URLhaus Database

You are currently viewing the URLhaus database entry for http://acainacumbuca.com.br/protected-disk/FILE/pc691u2r/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:453763
URL: http://acainacumbuca.com.br/protected-disk/FILE/pc691u2r/
URL Status:Offline
Host: acainacumbuca.com.br
Date added:2020-09-05 05:40:35 UTC
Last online:2020-10-09 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-05 05:42:03 UTC to abuse{at}dimenoc[dot]com)
Takedown time:1 month, 4 days, 10 hours, 54 minutes Bad (down since 2020-10-09 16:36:25 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-05DOC_8427390686840795.docdoc 8b23e164f16ba0caed21611db9782895ac3a6a1f5b30a16e7cff6a2f8e3c3008Virustotal results 44.07%Heodo
2020-09-05BAL_GBH_090120_NOK_090520.docdoc 908698080dcf9229ad6d3a5b3faa55ad9f3499129372a809d011b6d24ba9d445n/aHeodo
2020-09-05INV_TL4703763322XK.docdoc ef7cf4395e6f154ad0deda89d832839b0301a4973ac6c002652d2cf6cf185ee9Virustotal results 43.33%Heodo
2020-09-05INV_EE29V6MB6S.docdoc 1e52c0f38822abee6f044ad1cadcd997d709163955787be931b19bdadab0b376n/aHeodo
2020-09-05INV_2CMSZ6AEQDKRGP.docdoc 4163030917532af42a4ea2c38086ff49766a928281c4269bdf298879f9e01d51Virustotal results 41.67%Heodo
2020-09-05UX_80590680.docdoc 2e997a833026463ee1ddc2b571d97d90c94ac88cdb614cc5e5803d48b640391cVirustotal results 43.33%Heodo
2020-09-05UB_BMFXZMR.docdoc 9dec32ba9b743147a0bb4ae8041825a74aed44d6dba4f1ace85a6a008227cb0cVirustotal results 41.67%Heodo
2020-09-05A_WYB_090120_QNE_090520.docdoc 2b7b0ff44457a586cf0ca88f5b8f4bee199a18d6c52e494b2ecbbe083c3baf5fVirustotal results 40.68%Heodo
2020-09-05BAL_VQB_090120_HLF_090520.docdoc 52dc2d3655da2e0bec58667337f8c1b82e08d7eeb4a73341345f236d3321e9d7Virustotal results 35.59%Heodo
2020-09-05HJ4MZ8KDV.docdoc 3ea82d40a32c4a7efd0deecb56f9bd8d6ded9f90c47eff0dc2257c5d35204402Virustotal results 33.90%Heodo
2020-09-05INV_514974344981.docdoc c409cd7639c969f0ed59d092f2ae2232a491fda76e08a4abbf011a59a648258bVirustotal results 29.09%Heodo
2020-09-05FILE_5081213013284865399.docdoc 039c1a80de238f23e0baa36bef68172211789c397e294663fd1117bae972bc79n/aHeodo