URLhaus Database

You are currently viewing the URLhaus database entry for http://marseguro.com.br/cgi-bin/Documentation/s53m91sf/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:542746
URL: http://marseguro.com.br/cgi-bin/Documentation/s53m91sf/
URL Status:Offline
Host: marseguro.com.br
Date added:2020-09-17 07:57:15 UTC
Last online:2020-10-06 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-09-17 07:58:27 UTC to abuse{at}hivelocity[dot]net)
Takedown time:19 days, 5 hours, 59 minutes Bad (down since 2020-10-06 13:58:19 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19G_PO_09192020EX.docdoc 23e85a68c4a3b9d299d2ed531ada64c13d44ea288cad289752aa9dd3d3e08884n/aHeodo
2020-09-19FILE_PO_09192020EX.docdoc f3bea1e9a17c2c0596fa59400e54751f3101a0905e12055bec42c1e02ef96d8fVirustotal results 39.66%Heodo
2020-09-19FILE_CB7095861192PT.docdoc b8818fbdeecde51adf7270365592b9812f1e323c4cdbf81f12885c590727d3f2Virustotal results 35.71%Heodo
2020-09-19N_92896479.docdoc d0916058bac3e5720c7979d05019d5fbffb9f64eb341116f0d3febff67abea01Virustotal results 35.59%Heodo
2020-09-19BAL_NDXX7XML5X.docdoc fef97dd65403e6df050dd694228616294f6a82327a011603fd95d931ec99219cVirustotal results 49.15%Heodo
2020-09-19FILE_84667700.docdoc 9836021a37477ee929f62edefd022550374c055f9629119c37decbccf76b0693Virustotal results 35.59%Heodo
2020-09-19BAL_60176379.docdoc aae82415f0c1d33438261bb6ea1039cdff8bccc786541f5177e6938497f5b2d1Virustotal results 40.68%Heodo
2020-09-19DOC_73208525.docdoc 778c345084d688acf88bb52a9c052c1e852688885a2b4c6c3938f6f471888d44Virustotal results 40.68%Heodo
2020-09-19CC9007665694GC.docdoc f9e9e2dd60777b24a40ffc71551901bcb801741bab413b47a83b13b938bdd86aVirustotal results 47.46%Heodo
2020-09-19PZG_090120_SSU_091920.docdoc 3d64095f4564ebc30eadbe6a61d8dd290bf34c82c7c49a9accc8179312fc53edVirustotal results 46.55%Heodo
2020-09-19DOC_TT9127124396CJ.docdoc e3917f2ed0855bcc9400817a19340a2e860e4235af3697c42483a6f2d69642b0Virustotal results 35.59%Heodo
2020-09-19A_1TZZRC5QXD69ZYEU.docdoc 4198131e8d2f03d52598f0c99b1f8765ed8d7380b175ec0ee5e9ef4e845f90feVirustotal results 40.00%Heodo
2020-09-1965582626.docdoc 1f267368325cfd8a9665680a987d4b866cbc949478dd3d8485e357ec821295f3Virustotal results 50.85%Heodo
2020-09-19FILE_RYQ_090120_UPM_091920.docdoc 5f38c1fbef4f42be0184fb63effb0a6d953cbb55009cae9ade7e21c580ace133Virustotal results 35.19%Heodo
2020-09-19REP_RB8780782958JR.docdoc 7df3447e0e3af084cc5d6ad9a9f333ac88e09c1d60c0f9c0f00fcccb6d04b708Virustotal results 33.33%Heodo
2020-09-19INV_07136063.docdoc cc21dad99db9fe14ebb5e963372e9b2bb57c453683119891b367387d06f812edVirustotal results 40.68%Heodo
2020-09-19BAL_YSVWD4Z9F5JJYZEH.docdoc ee2bfb3bfc62ad36246c4533bb4bb8c41aa21ffeb8bd74b216d3c6088cbc7b62Virustotal results 37.29%Heodo
