URLhaus Database

You are currently viewing the URLhaus database entry for http://overonedjs.com.br/wp-content/thmtposz-xj-9958/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:421581
URL: http://overonedjs.com.br/wp-content/thmtposz-xj-9958/
URL Status:Offline
Host: overonedjs.com.br
Date added:2020-07-29 18:14:15 UTC
Last online:2020-07-30 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-29 18:16:02 UTC to abuso{at}guzzo[dot]com[dot]br)
Takedown time:23 hours, 13 minutes Good (down since 2020-07-30 17:29:37 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-30invoice_7603_067798728.docdoc 8ffe071345d0016afd6054f35a6a1bc1fd15deeb8c37d36e6e29bd92403c0424Virustotal results 43.33% Heodo
2020-07-30InvoiceMM2 80878471.docdoc a73b5137a487f37f2fa62bf4b6efd685f2aeecb72166fd9fb07b0a8f84aed362n/a Heodo
2020-07-30invoiceLK675 2569816.docdoc 0195eda6f0dbf03b6fa7c2689f538bb998ce4cc533fd7117c956c7c5c2f62437Virustotal results 45.00% Heodo
2020-07-30Inv-QH1752{:REGEX:.docdoc 57cd3c6667afd66293fe85bc6632764caa8217677ecf64f34c72677367fd9472Virustotal results 46.67%Heodo
2020-07-30Invoice-N1644{:REGEX:.docdoc a967428ac71da65c0b8688b11b4a347d2ef493f05efa01b4fe2d3221525486d4n/a Heodo
2020-07-30InvoiceLBBN9-815020.docdoc 266ef8fff927a20df9110569a6ed363072094faaa7acb7792e59b2d28a86d71cVirustotal results 41.67%Heodo
2020-07-30Inv-TV7511 2395979.docdoc 4c2e3ee81602130aad3a662d8500b901eb2ad5af96d12773227699e941fda724Virustotal results 39.34% Heodo
2020-07-30Inv_E13{:REGEX:.docdoc ced0a2a65f3695dd4cec0afa9f1e135710d7dccd015e6b539d89ad09acd8f3adn/aHeodo
2020-07-30Inv_EDPU13{:REGEX:.docdoc 2d52d74f498007a80c0f955b4004ffa43f9a156616527223b12166fc5e396742Virustotal results 39.34% Heodo
2020-07-30InvoiceMPLD5488-66182223.docdoc 4a0c2b7ffc018049812893fc6ba973b212567e436a794f9fde50207835be9d0cn/a Heodo
2020-07-30Inv-O1627{:REGEX:.docdoc a12c802c14ee523d5fe6b5ececa5018201d45d0f57281b23593be0117029d867n/a Heodo
2020-07-30Inv-F8049{:REGEX:.docdoc 099dbabbf2a1939ad6103ee587d3777e00c2d83f0d0f4e2343191d546dc349abVirustotal results 40.98% Heodo
2020-07-30Inv_CJ5729{:REGEX:.docdoc 7b02363b8b78a87f753d96c97fb1600e0eef27bfa370f95777f5b62bb04ebf66Virustotal results 42.62% Heodo
2020-07-30InvN05{:REGEX:.docdoc b831558e10d067342a4e9ac952a95de0a3054302bc7b79610b6649784442e013n/a Heodo
2020-07-30Invoice-SNX18-617646.docdoc 84f1793acc6d7c229aed03c0334fcb223eb89415c1d96b08822e988c1a5652afVirustotal results 45.90%Heodo
2020-07-30InvoiceZMR069_090071638.docdoc 12d1ea6204e341522115a4cd2fe28cfe7bdef98bfdc7acd4be32e011346efc60Virustotal results 45.16% Heodo
