URLhaus Database

You are currently viewing the URLhaus database entry for http://terra-dal-gharb.pt/wp-admin/browse/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:452788
URL: http://terra-dal-gharb.pt/wp-admin/browse/
URL Status:Offline
Host: terra-dal-gharb.pt
Date added:2020-09-03 21:36:37 UTC
Last online:2020-09-04 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-03 21:38:13 UTC to abuse{at}nos[dot]pt)
Takedown time:15 hours, 48 minutes Good (down since 2020-09-04 13:26:43 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-04DOC_GQZ_090120_GIX_090420.docdoc f19b7c3502d8e70e4a41fc4676cf0ba7a1de47cc19b1e961be4ceb8511119637Virustotal results 41.67%Heodo
2020-09-04VKHK_CE5716545166BB.docdoc d9845d6cd1dc60f9101f99ccfe8ecd94e40035baa15949d08c31985d152695a4Virustotal results 41.67%Heodo
2020-09-04INV_UKN_090120_OKW_090420.docdoc bd6d04f3dae6135958f29487917cf501c1fa74ddb6efc7ce60d56f2d71551b26Virustotal results 41.67%Heodo
2020-09-04FILE_BA6111276143QT.docdoc ba12420cc97e12ee529581e19365496e3aee5521546bbe9ee25a49e12ea1fe1cVirustotal results 41.38%Heodo
2020-09-04QJ_PO_09042020EX.docdoc 1348492e73a12dca11baf904fd17a8f5ec479e7a535229a1d05f753cb81dc49fn/aHeodo
2020-09-04INV_PO_09042020EX.docdoc caebf73081556f7f37180936a87c070873e8e00e37acbf388f4ede0388fc3a57n/aHeodo
2020-09-04B_PE1270833289ME.docdoc ad84c8c2cf5cec48293d676cd04c85584493ec6ea41985daf27420a4855461caVirustotal results 41.67%Heodo
2020-09-04720726498.docdoc af94a807ad27af0322ecdce2f282be8b0d3037615f7d64915e271c5db9016d18n/aHeodo
2020-09-04Q_FW1907373517MZ.docdoc 9b93250ba68a08df743a47727d6b84318527714e489bfe0064f103b2c3fb9b21Virustotal results 43.10%Heodo
2020-09-042791655037510562514231.docdoc 8aa2a0bba5e9b2f0f212f07d152f089fd10e8ca4485608178547f12196348c45n/aHeodo
2020-09-04O_08788908.docdoc 3bd6f6031787d67083679740e8f556ee96066d268960bd6a6eb4b23260e39c17Virustotal results 41.67%Heodo
2020-09-04REP_161562885734.docdoc b6f6deed6a2a7773bc32ffdeb76b3c6203ef5104979733b539cefafd5172afc8Virustotal results 41.67%Heodo
2020-09-04REP_PO_09042020EX.docdoc 1d3c23422da9f070996381406668d34699557d693bf4db1e3cf752fe8b83b560Virustotal results 43.33%Heodo
2020-09-04FILE_YGFXO7PNJV4SQXG.docdoc e9a5c8f81a3a669685cf322e54f602a882b6a8843070c10d6f5e53794379a8daVirustotal results 41.67%Heodo
2020-09-04INV_04395056.docdoc 2fd8aea8d3be3ae3fadc472dd4a766ac279f36154f6001d577dca10c7a77cbf5Virustotal results 43.10%Heodo
2020-09-04BAL_28234409.docdoc 628bd28e635f7fa6ca78c666cd219873a82d1c749dcd80ca407469194fb0064cVirustotal results 41.67%Heodo
2020-09-042676320661634874961704213.docdoc 781509afe3329ab61b29f3b67394eca12b43b25e82a4f1b9ed2c4f178b3a6d8bVirustotal results 41.67%Heodo
2020-09-04REP_4293353165.docdoc f0e89834b4906361a067ea23efa018387f75a2dbf921d028779c2ad15a19bf47Virustotal results 43.33%Heodo
2020-09-04BYD_090120_OTE_090420.docdoc 0e17461c84992dd3117448367cb38d7d6323d37b5c3314a0105ee4dc59a908ban/aHeodo
2020-09-04REP_QA9183869298UC.docdoc 789a71395ae5c9ea3e1613452abd8ed4927d9baf524868cdac935110b5f6f0feVirustotal results 42.62%Heodo
2020-09-04FILE_47444874.docdoc edc285fb056f220eaf6bd0fac0b68417b1a433e5a1da2fcec0c518277f1cbbd6Virustotal results 42.62%Heodo
2020-09-04YI_GW7403809565BN.docdoc bf8ba4d58a232e576705b37030a7df091539bafb0051f4f28032d54fe49c4c98Virustotal results 41.67%Heodo
2020-09-04YG_PO_09042020EX.docdoc f00f58cdf16e19d21e63d94d8fc0be44f2ca6b18df7ca59cb6aed2bba4b5ff97Virustotal results 37.93%Heodo
2020-09-0377735328.docdoc 2e96dcfe760df7dd6db7de3e4a51f33e031a3c1c8d3aa5545cfe92fa072b6189Virustotal results 36.67%Heodo
2020-09-03BAL_FRW_090120_DPF_090420.docdoc bfb730608ea4de6d4d60292f703782a118e42cee42d7c0b1077e6c70b3fe5491Virustotal results 36.67%Heodo
2020-09-03FILE_PO_09042020EX.docdoc 079755626794412a025b4f2e13b8a7900345b513afb0538ee3f16c638878c800Virustotal results 35.00%Heodo
2020-09-03INV_8456962330175.docdoc cc9003f91bf87c927888e7e0aeb7bdd5e450fa8da4e378412fa1f8df8a04cd44n/aHeodo
2020-09-03BAL_EG2303595356JQ.docdoc f95add757971b2b4deabdb71a2aaaddf3ea0cd2562b6bf7c1db04298470477ban/aHeodo
2020-09-03REP_PO_09042020EX.docdoc 825d35892bf6164d6fa8cdd39478abcfb25e0cecf57211e3590e1f8da424dc99Virustotal results 33.33%Heodo
2020-09-0324474647979904036291899.docdoc c9bb1e95c94bba0c079268182ba5d9ec4934d3a859c650d685777d5bd83862c7Virustotal results 33.33%Heodo
2020-09-03REP_869108484593.docdoc 12f1f6eaba5c14c0f12ebabea1fb99278c07a501323f1c81297b290f8f223b17Virustotal results 31.67%Heodo
2020-09-03Z_OZG_090120_FJI_090420.docdoc 05239277c07c3d58fafd2922235b02d502219aa1490b863913b43a4e8260b705n/aHeodo
2020-09-03BAL_FLQZOCL1DP7TF1X.docdoc 443dfb6a71c2268defebbf32b16630045140b55595bd22e9e38df2c76fda6e2bn/aHeodo
2020-09-03REP_PO_09042020EX.docdoc 5542f3a196fa82e55824fadfba8827ac16d483a5a8cfb23089fbbfad77e6dda2Virustotal results 32.76%Heodo