2020-09-19FILE_73901688.docdoc 56813b1ff2c178be52fb844d4656d77d7d061aeeb71e90418d1665f9aac64978Virustotal results 33.90%Heodo
2020-09-19INV_759458370.docdoc c87f8fd591bb21b8ee7da412593310605e465dc013f1607cd0f67c0e39d58685Virustotal results 32.14%Heodo
2020-09-19INV_LG8747300395TL.docdoc 30ee1918a15e45641f559b5bda9985c8aceb4a0e4e64e49de6364d24982556afVirustotal results 37.29%Heodo
2020-09-19DOC_PO_09192020EX.docdoc e8ba52929c7417d389ec7c09ee6326be03a51186987ca74d8ef79a98803150b5Virustotal results 40.68%Heodo
2020-09-19YWJRO9BQ9DG.docdoc a6a8b9e3e602b8727f2687f6906dbc66a534b711594e7064776f9128f0582e0eVirustotal results 30.51%Heodo
2020-09-18DOC_ZG6397247046TH.docdoc 9b38f99bf028d06da1c2b0ff276857ffca68abea77256a72cce711edeb81368dn/aHeodo
2020-09-18DOC_78281306.docdoc 3a245c3c3ba3257272ead17995d6b4913540dd24162a40430a05199d36f50768Virustotal results 36.21%Heodo
2020-09-182040818508.docdoc afc7650429d1bb92b43bc1bae9ac07c7e3ff7d34b10949e03b97c1a43cab0930Virustotal results 30.51%Heodo
2020-09-18QR8KSC6TY7RP.docdoc e6bd87fbe016b6aa6adef6d0b44f84f03fac8c48fff4f7f50631787c51b36ebaVirustotal results 35.59%Heodo
2020-09-18PO_09192020EX.docdoc 05eb736917a11db255084e194c37d2af8e64f70d50bf4c604bc9eca81198fb74Virustotal results 30.51%Heodo
2020-09-18REP_501836728554576103174709.docdoc 4a0e1fa1af2997f150fe806a7ff482e45c83132a101a0808e8ced6e543de770aVirustotal results 34.48%Heodo
2020-09-18FILE_ZK0823619997XU.docdoc f5fb5d637a37ec6c6c5288f46bb6ad3cb9559037f8df024aba1f9bde1d477a4aVirustotal results 42.37%Heodo
2020-09-18061923700357758679123.docdoc c78cf5346497f3b9c5cb2f0734b631178c25eb818adf58b25aba4c7d6313f442Virustotal results 42.37%Heodo
2020-09-18INV_SNN_090120_OYL_091920.docdoc 83ef8a546c7ee56fc9fdd0a7cfe3651582d97a1e63ac0d51ea91786703752e48Virustotal results 42.37%Heodo
2020-09-18Q_99839599356894867775.docdoc c0922c3c055ffde4da5b482105dea26df27c58e1a615ec81afc024d55010f8ebVirustotal results 42.37%Heodo
2020-09-18DOC_JSB_090120_QES_091820.docdoc 9dfc5f3534fddaef93d3e5325dce0d96515081d07eb941bf97bb852de21b8d05Virustotal results 41.38%Heodo
2020-09-18LRC_090120_XGC_091820.docdoc 4e500dc20300e081376f4f6951330ba0b37700ae0b23ac5662a2e96e2cd9a755Virustotal results 43.33%Heodo
2020-09-1833721744.docdoc e6c59aa272b0319132af611954aba4331117e24c05ed652fdbf58c0ff36e991dn/aHeodo
2020-09-18REP_PO_09182020EX.docdoc 07d057a61d3df77ff64c6e81ebfa3e05ac6fb288ec8104f7b215032445fcd4cbVirustotal results 42.37%Heodo
2020-09-18INV_36216842.docdoc a41a3280f7e5710c654132cf7c3dc95d3411e4c7ae29028b10a25e5c2798fb9bVirustotal results 42.37%Heodo
2020-09-18LNQ_090120_XWB_091820.docdoc 844364fc7fd27d3f478237624a434b3255b9f564ed64e272e1935914ab559d9aVirustotal results 41.38%Heodo
2020-09-18REP_PD3663190224QL.docdoc 0799610f529d55ce947bf45710fe0607c9f5bbfab9a4cb346e6af91607c893c3Virustotal results 42.37%Heodo
