URLhaus Database

You are currently viewing the URLhaus database entry for https://copavflex.com.br/cgi-bin/yszLkFRF/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:431578
URL: https://copavflex.com.br/cgi-bin/yszLkFRF/
URL Status:Offline
Host: copavflex.com.br
Date added:2020-08-13 05:39:05 UTC
Last online:2020-10-07 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: gorimpthon
Abuse complaint sent (?): Yes (2020-08-13 05:40:09 UTC to abuse{at}dimenoc[dot]com)
Takedown time:1 month, 25 days, 12 hours, 58 minutes Bad (down since 2020-10-07 18:38:50 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-15INVOICE 6406 486722642.docdoc 4ac2ea7a4562ab7ea7c23ad733c0e4d0767936120e16b62e0248ce2af1beec1fVirustotal results 41.38%Heodo
2020-08-15INVOICEW01026587329.docdoc f459c6f45a6dcaad9d11f1ad70662c64a3daf6d066282b5b6626b3e281767f29Virustotal results 41.38%Heodo
2020-08-15INVOICE_POYQ0056_206288015.docdoc a586ca4e85501c0a9314f75805246a91c9de018ebd8b6441982d39e8d13f8a64Virustotal results 42.11%Heodo
2020-08-15INVOICE-PNX977-16735055.docdoc 911f2bfa86abc00f8fc2ea9dfbe597349baff6522fff47de22aa0ae77f31ece9Virustotal results 41.38%Heodo
2020-08-15INVOICE-HQ73-344722132.docdoc 3d3319da15a4774593968e93c815aabd17f3ccdd973793e8f372028cf510fbeaVirustotal results 39.66%Heodo
2020-08-15Inv_W31_103601444.docdoc b3b1d9de78d806f5d6869abbcf8eca4d70fc0167946479c7a173ac9729ef799eVirustotal results 40.68%Heodo
2020-08-15INVOICE-SS3075-034448309.docdoc 7685045c26c2b57ea45d561d8f6b9d4746939825e90633a6e3d72480686c1858Virustotal results 42.37%Heodo
2020-08-15Inv-LH405-25545948.docdoc 608640cc09523824170abe5439a993ab6057204ad82c3c3af46ac0ebcf7cf38dVirustotal results 41.38%Heodo
2020-08-15INVOICERF5390064812.docdoc 903b4b0dbf79ba01b1c8a324c887cf2e6e7ddff21d2cb2091ab77cbc6c13b467Virustotal results 40.68%Heodo
2020-08-15InvoiceBT866671434511.docdoc c9692b48a5184a6d4e5b8407d85ead0a011bb4184612d379f44b93f750aafe1dVirustotal results 37.29%Heodo
2020-08-14INVOICE_BSA584_09599603.docdoc c40e069d25e4070b11844edf29b31f19564935eb67a97bd25985d49da529bda7Virustotal results 37.93%Heodo
2020-08-14Inv-07-71136498.docdoc 2ae0fb0ffcfdb106a9a9f0e5ca0e092207da05903f4126376ad7f2e153491abbVirustotal results 37.93%Heodo
2020-08-14Inv OQSR10 619755.docdoc 04b6c9562d1ad237ae5e5e7d7c375cffce6ab12dbe8df8b7cdb11c6150f10077Virustotal results 38.60%Heodo
2020-08-14Inv-F3-604588.docdoc 24d8cbfa1ad06cd8c8ae049129cb7430b25037b74f586f0322eb11845b628b3bVirustotal results 38.98%Heodo
2020-08-14Invoice5393331361.docdoc 78ffd6c8749436f656b7f77eb1bf11edaf3ee4c2411dce4a22b8bbd6cb1ed515Virustotal results 37.29%Heodo
2020-08-14INVOICE-NTNM668-226273837.docdoc ecad5745af706bbb7ea9c6ec69d389e2e6c4899ca17cb7fdf29ac1230375503cVirustotal results 37.29%Heodo
2020-08-14Inv59098842.docdoc 95cc5ce9259454f349e823d4c1e4c546a303dacfd17dd01c60af5f9dfb171cb6Virustotal results 36.21%Heodo
