URLhaus Database

You are currently viewing the URLhaus database entry for http://www.forjatoledo.com/qewzo/report/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:431905
URL: http://www.forjatoledo.com/qewzo/report/
URL Status:Offline
Host: www.forjatoledo.com
Date added:2020-08-13 12:48:03 UTC
Last online:2020-08-13 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-13 12:50:03 UTC to abuse{at}interdominios[dot]com)
Takedown time:4 hours, 59 minutes Good (down since 2020-08-13 17:49:30 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-13INV_PLD_080120_XPQ_081320.docdoc f959a3ec8067a6967f047b19554210234638a6ac9b0bac85e006979f09c33d11n/aHeodo
2020-08-13INV_0ICXYJ1AM.docdoc 83a588405ba4fa2d574428210c47f3cb4a9683985d14a8b6746bd13d4651fbf3n/aHeodo
2020-08-13REP_90372496.docdoc d1c68fb4f1aa89ab45a452fd903591df9228fee86540db11d942df61adae28b5n/aHeodo
2020-08-1384411912.docdoc 5f13b204f1454bc08133eb8207a0bbd3faa357d80495f1136ff43768e69914e5n/aHeodo
2020-08-13DOC_00951511.docdoc 1d76d6caaf25aedb9a6b4a416eda1a0f237ef09b5100d844a54ed3290242e251n/aHeodo
2020-08-13FILE_PO_08132020EX.docdoc 3d9b7dd248282da644efce8e11e6933424e766ba770a6c0eb2f817b312367a1en/aHeodo
2020-08-13DOC_HGY_080120_QXH_081320.docdoc 8a0a74b31fb30ce1a4adbaa3945c4186c7d467268e76b9ca802905b7cf5fa54eVirustotal results 29.51%Heodo
2020-08-13FILE_PO_08132020EX.docdoc 73b34aebc917f7437b48467815608b544f747919a4a7e78d4324a99efb030028n/aHeodo
2020-08-13BAL_FNW2K7K7K.docdoc b51738d4d37c472d3b1b69c1f7cab2d120fd9f2e53a524e772a263e65a892c94Virustotal results 28.81%Heodo
2020-08-13407402361489263953517725.docdoc bd7871f1fceddc02727f3be310e4507aa75ac650a9319a03989d0a1c18bc74cdn/aHeodo
2020-08-13DOC_61136419401488449.docdoc 44a4e9297c1d0191631e49532aa755b5a7928836c63b7a9f37deb77293cf2ec7Virustotal results 28.33%Heodo
2020-08-13927708531344333823411.docdoc ae0c7dfa89cf0301b64ef4f6b364a1e426c79c80a9d0943916c93f3315ebc907n/aHeodo
2020-08-13BAL_ZW5238458216QE.docdoc 79b609ddf074406de181d656544923255389ac44a068ddaeb858e6546d2787f4Virustotal results 25.86%Heodo