URLhaus Database

You are currently viewing the URLhaus database entry for http://dujua.ind.br/antigo/Overview/j8lvn979610338330216uuehywg571rgf49itg5/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:536603
URL: http://dujua.ind.br/antigo/Overview/j8lvn979610338330216uuehywg571rgf49itg5/
URL Status:Offline
Host: dujua.ind.br
Date added:2020-09-16 19:56:35 UTC
Last online:2020-10-01 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-16 19:58:15 UTC to abuse{at}hospedagem[dot]net)
Takedown time:14 days, 23 hours, 4 minutes Bad (down since 2020-10-01 19:02:51 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-18BAL_87887804.docdoc 18b503caff600c141a8c902b753c8aeeea72206dc7884fdb2c2aaa7b36da6450Virustotal results 35.59%Heodo
2020-09-18EG8202775402AY.docdoc 44d0c90d842430656bb499c996d721b16d4ef131f92e3443c478d37beb0d43f2Virustotal results 23.73%Heodo
2020-09-18DOC_YFYIIAQ46XZV8KH.docdoc 15c49ec4dc917425fbbe700b8f340f1d1629be55957693427600488b42eb5156Virustotal results 34.48%Heodo
2020-09-1866781593578929358626295.docdoc 310f3cc3eb2a31efc38b035aa50115810f1834d1928daf6f6269ab92f389b35eVirustotal results 23.73%Heodo
2020-09-18FILE_43990402.docdoc e2aa96c2ea0b7006d5694ffeb59a7f8e5e10c69a67546cdce25d765398b73a1dVirustotal results 22.41%Heodo
2020-09-18CB_8341781972976907.docdoc 83676faad35894bb04262d898f1279995a52ca4f91f343223e0403b6c915311eVirustotal results 50.85% Heodo
2020-09-18G_2745227596499347747174.docdoc fe543bf25849e02f9c6cdbb37ffcf838eddcff1effb9dea466557fabb673bd20Virustotal results 50.00%Heodo
2020-09-18REP_XES_090120_VNW_091820.docdoc 7d6af6fb5524fab475918225161ccfa03fd6b0893b5d6aab343555908978e002Virustotal results 49.15%Heodo
2020-09-18KT3MRU3CW8PBPW.docdoc ed8d02dd9d1b6d234e7f3b15ac027fa3be85c471538996cf974d1934f0dbc9e9Virustotal results 49.15%Heodo
2020-09-18BAL_OIE_090120_ELO_091820.docdoc af0e40cc260afaf98685419c7a7e2a7bb5071876da22daeafb069c208b8a9ff1n/aHeodo
2020-09-18FILE_TYM_090120_OBC_091820.docdoc 8f5dd0f7d3c0f356a4a2cd39351f11b5be1e32ff16162229fff6548dc8ada245Virustotal results 50.88%Heodo
2020-09-18DOC_GD6133590388US.docdoc dc0b178d082fb9ef3479c57bb72a459f9129a9dec9ae09543e29610b27df1baaVirustotal results 48.28%Heodo
2020-09-18DOC_KWY_090120_DPH_091820.docdoc 6141c4ca354e41f195ad486becc30692e174fa890d504b80a5fde1d32f38ee3cVirustotal results 46.67%Heodo
2020-09-1889915102.docdoc 37058579c0adf49f3f4170d008f3e01704bb07a33edd9b8bb1173e8127c85904Virustotal results 40.68%Heodo
2020-09-18REP_09412196.docdoc 1121962d0a0d52780b13618c7cdcc2916ea8ffdcccb17ae0e54e0b9f8799c5eaVirustotal results 42.37%Heodo
2020-09-18REP_8979841496335935560.docdoc 018f912e134b424700bb01c6a3b3b30d8337eefec291cf518e31c8c4eda6f3f1Virustotal results 40.68%Heodo