2020-08-14InvoiceMPTE33293170725.docdoc 426e28c9564a4fa65f54f69e35bc2c5ff53a951f924883a9dcb491a5278446f9Virustotal results 37.29%Heodo
2020-08-14invoice_0799_23600582.docdoc 6b5f7ad9df134c6a4892ee11c2b9d5942174a02fa5e8f5f1b6e4e6c40c3583f6Virustotal results 38.33%Heodo
2020-08-14invoice-0-6151509.docdoc c55efd0311de10fc006e138fc287f244e1b942418fca25593dcc9a1f8f5101acVirustotal results 30.51%Heodo
2020-08-14Inv-GWJL9-87352414.docdoc 5dff91cf6d41a1afd397c3c21a5b5a401acbb9abf2dc6e09df6f45b8f8dd9af2Virustotal results 31.67%Heodo
2020-08-14Inv-2-863908.docdoc 4b13402181491e81721d3129182c033f1ce4f14f4956c41426c51b2c92488d65Virustotal results 30.51%Heodo
2020-08-14Inv-CTKR15-193487598.docdoc 3d8bffd696ef1c562d1869b2cb79d928c76f603ce7edcacf32e837e099c2664cVirustotal results 25.86%Heodo
2020-08-14Inv_Y81_453653308.docdoc 3d724c912fe861eb76717b53d4569224781d214fcb1d54b54a4f99d4908e0394Virustotal results 27.87%Heodo
2020-08-14INVOICE_Y830_97834615.docdoc 9d6676d7926e7555e55f55924ee0a8082d62b5b813ac98704090a5a23e7a1775Virustotal results 25.42%Heodo
2020-08-14invoice-QXI4-6169735.docdoc 946ce7bab4b96c0fd40f3bb134b7d616880bc04dc8eacdf9d4cf10f4c0287cb5Virustotal results 26.23%Heodo
2020-08-14Invoice-DBP762-9840167.docdoc 6969c9659df92d53fbfae853c8c208cb0e09fc6acf7dce23773cb66cd060294dVirustotal results 26.67%Heodo
2020-08-14Inv-242-173616487.docdoc 287b1c2cdc4b225da919062620fa3a273db58864387add5e91f642613c416075Virustotal results 25.00%Heodo
2020-08-14INVOICE-JDN9486-153193386.docdoc f29b2352c27bd3d9fca98d1f168efbbed851c986473a4281bdebadee731653f7Virustotal results 26.23%Heodo
2020-08-14Inv-VP1146-69631478.docdoc 1f0758efb84f4b72c21377e581dab62287027cfd5b6a713fd6cfccbf0f153577Virustotal results 26.23%Heodo
2020-08-14Invoice_JH1463_649991.docdoc a788b01dea1ef2e81be3d766f417f804889378fb992371e5863c20d39aac772bVirustotal results 23.33%Heodo
2020-08-14INVOICE V032 02105594.docdoc 0aeb7a7ccd5f0a664f6955eaf500b29020c82c40acd8b9d14cff49c6a9377f72Virustotal results 25.00%Heodo
2020-08-14invoice 4 910081.docdoc 4af3cc1ac4ee4610fa7671fdc8b02ad17ad4e71433250d2ab04291fc1f5e657cVirustotal results 24.56%Heodo
2020-08-14invoice-QKKW32-4335201.docdoc 9767bd56721afd6905bab6c3a1a8790999605c8e5b91b2dfded3a0849c7e5d60Virustotal results 23.33%Heodo
2020-08-14invoice394862524893.docdoc f841c145c39f74c12260a67c686e4dde761614e633f204a3e68f47750f2e6d1fVirustotal results 23.33%Heodo
2020-08-14INVOICE_M80_785153.docdoc aa28e58569bb47d9128f73447dc7d28977c761f60f98ba329abaf02d7ead4985Virustotal results 23.73%Heodo
2020-08-14INVOICE-60-80598976.docdoc 0c8f2829aa051a5e6c46de5538877492af65802d40d49435dccb05882ec52308Virustotal results 40.00%Heodo
2020-08-14invoiceS78960395492.docdoc e64e43f9549144dcb8e091b5d2140499702e699e14f019192575a50ce08d323eVirustotal results 41.07%Heodo
