URLhaus Database

You are currently viewing the URLhaus database entry for http://bbpromotora.com.br/rafael/invoice/74486770128/qassgu6sy-000355/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:446243
URL: http://bbpromotora.com.br/rafael/invoice/74486770128/qassgu6sy-000355/
URL Status:Offline
Host: bbpromotora.com.br
Date added:2020-08-28 20:21:06 UTC
Last online:2020-08-29 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-28 20:22:10 UTC to abuse{at}ovh[dot]net)
Takedown time:17 hours, 44 minutes Good (down since 2020-08-29 14:06:43 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-29Payment status.docdoc 5df4f10d255d1733e9450ecf67d166c73f6f29bb36efe88d6093a31d31ce0ad4n/aHeodo
2020-08-29August invoice.docdoc 53a81757cc45ec010aa2b5bf957b383898ab0b91b52e51adf5a72e44a9845e51Virustotal results 45.61%Heodo
2020-08-29invoices 94397 & 91965.docdoc 3b5c4fffd6b0548d5d66842086b1b3762032be24a72ceb3154d72cc55cbb8d83n/aHeodo
2020-08-29invoice #05608.docdoc bafeb0485f36e4e1ba176fcbc1b43cec6639282dbeeb7244c56f9b98fe8df5bdVirustotal results 44.83%Heodo
2020-08-29August Invoice.docdoc 139e6af741bc7d94ee44f8a69dbc8e694a72bb780b0b984a2c57cc99966d3e5dVirustotal results 44.07%Heodo
2020-08-29Y-080120 UTIO-082920.docdoc 72da2757545a5a82bac55bc0d9ed9ccb5beb853d5af23f8497e6c3be60b5f493Virustotal results 46.55%Heodo
2020-08-29Invoice.docdoc 3b05f64f06873b3ad6438916c81c4f4139191b2d5a8324a632b2ef7fe4a82803Virustotal results 44.07%Heodo
2020-08-29Electronic form.docdoc 1f42096613819f1b1cf2ea163ea893ccc965e8b3fc9beb61d4b0a967d2374bb5Virustotal results 38.98%Heodo
2020-08-29invoice.docdoc b7a2a470b35a3cbf4a6501f45709fa7cc29d2a33c5cac4f00ac64b426b90929en/aHeodo
2020-08-29Invoice 2797439.docdoc c98ebc2ba9a8e8f27e921e635f8742cdbb64688b48b57e7300575ccee61930a5Virustotal results 35.59%Heodo
2020-08-29INV #003126 FOR PO #091920415915.docdoc 3859539d7b23160befaa0ee026d5fadadd14d18b595a63a1d2adb1c103a7092bVirustotal results 35.59%Heodo
2020-08-29Invoice #2497.docdoc 60f661d0a3444cbf34c1c249572f83e9d7c73bfcf4aec6790b856574c1906aacVirustotal results 35.59%Heodo
2020-08-29PO# 08292020.docdoc 939a22a6a05d99ab11db0eb510017c9c6729c96dc78051736fd36ec777fe7196Virustotal results 37.93%Heodo
2020-08-29PO# 08292020.docdoc a936fa77ef0be55ddc1bba6a24c65da623b7207d45356219d55b2475a4234b9cn/aHeodo
2020-08-29invoice.docdoc e2e03f4ee18e589f52459cd372bef3e8a8935fc5e5638f41044f00fe0f151e52n/aHeodo
2020-08-29Invoice.docdoc 8c3d2e0fd7d2cc86088185bf1acaf32d2d7e43124beba918f38856179ade8097Virustotal results 31.03%Heodo
2020-08-28INV #3812650 FOR PO #0042240418.docdoc 5db10c40e7788456c57bf2481d95f86b762e85ec74c1ba5a232014afc0b7071en/a Heodo
2020-08-28Inv. 7528044087.docdoc 418cd12b251bce9b75ac793c3d626440b35e8e6ef2002751114a27eb3a627d26Virustotal results 29.31%Heodo
2020-08-28Copy invoice #6622.docdoc 86240927a4b7758913d5a54538d5f77aed11669eec8606a431321e0b8544936bVirustotal results 29.31%Heodo
2020-08-28PO# 08292020.docdoc c6a98abe2ef2b0e445d4145a16d2728b53d55c55b9303eb550696db4b531bdc1Virustotal results 28.81%Heodo
2020-08-28invoices 90249 & 22063.docdoc 1af25f1feab8bab24a7f9f4531268d94b21a132eb001a1474213e7f92378cef5Virustotal results 28.81%Heodo
2020-08-28Payment.docdoc 83a4d7860de46ad541e0399824ba56d53f755c233914096fa08cdf1d966960b0n/aHeodo
2020-08-28INV #1577 FOR PO #9304712806.docdoc b89e478d217b03e8c0042bab248bd9431243f6fbe54c13d26d77b63b93c0c99cVirustotal results 28.81%Heodo
2020-08-28invoices 122 & 72218.docdoc c7042f61131d4a483d3b7433af94d39743944f2fd4e00abf795450a603c883fcVirustotal results 27.12%Heodo
2020-08-28Invoice #8634436.docdoc 96955576446f803417498ea62363fb51274e644a275afcd1086cfa9a60df1d92Virustotal results 27.12%Heodo
2020-08-28Invoice 0092772.docdoc 81cadd314f1bf342797da22c3d89200bc29b25a928bd3a8241d2864d3a6d4771Virustotal results 27.59%Heodo
2020-08-28Electronic form.docdoc 8ede442060da401486c5363d1575233d57e8340ae1cca402b9d87f40fe98beebVirustotal results 46.55%Heodo