URLhaus Database

You are currently viewing the URLhaus database entry for http://bswinformatica.com.br/EmailMKT/private_array/close_CxUlww_PuqO4dNtDETT4q/d9in9vwcj25lrkk_127134t79/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:434448
URL: http://bswinformatica.com.br/EmailMKT/private_array/close_CxUlww_PuqO4dNtDETT4q/d9in9vwcj25lrkk_127134t79/
URL Status:Offline
Host: bswinformatica.com.br
Date added:2020-08-17 07:49:44 UTC
Last online:2020-08-17 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-17 07:50:06 UTC to abuse{at}hospedagem[dot]net)
Takedown time:7 hours, 21 minutes Good (down since 2020-08-17 15:11:37 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-17doc_20200817_FN6587.docdoc 80033762f63c113feb8a08a6c06eb29c8d53d857d30f3a85d05cf47c021afd08Virustotal results 22.41%Heodo
2020-08-17rep_2020_08_17_6601.docdoc 3075e5f4103e8dd642f315d74bf45b8683c6634fd3bf5958bc5225f745dba25cn/aHeodo
2020-08-17dat 20200817 802879.docdoc 2c2d3c4b97887da9753012fdf167bb4da83ab8ced7eca83281d632ee9059fa73n/aHeodo
2020-08-17inf 67152.docdoc 8992dac490fc80d452da1dd38cd366857076c9a05f27b79ccd7ef8333dc0ff6en/a Heodo
2020-08-17doc 5577182.docdoc 91e99f29b48c23c1b75790679c34323d6b6be790bb261994b0745926fdb717ddn/aHeodo
2020-08-17Dat_20200817_UF9650.docdoc a607a916b0fda923d35498318f27f094af3016491a6e48c9ce308a699c8f5bb1Virustotal results 22.03%Heodo
2020-08-17LIST_20200817_198.docdoc fc8f143b76129a21cbaf106213b9da31fe950484924e66818efd606982dbacb0n/aHeodo
2020-08-17file_20200817_NFJ864.docdoc 6f099dcd03406b99e18af017ccbb95779cd65489d087b7e9337a07d78ef41f0cn/aHeodo
2020-08-17Inf.docdoc c8e8a7a4ce0e9882cd95a7b76547db579164b8ef3164e4aa7638e08ca5c1d0e1Virustotal results 21.67%Heodo
2020-08-17REP 20200817 P89949.docdoc 60ebc1de65395aa85a5f018973e7f34782aa245c89ec1a3d6c50f55e5a365322n/aHeodo
2020-08-17file-2020_08_17-06012.docdoc 7d9f979c11d2224fb76f3009fea7b637d76f183dfbdd909a15b3427a83efe9c2n/aHeodo
2020-08-17mes 2020_08_17 FSY70787.docdoc 882b6b3ff2f69788723b61fc35188ea985db261d865313be8ec7686dd6015ce0n/a Heodo
2020-08-17Dat CZ713907.docdoc b34a6069fa207a279967cf2149774511426d27bf015d70a96017555122a91c29n/aHeodo
2020-08-17INF-2020_08_17-875227.docdoc d2818fa4d176c528cdf619a3dea68bcac74b6fb18449037433c539b5e3c0173cn/aHeodo
2020-08-17dat 2020_08_17 867190.docdoc d143e685935aff218987f60cf1a5d28ef95e7aa4bb027f64a55c13c138f72360n/aHeodo
2020-08-17List.docdoc 5fcf6e27a0a2ac6003e0f288ef58f2da17ce85e12c6b213be91c055d373fe806n/aHeodo
2020-08-17list-2020_08_17-KNK5791.docdoc e13025c765b0b653bf72b5126582719128f3b80b9c4dc16b08a0a32af2a35c47n/aHeodo
2020-08-17LIST-20200817.docdoc 5b2ff1a06c5b0601a1b19ba072b26d1947f33d49663aff6ac8744a2b5e2538f3n/aHeodo
2020-08-17FILE-20200817-IGM61141.docdoc 4d1ffbaeeb94a3adb75f9922984da87853510fb64295d0f0616c95384a911ca8n/aHeodo
2020-08-17Rep 2020_08_17 ES77901.docdoc 7dc1a7c46cab321822a0bec82334855f568c89476857f6a1c30f31a0d057c70bn/aHeodo