2020-09-18INV_ZIR_090120_QST_091820.docdoc 8de1f0bc21df74b36c7d23af7047d1e92050ec37ed0daef2adadb8dee5322488Virustotal results 40.68%Heodo
2020-09-18Q_XMR_090120_WBG_091820.docdoc bd6e4786281e2b7657586b4cc071d1233e90dcb59638890dc1dbe6b10127978bVirustotal results 38.98%Heodo
2020-09-18X_BQP8PBQ7HGPSQ97.docdoc 7c59a227af18d0ce74f71bcd465aeb811332968c24b837a6d9761a61bf0b2abdVirustotal results 42.37%Heodo
2020-09-18INV_ZK2527322146KZ.docdoc 3c04b25b3db13173771d70f4aa9fd25006b34fc0c02f707f2dbd8f9b15938720n/aHeodo
2020-09-18REP_PO_09182020EX.docdoc b93adb958e71ae93847f4db73ae4fb7f9f596e3f9ff08cb951842dfa36911795Virustotal results 37.29%Heodo
2020-09-1853445601834148822007913.docdoc bb86997dfeeb53c0434119028526baad7180e7705c9f111b56b3b0e56e37ae60Virustotal results 35.59%Heodo
2020-09-18N_1199938081712972.docdoc 0201f9b5765c77f097c4e2c4c55dfb1bc9c99f104bb07af3dcdc6d62731d99c2Virustotal results 36.67%Heodo
2020-09-18DOC_HL5704705873FQ.docdoc b157c7e4296be966f45fa1efac02053cbc78a6c2012faf885bd9654287f0f35dVirustotal results 35.59%Heodo
2020-09-18DOC_97080403.docdoc d95aeafb85cdd18684d7a50288bd895c7549455d652bc1997dc4b27c26788c92Virustotal results 33.90%Heodo
2020-09-18EYNLYOP087S4WPX.docdoc 6098ea8b508e01b7b777f7e9ae9b62e69f4e95a1bf8342c4d7ad98e5559d70d1n/aHeodo
2020-09-17EHYANLQCWZLU8ODI.docdoc 36d46656d6969e3946e5b7d590c3f84bee9577d16dc333b05a115c41760636b7Virustotal results 35.00%Heodo
2020-09-17NZF_02074792.docdoc b7ddf91ff9e8e25f296efc62a0d79d6077c5ab794410acec14f45d7e96a35d4bVirustotal results 35.00%Heodo
2020-09-1700084487.docdoc 24b4b9f235edf4c63faa8b1722508868d0727dd455e4abcbdaf1ac38eb379dfeVirustotal results 33.90%Heodo
2020-09-17FILE_EYC_090120_DJP_091820.docdoc 11cfbdf8ce4f99c93816a1ed7ff7410d051b0cc978efc9ff9fa824db596374e5n/aHeodo
2020-09-17REP_PO_09182020EX.docdoc 12d6b38f752ecea5e77fa8c3623f322427bd77fbe3070efe165d432a739f4bd1Virustotal results 33.90%Heodo
2020-09-17PO_09172020EX.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo
2020-09-17FILE_QL6238135094NK.docdoc b0fdd6bc85ccfb2d9e1eddb4f79f8dc13ae60ca8e27e00e0ddc0e89389dd67d5Virustotal results 48.28%Heodo
2020-09-17DOC_PO_09172020EX.docdoc 30fae41cd15ad7341c7e91b9e003b523538a2b23f9afa8d601ec22cdb738526bVirustotal results 42.37%Heodo
2020-09-17O0G7C3TE6JJBMC.docdoc 0b2362700a49af3797e3a32128e561ba70c171de8406a65e5290362ab574c31fn/aHeodo
2020-09-17DOC_FM0891736203SN.docdoc 266182936e91bf387900a37c29c044541d8646676cd85790aa27214e6f210848Virustotal results 35.59%Heodo
2020-09-17UNK_090120_QQB_091720.docdoc 25b7caaf5594b6cc48bb28f48e54b85ffc9e4368c9144ba569554d8730d66298n/aHeodo
2020-09-17W_QLT4G9R4ARW.docdoc 6f259bd35269f76ac42871f5c84e9d480c5ab4b878108a381a7040a8cc0b5434n/aHeodo
