URLhaus Database

You are currently viewing the URLhaus database entry for https://copavflex.com.br/cgi-bin/invoice/s3vb8lm/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:423219
URL: https://copavflex.com.br/cgi-bin/invoice/s3vb8lm/
URL Status:flame Online
Host: copavflex.com.br
Date added:2020-08-01 07:02:08 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL :Abused domain (malware) link
SURBL :Blacklisted
Quad9 :Blocked
AdGuard :Blocked link
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-01 07:04:03 UTC to abuse{at}dimenoc[dot]com)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2020-08-01T_ER4NBLBCWX.docdoc 1fa874c848453f913da841c6c80dea2eadb7cceb410a5783c7db5c1b846f5de0Virustotal results 46.67%Heodo
2020-08-01REP_AHS_080120_SPE_080120.docdoc 6774b489f9aa36196b42dcfcde8df0f3918361dd1e3d3f2f50830e8091db1c10Virustotal results 46.67%Heodo
2020-08-01F_UOC_080120_OBJ_080120.docdoc 42b4ad16892a295e358658713d82fb252e59d2bfd5bdf9fd66d5407a27bff8caVirustotal results 54.84%Heodo
2020-08-01INV_PO_08012020EX.docdoc 8c09e1f0ccb053c001ef314dec9c76f655208965c581a2d4a033c5b85aba3b38Virustotal results 55.74%Heodo
2020-08-01REP_QVE_080120_NOX_080120.docdoc 7059512e96cd9f1a086374d1fc1b970d1e416007c61252153ae7482396357e00Virustotal results 45.90%Heodo
2020-08-017U4LG15H.docdoc 4bd4448e06404510ab9d35c4f13fca11bfb149a3063e4778493a5fbe17fbd561Virustotal results 46.67%Heodo
2020-08-01DOC_PO_08012020EX.docdoc d401fa6713cdefb108ccd10a91818362434758b2823cee224bd4eba85bc4b164Virustotal results 54.84%Heodo
2020-08-01INV_EZA_080120_GLS_080120.docdoc 6f043b03996404ae97104ef7baa132eccad7e1f0716fab5798f50d326d64bca9Virustotal results 55.93%Heodo
2020-08-01XW6431480526TC.docdoc cfde10d809197623341c39c7e1abd15e29da796440d04c7c71e8f764ed279e71Virustotal results 47.54%Heodo
2020-08-012309158808136216570555551.docdoc 03927a17790e5cf31ed95337d05447b4cef122a2d12e64df80ed08714214c609Virustotal results 46.77%Heodo
2020-08-01INV_W6HY27SFTSSV6.docdoc 5c634a177026d64aa5f3f93ff9ed32ee2a33b392161c1f14173cc047ad0db53eVirustotal results 52.54%Heodo
2020-08-01PO_08012020EX.docdoc 4b3cf06d3d8f13dc208ed3574c87aa8bd7dd6be1059519f03bf4f94d415413fbVirustotal results 49.18%Heodo
2020-08-01FILE_PO_08012020EX.docdoc 74871748f92973cb0c0d156ab48046d061b5071b194fa60276146079666a2536Virustotal results 49.18%Heodo
2020-08-01INV_73569457.docdoc 16f3e059c88e9fdf1260789cc78ed53fd0901dffb0cf9400b63ee21ab90ea1aaVirustotal results 51.61%Heodo
2020-08-01H_PD7555279968MA.docdoc 5a2264b5329055980b5b31852aa9ee101f846027b9263c5b1783e51a7f38b6e8Virustotal results 48.33%Heodo
2020-08-01N_YO2558402707VG.docdoc 48ec3cb0b3408e9a5eee789c2be3831f7f404716cd35363007175398554f0219Virustotal results 51.67%Heodo
2020-08-01REP_YQ8701178764JK.docdoc 6e57ee227a3844d09aa4ed4a64cf69ec819367f00f8df9bdac7f6e09ffc551aaVirustotal results 52.46%Heodo
2020-08-01YC_N74658MFVB.docdoc d3811967649cb2540eaa540cb627ace1afbfd14e0321a81f08ebc6b23d4cb7d3Virustotal results 51.67%Heodo
2020-08-01ZF5969529787AY.docdoc 94740399d4f82347d284463c29d6bd05a288b65a122efd5f8d8b379ab5979a80Virustotal results 47.54%Heodo
2020-08-01KB3147621188IG.docdoc 7b6a76a3a932265f067c2751c8bd6647327d0ec5bd95563dc3dc38d797a1469eVirustotal results 54.10%Heodo
2020-08-01PO_08012020EX.docdoc f5671015ad6746cf334bbde3f8310dc831719a74e5432d619f8843e20be44dd0Virustotal results 48.15%Heodo