URLhaus Database

You are currently viewing the URLhaus database entry for http://talau.com.br/css/public/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:426214
URL: http://talau.com.br/css/public/
URL Status:Offline
Host: talau.com.br
Date added:2020-08-06 10:58:06 UTC
Last online:2020-08-06 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-06 11:00:03 UTC to abuse[dot]support{at}host4geeks[dot]com)
Takedown time:12 hours, 0 minutes Good (down since 2020-08-06 23:00:37 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-06INV_420827356580866374866.docdoc 2632f54ff03da6748cd94b4dfa7c750dcf28976dc3c60983e594c50cfd49496fn/a Heodo
2020-08-06TNX_XHB_080120_PLN_080620.docdoc 61ad770d6b0607489077c23465448db606602ff3fc0222077396e71692eda84aVirustotal results 26.23% Heodo
2020-08-06DOC_24639194.docdoc 3c74dbf95327daeaf341a8b8b7eefbe17199eb34186f75217d342c3b384a1ce5n/a Heodo
2020-08-06DB58XNY6ODZH.docdoc 327c6bfb13ad517728ad6518c92fb0bf638b79474445be494e4e8e6da2f772a6n/a Heodo
2020-08-06KLZ_GQT_080120_CMB_080620.docdoc 34107c13ae1b93bc3562e7d519d94361508fe399f2d5ed86934b257fc4c7d107n/a Heodo
2020-08-06REP_FLX_080120_DOE_080620.docdoc cb401ff12d318c983879756489ced66cb74d595962df9f6ab32b2046326617cfVirustotal results 21.67% Heodo
2020-08-06GQ_AOW_080120_OYP_080620.docdoc 5475cfc64e19f8a7195be93c65b59fb767c78681a8776edaf2914d43242326cen/a Heodo
2020-08-06ZB1963067892QQ.docdoc bd4d8ec335ea6b566e07d533c4212ec2723c617c3b524ec37fb756a2aef87248Virustotal results 22.95% Heodo
2020-08-06INV_26473080.docdoc eadc186cfe8e3c19ea300adfa281efef73f5792352852efab0420e0389b49bb5Virustotal results 22.95% Heodo
2020-08-06REP_DC8165269595II.docdoc a9eb8e8a86142b393557bd5e515c620e32d6dd4f988cd664863adfb847e17239Virustotal results 22.95% Heodo
2020-08-0669144915.docdoc c5944d19845ba43fabec436bfd6eb76d0ace4bd9dca1765e27046ff9c9025062n/a Heodo
2020-08-06DOC_99121401.docdoc 896711811c4082a44e4af378dd0871e2db8cc9688844acc7d85af7aae9b6970dn/a Heodo
2020-08-06VEJ_080120_TGD_080620.docdoc 26651eaf693fde8e3e3d383d1107aa741512f4cecb7b8d9b1e61172c02353ae2n/a Heodo
2020-08-06INV_6GS0P15UC1NVSGC.docdoc 98826e022ea7e43c4ca336a98b7dfb45866836324f79e8e7af3eb4af39686c22n/a Heodo
2020-08-06INV_S2MVT2LSY.docdoc 86ce98ee6a09dd1c7c6624e70decfc961385aa91b973c4f19f3f9dbb6091ec24n/a Heodo
2020-08-06BAL_2364548724485967.docdoc 082b3011f9082a24a8638f4c1e707ff092cc1461362041ae4e3e621be475b1b5Virustotal results 21.31% Heodo
2020-08-06FILE_PO_08062020EX.docdoc dcf13e777cc81ba6dbf2ebaf5747e5de599a4de2aefffe544b7f52c9e0188827Virustotal results 21.31% Heodo
2020-08-06FILE_PO_08062020EX.docdoc b554adbe36cba4bab4728dd27cbe944e169443554e2a0cb67e1410fefac08049n/a Heodo
2020-08-06PO_08062020EX.docdoc 3aea71cb3bbb127254bc652cdf318ad814683e16c4c9f8fb7c6e84d42d32553cVirustotal results 20.00% Heodo
2020-08-06REP_VWV_080120_CZK_080620.docdoc fa7a2f035cfa8ad6cee98c7429474f64f136f99a81f8f1047463efbedd4e7094Virustotal results 19.67% Heodo
2020-08-06REP_IW2448706696XZ.docdoc fc55cdec1587494b3683916ba5c6b6679011e4cdb28f218c292abe9e23efc1b7n/aHeodo
2020-08-06PO_08062020EX.docdoc 751d0f8d16eae467cda2596b400afebcba628d7a0dd6cb876b1a2963acd5c8a6Virustotal results 19.35% Heodo
2020-08-06INV_PO_08062020EX.docdoc ff5b4361fcff78a543ca99f6d4068b7d951831cea782500a3ffe191c04178c64Virustotal results 19.67% Heodo