2020-09-17D0U66HQFTG.docdoc 1df5b6fa599fb3c788702a36ea699399ccd479a07f4dff1b7372b1bc6fcf6968Virustotal results 37.29%Heodo
2020-09-17AXM_090120_ZPJ_091720.docdoc c6dcfa2a31a094225c25a0d53cccd915b76ab34be20b10fc775d740b3e6d9b21Virustotal results 32.20%Heodo
2020-09-17REP_DZM_090120_CVK_091720.docdoc 8b081a09069960c73f3ed3a1535f10fc2f69885e61ff050e9a22b2d471bca7den/aHeodo
2020-09-17MTH_98793832.docdoc 1e7768f22ed163e40214a6e4cc98050525441233f7a49852621606f4eedf937aVirustotal results 32.20%Heodo
2020-09-1783732572.docdoc bf95f266d40b4617876e2f284b989c5b6b809072925ffcc1f3e8e0aa94310b82n/aHeodo
2020-09-17DOC_YV4862283683ZO.docdoc a5ecfee423f7cf0ff0efb76f20542df38a7d88230a256aa5e343d1040950e5b8Virustotal results 32.20%Heodo
2020-09-17DOC_LH8316839994TA.docdoc ce6399120ee307992b13733489078810f36a8a5dbd5e7eabaf399d95216b7f48Virustotal results 32.14%Heodo
2020-09-17REP_TPB_090120_XCE_091720.docdoc 3f70f108975c931a23d9f23fcbfe728d93f6f0b096014280234067b0c54d44bdVirustotal results 35.59%Heodo
2020-09-17FILE_82201417920190103464.docdoc 208e89fb766998ab21cbde91b170f04f5833e9d0d69257b3654828d00dc79933Virustotal results 35.59%Heodo
2020-09-17REP_759338845878845.docdoc a7da541fe6a93fc3adee9b55d8cb93d8236d1a1922d9d02a0894192fa03ba909Virustotal results 28.81%Heodo
2020-09-17H_67235498.docdoc dfc124f5ed8d3ebb78c8d924921f3195fc05cc1aa1a635e51161dcbe1106a386Virustotal results 36.21%Heodo
2020-09-17DOC_VPD_090120_DJM_091720.docdoc dd730a186b979cc083c88419bd457f1ad9a0c235f8ac5c7552b4b9d24fb9db2dn/aHeodo
2020-09-17FILE_SUX_090120_QDX_091720.docdoc 32824dd0392573b686def1bda2f7e63f82bec5181b405e1714f7590872500688n/aHeodo
2020-09-17800991498950232.docdoc fe6c61d58e613b1737dd42c11ceb421b40f8f854324adeecb71245e245ed3a34n/aHeodo
2020-09-17DOC_PO_09172020EX.docdoc 803c6c54c4ebc1733d67a3a13191e80339304b93da85bfd7945fe48a0bc95fefVirustotal results 31.03%Heodo
2020-09-17INV_055328956471701745.docdoc 221dca340ea182b75f75dfeab42f56430776955fa1e0e314967aa2e5397efca0Virustotal results 30.00%Heodo
2020-09-17FP_SYE_090120_MGS_091720.docdoc fd0f987936c01acfb91bb84e9e9c3e6f425f55d07887f14ee595ec418d252849Virustotal results 40.00%Heodo
2020-09-17BVF_XYQ7WLTQ8YY8J1MB.docdoc 0ed1adf222903a5b3335427d554d4a74c05a27cfd1a438788c04f3b3d720c002n/aHeodo
2020-09-17REP_CG6917007745IR.docdoc 595abb95ad8bea9fcd875fee5c21baaf5f829e997eb430384a8fd7f43da2e0cfVirustotal results 38.98%Heodo
2020-09-17GU_RZF_090120_UYV_091720.docdoc c3474c39b7b924e42872d74244d0854423f1a19a0bc7bf53337994e269cad134n/aHeodo
2020-09-17JJ0432781022ZM.docdoc 093ca9b873eac37c451077497250eda40c15ef31aefd41593a79f206a45ff6b2Virustotal results 39.66%Heodo
