URLhaus Database

You are currently viewing the URLhaus database entry for http://vidabela.com.br/wp-includes/swift/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:452880
URL: http://vidabela.com.br/wp-includes/swift/
URL Status:Offline
Host: vidabela.com.br
Date added:2020-09-03 23:39:34 UTC
Last online:2020-09-04 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-03 23:40:03 UTC to abuse{at}hospedagem[dot]net)
Takedown time:14 hours, 48 minutes Good (down since 2020-09-04 14:28:57 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-04INV_91240015.docdoc f19b7c3502d8e70e4a41fc4676cf0ba7a1de47cc19b1e961be4ceb8511119637Virustotal results 41.67%Heodo
2020-09-04DTDE_60649609.docdoc db8ec99d40ab02d4ccd48a1c7b15bf169acb5b672dad9862e19dcb7f2805cde6Virustotal results 42.37%Heodo
2020-09-04FILE_8612833407168031462806.docdoc bd6d04f3dae6135958f29487917cf501c1fa74ddb6efc7ce60d56f2d71551b26Virustotal results 41.67%Heodo
2020-09-04J_XVS_090120_CXN_090420.docdoc ba12420cc97e12ee529581e19365496e3aee5521546bbe9ee25a49e12ea1fe1cVirustotal results 41.38%Heodo
2020-09-04FILE_RG0236469309UM.docdoc 58688db2a10ad53af04287f0d28ff7a01d056a48dcb725797d9c1f724d13ff2cVirustotal results 41.67%Heodo
2020-09-04REP_OH1711780018RE.docdoc bf52c7ee63e57eab046b65369d5d9bca719accc2b77b4541ddbe5924711aa9c1Virustotal results 41.67%Heodo
2020-09-04DOC_SZ0533718201SZ.docdoc caebf73081556f7f37180936a87c070873e8e00e37acbf388f4ede0388fc3a57n/aHeodo
2020-09-04EF_QE2754136816KD.docdoc af94a807ad27af0322ecdce2f282be8b0d3037615f7d64915e271c5db9016d18Virustotal results 42.62%Heodo
2020-09-04DOC_R79TKNE7NN1GTFY.docdoc d4e4779bc7a595b54aef09d0febad3b0412b7919c11c7d60fb1350f25f9d8731n/aHeodo
2020-09-04INV_PO_09042020EX.docdoc d39068244f6daf99e7f26840e26f7a22a79b149f93546294945973683aa5e749Virustotal results 42.62%Heodo
2020-09-0452891933.docdoc ff4f948205a9963a9502f66416a727514ecee03ab8d03067fc0a0e636a1bef26Virustotal results 41.67%Heodo
2020-09-04DOC_ZM7132997804LY.docdoc b6f6deed6a2a7773bc32ffdeb76b3c6203ef5104979733b539cefafd5172afc8Virustotal results 41.67%Heodo
2020-09-04WFF_PO_09042020EX.docdoc e9a5c8f81a3a669685cf322e54f602a882b6a8843070c10d6f5e53794379a8dan/aHeodo
2020-09-04FILE_RUK_090120_WUP_090420.docdoc 615736850fd6ace5e3359e30427d4ef5824b28c6d1e0bd9dbd2cc12340dfeda8n/aHeodo
2020-09-04DOC_LFL_090120_RNI_090420.docdoc 5b1d4e139dae2d809b81b5220c27135614ea3770089435f6eda1c8ee848bd48fVirustotal results 38.98%Heodo
2020-09-04K_QL6187029967KD.docdoc d31c8d01e8f0d1245651c9e0ccd611e4b98beca169cb0cffcd86377c20beb0e9n/aHeodo
2020-09-04PO_09042020EX.docdoc f0e89834b4906361a067ea23efa018387f75a2dbf921d028779c2ad15a19bf47Virustotal results 43.33%Heodo
2020-09-04REP_HJQ_090120_DTK_090420.docdoc edc285fb056f220eaf6bd0fac0b68417b1a433e5a1da2fcec0c518277f1cbbd6Virustotal results 42.37%Heodo
2020-09-04DOC_CG1936203958EH.docdoc 847c5774eaea8a9d9ce3d2a5b91650c30fe5a44a68cb6ab8688236c878787aecVirustotal results 42.37%Heodo
2020-09-04DOC_BZ54T9AQ.docdoc cb36930a69482b8df76170e4111a039d5603d86e957872c1d54a74216de8beb5Virustotal results 40.68%Heodo
2020-09-04DOC_ZOE_090120_BYS_090420.docdoc b1e73e0f563ed6755fa8532cabda1fbed433aa1ff09b85178288cde0b86292d2Virustotal results 38.33%Heodo
2020-09-03FILE_78877445.docdoc 2e96dcfe760df7dd6db7de3e4a51f33e031a3c1c8d3aa5545cfe92fa072b6189Virustotal results 36.67%Heodo
2020-09-03PO_09042020EX.docdoc bfb730608ea4de6d4d60292f703782a118e42cee42d7c0b1077e6c70b3fe5491Virustotal results 36.67%Heodo