URLhaus Database

You are currently viewing the URLhaus database entry for http://aulasdemarketingdigital.com.br/cgi-bin/PSNWKYVA9IFD/6qdka3ymr4w/38q0kb8480801784000lzrvsgt38rdlile/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:425951
URL: http://aulasdemarketingdigital.com.br/cgi-bin/PSNWKYVA9IFD/6qdka3ymr4w/38q0kb8480801784000lzrvsgt38rdlile/
URL Status:Offline
Host: aulasdemarketingdigital.com.br
Date added:2020-08-06 04:41:08 UTC
Last online:2020-08-06 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-06 04:42:02 UTC to abuse{at}hivelocity[dot]net)
Takedown time:10 hours, 1 minutes Good (down since 2020-08-06 14:43:23 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-06SXP_080120_YUF_080620.docdoc 82779b2a27e1994f05cccc0adb4e73da3f8de3544be564108b43e85bba8ec9e3Virustotal results 20.34% Heodo
2020-08-06FILE_PO_08062020EX.docdoc b950762e3781fadcb8bb93a6ffeeae1b4bb4186165d0a76132937672853b2e53Virustotal results 18.33%Heodo
2020-08-06BAL_LC4935300629ID.docdoc 995be23dc0d3ee7c4f282548b4755e02e5ec5a8a8b303aa746005cc1e787261cn/a Heodo
2020-08-06J94APC5JSE.docdoc 760332e0cc50301ec3479486479a525dab98e541c7400d07d8158dbf76135b4cVirustotal results 19.67% Heodo
2020-08-06DOC_89189665.docdoc e6a45f7c1be03604263bb5d5368c322f9085a5d98a7a9c23c073e8a7e8a07b30Virustotal results 18.03% Heodo
2020-08-06Z_12633079.docdoc b05b7a5b7251a3088a61d778b36b9806d3c57425a15891696e1f447a258f08ffVirustotal results 31.15% Heodo
2020-08-06DOC_2IOIP7YSA.docdoc 62c944e88aa9a89db23e2db63e8744e0ec22dd0ccf46478bbcef7c688752b06aVirustotal results 25.00% Heodo
2020-08-06DOC_646513504760089366348016.docdoc adf0c0b95460759ec00397aad0ac4ff47dd132b7b72cd4c13064f1d23c44b2c9Virustotal results 26.23% Heodo
2020-08-06INV_80414026388426429831.docdoc 60217e789634bd22ec28c52188c97a5a5cb8886661663fc79b59b9ffd33d73afVirustotal results 24.59% Heodo
2020-08-06INV_88CBEKTM1XAN2WJY.docdoc df3276da854c3298c4b852a294ff1c0ba031ae27146e7534b3aef464d14af536Virustotal results 26.67% Heodo
2020-08-06C_HN2315655468EO.docdoc a6b2f80dc9d0efedd0259b87e8952c8a918481523929a00cc17382045e73381fVirustotal results 25.42% Heodo