URLhaus Database

You are currently viewing the URLhaus database entry for http://www.brunobastos.com.br/files/browse/MDJZK/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:446232
URL: http://www.brunobastos.com.br/files/browse/MDJZK/
URL Status:Offline
Host: www.brunobastos.com.br
Date added:2020-08-28 20:12:17 UTC
Last online:2020-08-29 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-28 20:14:02 UTC to abuse{at}locaweb[dot]com[dot]br)
Takedown time:11 hours, 12 minutes Good (down since 2020-08-29 07:26:48 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-29Inv_79305.docdoc c20ac324613872bd6a01c7b872595002ebe2f3ff89da41d668aec7cb22ebe586n/aHeodo
2020-08-29Inv_1448.docdoc 72da2757545a5a82bac55bc0d9ed9ccb5beb853d5af23f8497e6c3be60b5f493Virustotal results 46.55%Heodo
2020-08-29Payment.docdoc 784032625b6d1b88dd76d550cb768c579598aea088f9fcb111d041fff5f57019n/aHeodo
2020-08-29Form.docdoc 20d5c90c46b7747659e92efa4aa78da9e7404b82187e9e8605337918faad432fn/aHeodo
2020-08-29E0014 invoicing.docdoc b7a2a470b35a3cbf4a6501f45709fa7cc29d2a33c5cac4f00ac64b426b90929eVirustotal results 37.93%Heodo
2020-08-29RO005 invoicing.docdoc b8029c0d90d1b4ff550cf1f13603ccb9b462e64c8b81afc2ac33252b86839931Virustotal results 35.59%Heodo
2020-08-29Invoice #43176941.docdoc c98ebc2ba9a8e8f27e921e635f8742cdbb64688b48b57e7300575ccee61930a5Virustotal results 35.59%Heodo
2020-08-29August invoice.docdoc d8c49275c5f1f5f0737181da7071f1755efac730269b0741539b1430a34096ebn/aHeodo
2020-08-29invoice.docdoc 60f661d0a3444cbf34c1c249572f83e9d7c73bfcf4aec6790b856574c1906aacVirustotal results 35.59%Heodo
2020-08-29005567075.docdoc 939a22a6a05d99ab11db0eb510017c9c6729c96dc78051736fd36ec777fe7196Virustotal results 37.93%Heodo
2020-08-29INV_968637.docdoc a936fa77ef0be55ddc1bba6a24c65da623b7207d45356219d55b2475a4234b9cn/aHeodo
2020-08-29August invoice.docdoc e2e03f4ee18e589f52459cd372bef3e8a8935fc5e5638f41044f00fe0f151e52n/aHeodo
2020-08-29INV_8386.docdoc 8c3d2e0fd7d2cc86088185bf1acaf32d2d7e43124beba918f38856179ade8097Virustotal results 31.03%Heodo
2020-08-28August Invoice.docdoc 76b27ec8a97aaff0fcb904c903f9813d51120eab33ba6c8e2624e900e8863b94Virustotal results 29.31%Heodo
2020-08-288244464939BR.docdoc c8f5b268d03379e5d76ea814b115e74877113e741519f8f46585a91ab8ab70b8n/aHeodo
2020-08-28PO# 08292020.docdoc 3dd8598be29765ae8825921f3df19b48f978ccc5d17dd3a3516c1c2740dbd5dcn/aHeodo
2020-08-287455375.docdoc af205422f14b639b4df94286a2e75e65fd7522ea8c0ec60d23af74f197e9a02dVirustotal results 30.00%Heodo
2020-08-28invoice #07938.docdoc 1af25f1feab8bab24a7f9f4531268d94b21a132eb001a1474213e7f92378cef5n/aHeodo
2020-08-28Invoice.docdoc ae7d462289bf10609832b999963d48e37df3766df453fe09befa60e2d49b15c8Virustotal results 27.59%Heodo
2020-08-28Form.docdoc cea059e3285945a91475f02a399bc8749f03bd6c0d0a4f466d9d043ba14921dbVirustotal results 45.76%Heodo