakturierung/Fakturierung-WJG-37-17102/
URL Status:Offline
Host: plenimax.com.br
Date added:2018-07-11 15:36:09 UTC
Last online:2018-09-08 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-08-17 09:31:20 UTC to abuse{at}locaweb[dot]com[dot]br)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-12Rechnungszahlung-ZYA72399003347.docdoc b4bcfb4f0b8e70d33408566b9abde870f44d168564c225c1a3f2f5cb07bee8f1Virustotal results 25.00% Heodo
2018-07-12Details-VHY4952987200.docdoc 6e9d397a744002bc410f086b58b4cb8253e6d2e87f6dbce75d1a192295e369bbVirustotal results 24.59% Heodo
2018-07-12Dokumente-EOK760982414176.docdoc dfdb1d68fec1d4eec43adb5f02a896aaa1fb0282136a8d7ec2e6073fec44a2c0Virustotal results 25.00% Heodo
2018-07-12RechnungScan-LOQ524059625322011.docdoc 02f9e4f54e9450bb070241a9e602e5f1472b2f0c9d968ced215e540a6c61f160Virustotal results 23.33% Heodo
2018-07-12Rechnung-RBP7589543100682.docdoc 854e0a13537eaeadb6b2be5d2569d2ad14bb47074231649befedc7ab4a8ee3eeVirustotal results 23.73% Heodo
2018-07-12Rech-DNN977864634864791.docdoc 16eca09eacb53f334ee9e93b2e792f8d53de567788918c634bc62b654e176cc9Virustotal results 21.67% Heodo
2018-07-12Scan-JJP746377274481031.docdoc d5ccbbc0a761fa078a9bf999f141a78020e5541fbeea55201137608128a4d38eVirustotal results 20.00% Heodo
2018-07-12gescanntes-Dokument-MBV3432194114109.docdoc 9300aee822bc4635a00c90b2215dbde0a857b9fbc0afa3468c5f9f30bfb5a276Virustotal results 18.33% Heodo
2018-07-12Zahlungsschreiben-GCD876861715.docdoc 7dbe2bd2956993d4108dd602b87bc5dd33d8a7595483a0866df728c08f3d6194Virustotal results 18.64% Heodo
2018-07-11Zahlungsschreiben-MXJ0634768974237.docdoc 3fdbd580b055e98c5cc239fa2deb4fcf8b18225355ae9cdba8010bfda3d84eceVirustotal results 18.64% Heodo
2018-07-11RechnungsDetails-WZY014408247.docdoc 65016f7a960f21f32cd86d35df9444ecfcb0f2bc1b49a87b3792ea5d12c8597fVirustotal results 20.34% Heodo
2018-07-11Scan-TFT052652349524.docdoc 64f5e864e68d93025d7e7bb48d5c185e33579dfc4425c4551b707ec3e1cc8dcan/a Heodo
2018-07-11gescanntes-Dokument-IQX1376030.docdoc a03d17df0a1464d323a7962f8f29d49f7faf29682c26670bd4cb92a74edacf7cVirustotal results 22.03% Heodo
2018-07-11Scan-JME169225813972205.docdoc 5dc4f4c0d35d64a00cc28752c07dc2db6d1573dac803a05d5d9fab530161c4efVirustotal results 21.67% Heodo
2018-07-11Rechnung-QJL4755451420296.docdoc 547e51125cdcc0c58871c771b3b0f143dede12d580c276a290f4e91939f0580bVirustotal results 20.00% Heodo
2018-07-11Rechnungskorrektur-HZJ92495293.docdoc f004d219fe5842884cd38380ebfe432012edc51504ad71b582efb62fbd8d3e66n/a Heodo