URLhaus Database

You are currently viewing the URLhaus database entry for http://stechman.com.br/afm/balance/l6agjrcpl/3ff8d39861649929ilkm2vbtdbndj3j6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:440851
URL: http://stechman.com.br/afm/balance/l6agjrcpl/3ff8d39861649929ilkm2vbtdbndj3j6/
URL Status:Offline
Host: stechman.com.br
Date added:2020-08-25 09:17:08 UTC
Last online:2020-08-25 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-25 09:18:02 UTC to abuse{at}hospedagem[dot]net)
Takedown time:4 hours, 6 minutes Good (down since 2020-08-25 13:24:18 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-25OJS_080120_IJM_082520.docdoc 10216de03866c86a163d074495bfd71636ac299c24a2c6f0d482a733a5582c62Virustotal results 29.31%Heodo
2020-08-25REP_21388694.docdoc 3bb37228192ee97cf3a51b8efe7d61cf4f5e82076a62e295a9f15f515746d7cbn/a Heodo
2020-08-25TVRQEN6HK5K716.docdoc 67a58e87a8dd00886a21fd38eb8403c023f21a4594424b6a9067b970d59b6c7an/aHeodo
2020-08-25INV_640432810317710208357821.docdoc f21faca8972bc209d15bcc3c2e83128492fde7fc7bc93f369ddccf2618f28d05Virustotal results 29.31% Heodo
2020-08-25PO_08252020EX.docdoc 917c58bc1bb89ba90f3ac83a87a5ad3370a69bf351acdf7e5b9ccf53d25d3d84Virustotal results 29.31%Heodo
2020-08-259753129599973.docdoc dcca77f229693696113c5db3791c7b65c9f510b62246bef1d9d96b5a9fe5a3e5Virustotal results 30.00%Heodo
2020-08-2552679114.docdoc 17855abd6befff0c7e63029aa12bcff251c1d1c70bb167c483b14fe48e858918n/aHeodo
2020-08-25F_CIU_080120_CKH_082520.docdoc be9508b06ac529e53e81f008999cc6ddfc0402beb7506e6094c0d8bdacfafb55n/a Heodo
2020-08-25REP_PO_08252020EX.docdoc 9b8ac0009923f7349f148f64d519bcf46bcd84fb706fe390b706a9313ee631afn/a Heodo
2020-08-25YQ3326167318WK.docdoc a625be66768def572dadf087688b50491783b22f833a303d619dd07b9a1a5735n/a Heodo
2020-08-25HJK_080120_WUQ_082520.docdoc 9653845487d1b3c5f4a30493f9a0df6df6f9f50677748425b87c6a9480793d45Virustotal results 29.31% Heodo
2020-08-25INV_811531224.docdoc b5490ea63aee70823ef3fafe7f92029d02c053b8021e4cf76d37fbb602f9021cVirustotal results 29.31% Heodo
2020-08-251790010021.docdoc 1f3aaac8ac1e12ceb101b036c66ed91eeb1805dec577196106207a21575d1fabn/a Heodo