2020-08-14invoice-BU62-9948504.docdoc fb17807621969c33d345882ad5ae95cd5294c32509e13a6fe8ce1d317a5c3f4dVirustotal results 38.60% Heodo
2020-08-14Invoice-3459-702142891.docdoc 865aa27f909822b77734136c2ce238a258cbf8a6041b588f5fb75c284fab5d26Virustotal results 40.68%Heodo
2020-08-14Inv-BD5-249545.docdoc c32ebf07a4f2324cc33cf6e7c975c375621c519fa654fc27303c9a812293fd7fVirustotal results 39.66%Heodo
2020-08-14invoiceZVEU48108276100.docdoc 382eeb05e0b37509916697e88d5f58e00cfd17db07cf9b27240fd84aa4bcd26eVirustotal results 40.00%Heodo
2020-08-14Invoice Q8292 68643462.docdoc d77766273a903661def8286676499fd3cf8f2a337cd8fa867e5788e5509db0e6Virustotal results 40.00%Heodo
2020-08-14invoice JUS67 1411627.docdoc 8b725e5a090dcb30815c5df978e72af9a04372b9fda6729678004e9bdd617ce6Virustotal results 38.33%Heodo
2020-08-14INVOICENFNK802133596.docdoc 2da551517d3d24f3485bb7c1edd4dc79031582d5cc3f4066169ecdbe26b4df18Virustotal results 36.67%Heodo
2020-08-14Inv_SI124_555178297.docdoc ad1c63f07f872f3b37453d29dce7654dc1b79e4f3e875dd8090977c30093b6f6Virustotal results 37.93%Heodo
2020-08-14Inv-NF28-1621147.docdoc 60f8488fdb7df1654b540cffa5a6b15006c90ab03e4cfbc618d7594c813c252dVirustotal results 36.67%Heodo
2020-08-14invoice O935 583527.docdoc 2879a9d705300779c0269f3a6847fb725a3564c7ae27f44226fe17f422474ca3Virustotal results 36.67%Heodo
2020-08-14INVOICEGY3312821192.docdoc e8516c23d1aec8faadd52ae68fd240339940d05f4a1db7c56afdbec1eb5de0f6Virustotal results 37.70%Heodo
2020-08-13Inv-AUD609-39771026.docdoc 3c2103ec1e6af0ce039524d58d70a4ced5e2845549def894d03f836978afa09dVirustotal results 38.98%Heodo
2020-08-13Inv 4337 792098.docdoc 2741a0a45d8bb8b7e1fa15f9f05492ec1235fcf882792971e1668640ae40fbb9Virustotal results 36.67%Heodo
2020-08-13Inv-KNH11-183328.docdoc 4121659e82eadcc9063dbad5e46d42ef2d1b91e429f0c0e38fb203a6a0fec99bVirustotal results 33.90%Heodo
2020-08-13INVOICENC499580361546.docdoc 345ad176e1abe5bab4a7665cb4b35fda3bac70a3cb1207f3b663d77550e197f6Virustotal results 35.59%Heodo
2020-08-13Invoice-WAS3533-0143816.docdoc 0dd2a96118f23f2fec5549ff2bbfbda83f954a2522474688ae8db5a35a84942dVirustotal results 35.00%Heodo
2020-08-13Invoice-ZZSY924-860888.docdoc 5afd28f4c27929a5271720ade77b26422b7596600473f76d9aca778869203bacVirustotal results 36.21%Heodo
2020-08-13Inv-OMB5071-76246736.docdoc 5068ac1fc3ea1af3eb637bed169df3a72f14ab7db56ff2996f718fbe8c05642eVirustotal results 36.67%Heodo
2020-08-13Invoice_WX656_404122.docdoc 294443b3b8e68154544b8f501310b598b2925bc108c42f5a30bccfa9598b6782Virustotal results 35.00%Heodo
2020-08-13Invoice-PQ8-10951526.docdoc bae089e182eb3266f7febf0ef17ca827f4c0c1712466e787e3c7d187e433645dVirustotal results 35.00%Heodo
2020-08-13invoice25020714413.docdoc 7f84ffec8d67c90cf874b1c63419a909e57b6e610d050a800bccfef7de037607Virustotal results 37.29%Heodo