2020-07-30Invoice KVQI44-381667249.docdoc c4ab3c41df5329c648d2f8ca0658720f2c624259d95b3246fd3d0ca1dfed9fdbn/a Heodo
2020-07-30Invoice-XX020-145577.docdoc c99f367eba08850d6a62e56f9957b44656cba498c67bd78b284d5fafa7bff959Virustotal results 45.16% Heodo
2020-07-30Invoice-LFRM4514-061610606.docdoc eed8aa076d2b58e5ced3c900bcc72f67191b09fd9b11fb7be5afd3dc6e79591fVirustotal results 45.90%Heodo
2020-07-30Inv_JBQ2145_12736961.docdoc 1bb56e849596fd788a8c9905d08684f8043a4cc4e72209d9978d78aa4f9f6f22Virustotal results 45.90%Heodo
2020-07-30invoice-TMBZ8086 1363559.docdoc c61b78074e3167d135dac44d98e6a8e2f8e47a25735c3fd3ed83db197892f9b3Virustotal results 45.76%Heodo
2020-07-30Inv_SC0 511581794.docdoc ecf4ab854d4a1e6a7ba13db64e46d84063213d4f414e2306bcf480eeac13ad5dn/a Heodo
2020-07-30Invoice_3896-23456384.docdoc 05c371811b927855f667950de76321ef89b204027af6fb839558bf2a36e0f54fVirustotal results 46.67% Heodo
2020-07-30invoice DHWS3776-8519898.docdoc 1a9250e336b85ed5971242f5611efb67fa4554cc3354854fea2052257bbcec08Virustotal results 45.16%Heodo
2020-07-30Invoice-KDD951-369469669.docdoc 88a8cc5f762749790bd0cf686c79950ba34466fad7753f87b86a7c94a4ea6e8cn/a Heodo
2020-07-30INVOICE-KKWT04{:REGEX:.docdoc df7de8a45da98d24665a7c9c5457068fa727454bed406b47af9803d36b46b7a3n/a Heodo
2020-07-30Invoice-L223_251690.docdoc f6e93dab00f7bdbe24a8c69f83230bf76e626abc42f83f0065cd99b483bdbc06Virustotal results 44.26% Heodo
2020-07-30INVOICE 069_077271591.docdoc 133d58f3c65e1886b5480e277bb845f9d97a7177d1da22625c6a977553b374cbVirustotal results 47.46% Heodo
2020-07-30invoice_2 05528677.docdoc 17af6364aa5e152191cfc5bf34f2365e03da7c8a7040ccd4174f096a601b5e04n/a Heodo
2020-07-30Inv_JRCJ9968{:REGEX:.docdoc 4ff286a06a66c0c8d7c44bbb7c1be4363222a33701847a86402bce22e085889dn/a Heodo
2020-07-30invoice-BS258-403411993.docdoc f109e6ae9c85ddfe69a3f7312184afd244ca7deea6b5f977cd6b9869dbbbe860n/aHeodo
2020-07-30InvXT335 997391162.docdoc 412fb57e72ba6ac81ae2808528e48e74eff28cccc8244172b6755b864b86b3fcVirustotal results 45.90% Heodo
2020-07-30Invoice-X93_46793315.docdoc 6191bfe5590458fb5ce5e4e40221ab174e2c2dfdf0052e984907b982766baaf8Virustotal results 45.90% Heodo
2020-07-30INVOICE-L03_5259796.docdoc 0daff577173686557b6c179acf668ffbbc64cfecd2545ded9102108e81b557e3Virustotal results 44.26% Heodo
2020-07-30Inv 30 90096500.docdoc b881c04d3421fa27957a0aba96dbc228420bb1dc80ed828300fb45848a66447dn/a Heodo
2020-07-30invoice-POBN699_728887.docdoc 809ac32f203aef0349016041a30ca0ecbe4529aeea08b872bf48d62a8efa1b3fVirustotal results 45.00% Heodo
2020-07-30INVOICE M9374-268150000.docdoc 72244c8748d1f0b37e10ef8b0f5be0624ea7ac975aa1214281b4f326e6b2f4b2Virustotal results 45.00% Heodo
