URLhaus Database

You are currently viewing the URLhaus database entry for https://www.agenciaeureka.com.br/assinaturas/protected_module/close_b8aldd_ZV13SuA8eFIRCt/ctkg9dgi4_z19xvz/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:434456
URL: https://www.agenciaeureka.com.br/assinaturas/protected_module/close_b8aldd_ZV13SuA8eFIRCt/ctkg9dgi4_z19xvz/
URL Status:Offline
Host: www.agenciaeureka.com.br
Date added:2020-08-17 08:03:11 UTC
Last online:2020-08-17 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-17 08:04:04 UTC to abuse{at}hospedagem[dot]net)
Takedown time:7 hours, 7 minutes Good (down since 2020-08-17 15:11:40 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-17FILE_20200817.docdoc 5488ced86c0349f218ebe8ee794bcca48f54e48b1be0335d03602d5a8b99a90an/aHeodo
2020-08-17List IZO862.docdoc 80033762f63c113feb8a08a6c06eb29c8d53d857d30f3a85d05cf47c021afd08Virustotal results 22.41%Heodo
2020-08-17file-2020_08_17-414765.docdoc cbeafc0043dce992a90d093dab088cb87e5f9ef7406c77fd1c3ecc9f78570c65Virustotal results 23.33%Heodo
2020-08-17FILE 20200817 O54544.docdoc 2c2d3c4b97887da9753012fdf167bb4da83ab8ced7eca83281d632ee9059fa73n/aHeodo
2020-08-17Dat 20200817 0574687.docdoc 8992dac490fc80d452da1dd38cd366857076c9a05f27b79ccd7ef8333dc0ff6en/a Heodo
2020-08-17LIST 20200817 NM68179.docdoc 91e99f29b48c23c1b75790679c34323d6b6be790bb261994b0745926fdb717ddn/aHeodo
2020-08-17Arc-2020_08_17-1764681.docdoc 2116d668fe951d0c6416856abaecd566f9ee3e52d4a9cf85fadce76aa234aed4n/aHeodo
2020-08-17REP 749463.docdoc e613daf0f98ca6c2902ea517ef5bb784b0ed47586fbc7c7bd97dbbb8d93abc1fn/aHeodo
2020-08-17Rep 20200817 5962634.docdoc 6f099dcd03406b99e18af017ccbb95779cd65489d087b7e9337a07d78ef41f0cn/aHeodo
2020-08-17DAT_J37248.docdoc c8e8a7a4ce0e9882cd95a7b76547db579164b8ef3164e4aa7638e08ca5c1d0e1Virustotal results 21.67%Heodo
2020-08-17LIST 2020_08_17.docdoc 60ebc1de65395aa85a5f018973e7f34782aa245c89ec1a3d6c50f55e5a365322n/aHeodo
2020-08-17Inf_83885.docdoc 7d9f979c11d2224fb76f3009fea7b637d76f183dfbdd909a15b3427a83efe9c2n/aHeodo
2020-08-17dat.docdoc 882b6b3ff2f69788723b61fc35188ea985db261d865313be8ec7686dd6015ce0n/a Heodo
2020-08-17dat_20200817_Y316.docdoc b34a6069fa207a279967cf2149774511426d27bf015d70a96017555122a91c29Virustotal results 20.34%Heodo
2020-08-17Doc_2020_08_17_64576.docdoc d2818fa4d176c528cdf619a3dea68bcac74b6fb18449037433c539b5e3c0173cn/aHeodo
2020-08-17ARC_2020_08_17_4734.docdoc d143e685935aff218987f60cf1a5d28ef95e7aa4bb027f64a55c13c138f72360n/aHeodo
2020-08-17REP_2020_08_17_XU9087.docdoc 5fcf6e27a0a2ac6003e0f288ef58f2da17ce85e12c6b213be91c055d373fe806n/aHeodo
2020-08-17inf-3407445.docdoc e13025c765b0b653bf72b5126582719128f3b80b9c4dc16b08a0a32af2a35c47n/aHeodo
2020-08-17List-2020_08_17-9478.docdoc 5b2ff1a06c5b0601a1b19ba072b26d1947f33d49663aff6ac8744a2b5e2538f3n/aHeodo
2020-08-17mes 2020_08_17 MF63234.docdoc b8fa920d5e8902180bd0478ea2b1e70de0ea05c4d5058318173f6775c96e18fan/aHeodo