2020-08-13Inv-E0379-313274058.docdoc b133317c26c5f7804469fdb2d3cfe7bff2c09e8009f94b7e2e89120b95b6a996Virustotal results 32.20%Heodo
2020-08-13Invoice O7 0612685.docdoc 82b0468b8277859b0d4bff3af6eff0d446bbba4daa11cb4d96b62160bb22e3cfVirustotal results 33.33%Heodo
2020-08-13Invoice-HY18-3614084.docdoc 196a89c54cda70af31877740ead0a738ead3533d3ef89e87e31b193044fb42f7Virustotal results 31.67%Heodo
2020-08-13Inv-VBKB223-473000.docdoc 7abb5b30def6039173391b3e77f2a498a9ac16f3e7fa6312e9991d2d8c4e39e4Virustotal results 30.65%Heodo
2020-08-13InvM24953672928.docdoc f01b78ca95efc7717c3d0f03f4d904cbbb4d3c5dc0ce87e33fd19acde30cf5d5Virustotal results 28.33%Heodo
2020-08-13INVOICE-2372-310637448.docdoc 002e4e23a241c1fa930bf374dd4e1c871a0f19a6abb1fe7e34e0a7dd479a0744Virustotal results 28.33%Heodo
2020-08-13invoice F906 6102099.docdoc 43911a79aeb74fd3a33a725d3ccbb05e5e86c849166f578f3404711fa0bf5b42n/aHeodo
2020-08-13INVOICE-J48-026905320.docdoc 52c981dcee0a9c0bc80ec192b453e8af6b01ced6cb3187645687ad0fd1b13221Virustotal results 27.87%Heodo
2020-08-13INVOICEMX6853250528.docdoc 59c83ecca1095f3f5a073bdc09552cb7ed9b230dfdc93dee59f18e2a38e849eaVirustotal results 28.33%Heodo
2020-08-13Inv-GBJ78-7268710.docdoc b728f085e0e3133f7083a77948330f193955e186b2e479815f2657baf3802c57n/aHeodo
2020-08-13invoice M8 48000892.docdoc 3a957d2e54e658d116c346dcaf0dab5ecaec5e60bf7125b32087746f27cbe35fVirustotal results 26.67%Heodo
2020-08-13invoice-M3164-104578061.docdoc d2584fd2e544991631e3c8f07453890b81a8e23495198724c174919c97d71467Virustotal results 25.00%Heodo
2020-08-13INVOICEALDN13096960.docdoc b58536809fa841324f6ebd181e66c4e897843b4689a45987ba00691b7c99f35cVirustotal results 25.00%Heodo
2020-08-13invoice193804475.docdoc 906423a8a219d85fee1c58feac18a6bc8689504a672ec96d5df2e61079f60672Virustotal results 25.42%Heodo
2020-08-13Invoice HU6 076806.docdoc c6448d3ae149d4be02cc47863725d1c6422455e424cc378cc755ada5109d76c7Virustotal results 26.67%Heodo
2020-08-13Inv_XFCN2455_37644264.docdoc 6470a38736f61fd9858f811fe8ec7e2ea6d075e3d4bacc287ed9b0a746ddb5dcn/aHeodo
2020-08-13Inv-ZTDI977-475374.docdoc 147ff91d2f978f8abd623f6a25e0599903cb53c9a890255e3fcede1cb0fbc8daVirustotal results 25.42%Heodo
2020-08-13Inv-E9-25883637.docdoc d4f1ca6b7e264ab843f2bf183ff3a4bc306e513e7b5edc1cd49154e8f0e88499Virustotal results 26.67%Heodo
2020-08-13Inv-51-289020384.docdoc 7b6f86d6898258e9a8a5a572e055f9efc0d045b78fc6eb88c0d2f61f064629f2Virustotal results 25.00%Heodo
2020-08-13INVOICEDJ936693834463.docdoc 8313a416feea74f1e4555d53dbb6e2c4e7a831c854f7fa38ea8b3815b3bd124aVirustotal results 24.56%Heodo
2020-08-13invoice_972_7682881.docdoc 701f6714acc1e2c42435c5ca1c3c5919ec11dcaaebe5791bbea60eab5c8327c5Virustotal results 54.24%Heodo
2020-08-13Inv-EV76-093343.docdoc 4131bc2ee76e075c633891d551f3b66e29b9c220f60ae1a29b8eb1c35cdfec95Virustotal results 52.54%Heodo