2020-09-17T_55211679552529325.docdoc 0c2e3b86f744311a9e0cfeff0f0a7c22284b08cde0cc7437289d9c416eaf4f69n/aHeodo
2020-09-17MUFWP01LC.docdoc 163a09323a2678ec297914024703f458b53d81470967ee69eb352bb51a5d4f92Virustotal results 33.90%Heodo
2020-09-17REP_63421487.docdoc 8bed6a4e027b38076c316eb5378c9d60d8fd9305217dba0e315e93974091667cVirustotal results 34.48%Heodo
2020-09-17INV_61035491.docdoc d9a35783bb245b622048384501eb1c30e098c547b4d3079e0c8d01e06336464cVirustotal results 36.21%Heodo
2020-09-17REP_93340163.docdoc 7787b958e5df87b1f31bc7382f7b5ff4b6bd764b807e381f75b8b2756623f393Virustotal results 27.59%Heodo
2020-09-17FILE_100001375478499032.docdoc be4589b5f647c7b97fdc399757c263c8fbe549218e25eea82148ad48f7fa5017Virustotal results 32.20%Heodo
2020-09-17FILE_24807195.docdoc 430ef6af760d2105f3c14655f66ff5dc191916c938a26256085965a4a536c827Virustotal results 32.20%Heodo
2020-09-17BAL_EAE_090120_BKJ_091720.docdoc 524f6d1744c625d4ee827ab1ee1406f5aeef8c8799b8cf6474c2a53014a1dfadVirustotal results 28.81%Heodo
2020-09-17PO_09172020EX.docdoc 6d9cad95f8aa3d8219f21391e294a8dedbde904308f501b7f4be63eb92a8dcf4n/aHeodo
2020-09-17DOC_19591658.docdoc 6ba572ac222372c95a63401ec2b6710af0a9445d6c38efc7cf8397461ab1fd8eVirustotal results 27.12%Heodo
2020-09-17REP_UW1860137155GW.docdoc 4fc07945a17ff1e3422b0c95992fa2750006aeb21b1e886f0c2876d4ef69a14bVirustotal results 25.42%Heodo
2020-09-17INV_MPNCG0YE0.docdoc 39c83fd21ce730714e93e6bbe85f21770a761285c3fd1b2b2473e00644785e82Virustotal results 27.12%Heodo
2020-09-17PO_09172020EX.docdoc d30169f108ec72fbaf16bb8726e798602988e1c42a7b3020b0ef0ad0572f9625Virustotal results 25.42%Heodo
2020-09-16FILE_BH6699639666GD.docdoc b2bfefad5d4d6a3dff230f61a9c4b055d5ae4b37b8fecca5550317c89f615504Virustotal results 25.42%Heodo
2020-09-16W_3FJ3N6ICT0SAM.docdoc 73158e3c574c5cfbe98520ebb3b8c4270609205751d997b87414e5a43980f960Virustotal results 25.86%Heodo
2020-09-16INV_92755156.docdoc 7cad27b68df51d87f204a171a2f75a578b52e11f339a2bab138c6ada02b5a196Virustotal results 30.51%Heodo
2020-09-164F5WA5J3GTP1S.docdoc 665e45861c718dbcda0e3f7473479a62187f5248b4d99ec7d63ff91dd4eed98en/aHeodo
2020-09-16SA5347360074CO.docdoc ba46d0a65699ff5ec5670d31287ae8d04710450b5d267d9e4a2fdf0e94078194Virustotal results 25.42%Heodo
2020-09-166381396512843636466911619.docdoc 2d28945e5e6a8cb9f9e82d32bbff50d953e72e8f55c46e910c596d92bf646963Virustotal results 26.67%Heodo
2020-09-1688268746.docdoc 8f96a4ee289f6093a2f1afe8c584cba4a802c054ef22fde70d451254191872fdVirustotal results 25.42%Heodo
2020-09-16REP_25556114.docdoc fd4fb3464a7f787ee4d5b1795fe7b4d8ffde4a1683fc6620602fb78ba52f52a9n/a Heodo
2020-09-16PO_09162020EX.docdoc b3f921be965718a9741b8f63d9b29dba0345f98cdfda7a0cabae90ffabc8043an/a Heodo