URLhaus Database

You are currently viewing the URLhaus database entry for http://bhar.com.br/caurina/public/0925913154809393/umfv60dcv1-00084559/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:439594
URL: http://bhar.com.br/caurina/public/0925913154809393/umfv60dcv1-00084559/
URL Status:Offline
Host: bhar.com.br
Date added:2020-08-24 08:00:36 UTC
Last online:2020-08-24 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-24 08:02:02 UTC to abuse{at}hospedagem[dot]net)
Takedown time:5 hours, 31 minutes Good (down since 2020-08-24 13:33:08 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-24Copy invoice #34921.docdoc 731e691b6611bd3b3f49873097fcd5f5f7ffa5524242cba77e04f0cd1011d106Virustotal results 28.07%Heodo
2020-08-24Inv. 16917.docdoc d300eb73b0c68d60cacf0fd978fa7055031c2a5446a2a048c872267c555253a7Virustotal results 27.59%Heodo
2020-08-24invoice.docdoc ab116a2edf06c0d3dc0522a0135e51680e14dfc43749586f2317a6b900eb2486n/aHeodo
2020-08-24Invoice 9037071.docdoc 842ed79880affdd73198b433d288b8910b1ece0055819a8ae2539026e1c95942Virustotal results 23.73%Heodo
2020-08-24Payment status.docdoc 2591d3970dabcece4f77e55e393833472de26bcccd57cdef92e24645574f9a7en/aHeodo
2020-08-24INV #002619 FOR PO #02205160.docdoc c6d0a1e0b557f0b460b8b8a725ee584a4959918f325574347d9c41f5fac1c608n/a Heodo
2020-08-24Invoice #020.docdoc fd6696cbb7d3db6829c12beee9b69bf75643d53c54bad0fa05e512587fb1f0acn/aHeodo
2020-08-24Payment.docdoc c95c38c762b20a9a783e21bec9d1b93ed8abfbfe11350447b87875396f06abd9n/aHeodo
2020-08-24Inv. 989055531.docdoc e12f39190e328df81e3d72cbcccb8f95deaa5b5bdc3349536739080f997909c1n/a Heodo
2020-08-24INV_1048.docdoc 6e64c4c81b99caebc1fa5d80677dbc33a82d6cd704c75196685808a6a2a8887fVirustotal results 23.73%Heodo
2020-08-24invoice.docdoc d4e925eac638ee8969061552e7c4d2dbd7398a2da5edadbb1725477e5d852277n/aHeodo
2020-08-24INV #063859 FOR PO #00566815838.docdoc 6e4be99b94c2186dba5fd19c6a73c7396cfb050c6bfd1e7b15853913eaa25790n/aHeodo
2020-08-24Inv_4032.docdoc 05cbf67c9128c079775be92b778132e625196c3f4a137913197c9cb8a9ea40a3n/aHeodo
2020-08-24Electronic form.docdoc f2aca1650aa6d407ede3ebb51d393059f5ec04c5b78eaeb2f7543178784ecaccn/aHeodo
2020-08-24Electronic form.docdoc d7898f07078cfd948053fd21f56d73d6e0cb74d9c782e3437537e9bbbc35fef0Virustotal results 25.00%Heodo