2020-07-29Inv_G2 19082960.docdoc 9682cb3fed20b168899452201908168de9b2c2d82530d7227a4474b8b2587eb8Virustotal results 43.55%Heodo
2020-07-29invoice-VFX25_3948068.docdoc 95a7f27115ec0027c6e80a07bfbe83181bf8cb2236bec3e8b13e7c7e59dcd3f4Virustotal results 45.00% Heodo
2020-07-29Inv_YA688-90848758.docdoc bab5c1d78dc95301e33f2feeb7364a84411aed85ded73a18e6c108ee554ffda8n/a Heodo
2020-07-29Inv WF377_46214329.docdoc 53bef3fb74db1a15f20b8b64a324c31ae732c3b70c733bf6c838f3eaa10c03adVirustotal results 43.55% Heodo
2020-07-29Invoice_BKA7-0451165.docdoc 1bf7b884965fe118224269d25022bb33f7a4cd50fee399994fe4c1e7058ade39Virustotal results 35.48% Heodo
2020-07-29Invoice_0-6139149.docdoc 4e5402409bed2c6052e6cfb0cd998f3b88be85d561edff6ee16212a4df9d844aVirustotal results 34.92% Heodo
2020-07-29invoice-E48-45542080.docdoc 75c73c21e1d38ea2b779b97ba6e4e5470f12950c2d71f301f96b36e221783d6dVirustotal results 35.48% Heodo
2020-07-29invoice Q5 5894312.docdoc 657963516302bff1d416e213c4e427f5db195e90000865aa0b37181d45986f13Virustotal results 36.07% Heodo
2020-07-29Inv_649{:REGEX:.docdoc 99a504a30bece5a880e6faf4431f7bd547a33701313aa16a4a822fc0e33ce09bVirustotal results 36.07% Heodo
2020-07-29InvZ3423{:REGEX:.docdoc 2a178649b3301b5f81622dac20cf41286c1a23d07f45e13eb923d9463304b9deVirustotal results 35.48% Heodo
2020-07-29invoice_7105{:REGEX:.docdoc 82485a4bcb44f76bb1ac5bc0d92b640511d2c13d240324394105bdd0f904de9dn/a Heodo
2020-07-29InvoiceGH80{:REGEX:.docdoc b89081c455fac3caa56d78c349d618b89eb1609afa9a3aa07d7ce714942282b0Virustotal results 35.48% Heodo
2020-07-29invoice UQ3758-4241604.docdoc d0392665de57ca6f6171156030c410da29aac3e3c5194645657cfdf4fb591602Virustotal results 32.79% Heodo
2020-07-29invoice_SYT8608_869641831.docdoc 38e80b0ed74809100ac711b189643d3ac91d40765de74775422214356f3aaa49Virustotal results 35.59% Heodo
2020-07-29invoice-8-086529673.docdoc 46b27d851f8ea31388578137b73c02cc59fbcec6f937c4a0689021ea674d3b1cn/a Heodo
2020-07-29Invoice SZP9_384424.docdoc 1b0122c96de8f870e55e55bca4672466ac7364708a15487e05dc22aa712697efVirustotal results 35.48%Heodo
2020-07-29invoice-XF2428{:REGEX:.docdoc 172b5f8d45a91223ad86ad0273f1deb0f59e471bed50dd43f85a95d0dab8aa74Virustotal results 35.48% Heodo
2020-07-29Inv 6_624922.docdoc 7c0b33974954dab51ba2ed1e8c86931aa4daf1ee00820243c4d31eaa0bcd6916n/aHeodo
2020-07-29Inv_W1-540890247.docdoc 934f5d399e3b3914f2c3410ad251ab6817ddf37637d4cd01aa0faabb3f39ab2eVirustotal results 35.00% Heodo
2020-07-29InvSIK25{:REGEX:.docdoc adeada9a8ec5d3994841de45aafd47a1bb4eedb7e8ff2e5ef2b31a7cfa7339cdVirustotal results 33.87%Heodo