URLhaus Database

You are currently viewing the URLhaus database entry for http://ferreirajunior.com.br/newsletter/En/Client/ACCOUNT78088831/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:33096
URL: http://ferreirajunior.com.br/newsletter/En/Client/ACCOUNT78088831/
URL Status:Offline
Host: ferreirajunior.com.br
Date added:2018-07-16 21:33:54 UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?):No
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-07-18NE530368_2018_07_18.docdoc 0850d799636be19c84f05ecc181e540a2df5dd21a3e775e2da48a5c681c28e64Virustotal results 22.03% Heodo
2018-07-18DCI568427034388_2018_07_18.docdoc 6f8e87bcf7b47f9176d33d485570336fbab97ff5ac8b3e37f18f068f8d15c6fdVirustotal results 21.67% Heodo
2018-07-18NRM501902010_2018_07_18.docdoc 9a7267b4530ccb23e99d6e1aa5b761fd8b44058d639b3585b530188f9a31db49Virustotal results 21.67% Heodo
2018-07-18XT492523606400_2018_07_18.docdoc 2ae440cf48d2bc438f607484766eac5c35c636948eef8f47b12b01427a370a70n/a Heodo
2018-07-18FV88868257_2018_07_18.docdoc 4c9a2cf4a14ec7f975dde42fc42f79fa243c62b83ddef221a93d9b18c97b0f76Virustotal results 22.03% Heodo
2018-07-18ROD92500013135_2018_07_18.docdoc ef1dcdc1d066585352fb6d08ff608a610fd9cac47788f58b988f2ac63ba26947n/a Heodo
2018-07-18BZ4614532363_2018_07_18.docdoc fb1a7b69d5aaab170c303978511a9fbb992d49e57479d413c3920f65336b5eb7n/a Heodo
2018-07-18inv-ZWG-1203181.docdoc 3a1345bc72b9f4302bcaf3bab57fb37e1219e4e9a5b971c2d1943eea9dd08606Virustotal results 20.00% Heodo
2018-07-18inv-0890736/79.docdoc e7db2087ef7f0f80640c7f62a493da43eadb8db5f5af90ef1cb55e68a465696aVirustotal results 46.67% Heodo
2018-07-17INVOICE-058-GVJ-4909877/01.docdoc 04f46cc8eea2154477cdfc3b893ae9f625e662cd401c3bd172dd9943e92032d4Virustotal results 22.81% Heodo
2018-07-17inv-2018-07-17.docdoc cd4341a7f34a2e518627f65f97684bf899835ed2015aaa8c1528851d1499e76eVirustotal results 23.73% Heodo
2018-07-17INV-20180717-9992123.docdoc 1aab73556bab1809608aaf425a3fcedd78401d92a645c3956bdbcc62b91a60d8Virustotal results 21.67% Heodo
2018-07-17INVOICE-GC-4110230.docdoc d834ed62585cd18e935256a902b4b9c4de81982c4a7818421aec87f374e091b7n/a Heodo
2018-07-17inv-2018-07-17.docdoc d12be5ad757cda0b161d7092be269ded5e05250ceedea0c0698ed6842656775fVirustotal results 19.30% Heodo
2018-07-17INV-057-KT-8489938/6.docdoc a4c7d8e6eec7d4ebe9f100987d663dd1bfa89876395a933694d11c92b826ae3an/a Heodo
2018-07-17INVOICE-YST-1197294.docdoc 16d90ae2f5746b49fb757329d6994a501dee047fa826419932ff604dfafe179aVirustotal results 18.64% Heodo
2018-07-16INVOICE-0546568/88.docdoc 5fffbc185d86b50f00620644c6f252726f3db0d91191b03d31c1d3c0eb8ed4cfVirustotal results 15.79% Heodo