2020-09-18U_FCV769A881LS.docdoc 3b752d71ed854f4870f70aab5782715daa51d69594c62f93c34e2f0ebba6f3bcVirustotal results 40.68%Heodo
2020-09-1813915559.docdoc 0411a8edd0fb791e01eeae0687331b988a6d3d32369d8ad9cca32229e4a4c931Virustotal results 42.37%Heodo
2020-09-18TC5012592309VK.docdoc 7b2741d8a1eefed939245c6e4fa381d3c3e0a2279397d4fb05f9f99c67a140f8Virustotal results 40.68%Heodo
2020-09-18INV_PO_09182020EX.docdoc 5f669eaa381cbe719de4bf1c0797e827639abba64b165820dc2186f68ab55552Virustotal results 40.68%Heodo
2020-09-18HQ_PO_09182020EX.docdoc efcd54dbe67c5c0dcbb01abfc3f21030c54a8834d7edcdfcf1144f0b49773000Virustotal results 38.98%Heodo
2020-09-18DOC_24701912.docdoc 37a0d9d6ec68559ded11b432a58dba6536644a809e72c3375dc0b656f78a4964Virustotal results 38.98%Heodo
2020-09-18BAL_3728698507278888932.docdoc 14d4a9b0fcaf5e4ca2f256c713a3d11328f128ce09841b02479238cd866b9f11Virustotal results 38.98%Heodo
2020-09-18L0K9WUMB.docdoc 4b4a38291be76ce02d9bd99092102eb3a5e0c9ee814e9fb7d6c3df32d24f6186Virustotal results 38.60%Heodo
2020-09-18HW7933361720AF.docdoc d0fbfd4dc83b404a1168591a1d4a52b1cb9da8f58c55e95719dc0199efe6fdb5Virustotal results 35.59%Heodo
2020-09-18066DS7LO.docdoc 1d55fdd4f6aa4b5c9cd2c2403b68667142a71582d3021724542c6c0582de0ce2Virustotal results 35.59%Heodo
2020-09-18NU9774576834DL.docdoc 44d0c90d842430656bb499c996d721b16d4ef131f92e3443c478d37beb0d43f2Virustotal results 23.73%Heodo
2020-09-18INV_WNMJQ5V0LJ4QHMW.docdoc 15c49ec4dc917425fbbe700b8f340f1d1629be55957693427600488b42eb5156Virustotal results 34.48%Heodo
2020-09-18INV_54776050.docdoc 84015141ee67fd7d83bb8c912c6b0b32a1caf9d27e65b62d47494985973d0c45Virustotal results 32.20%Heodo
2020-09-18VHZ_090120_UIR_091820.docdoc 1e3201bbb2deffb9ba87ab7c3c4a40d86a2453bd105b0bede74c0ede7aada9b9Virustotal results 28.81%Heodo
2020-09-18441357722755065.docdoc 59b07ee573d9567fe99ebe983b0641353a94c1584dbd8a330ce9a1b1ead621dfn/aHeodo
2020-09-18INV_PMTXWZ42OG25TS7P.docdoc 03dc985b52725fd858b9aa8c59742e209b646a9bc6d49f57884f15a187e2bc3dVirustotal results 24.14%Heodo
2020-09-18REP_7558322505198804228.docdoc 2121c5bc91b394da5845d8effc92948979f57c4bf252ffd09451fda76e1c273bn/aHeodo
2020-09-1812KUD3O3B5.docdoc b58b532ed578092ac8a863ccb0eca5ca78a76c32aaa672f253524fdad31ca12cVirustotal results 20.34%Heodo
2020-09-18DOC_ZNL8W5INGU.docdoc 83676faad35894bb04262d898f1279995a52ca4f91f343223e0403b6c915311eVirustotal results 49.15% Heodo
2020-09-188540415081684540.docdoc fe543bf25849e02f9c6cdbb37ffcf838eddcff1effb9dea466557fabb673bd20Virustotal results 50.00%Heodo
2020-09-18PO_09182020EX.docdoc 0ee056bc50491229f8d2446fcc124112ae7ca2705f26aaa207e11537c0872e13Virustotal results 50.00%Heodo
2020-09-18REP_LH23WG45.docdoc 01dc05c389198097e73f0e51d7e1ea7d9038367c30cf1e0408129374d3ed7db3n/aHeodo
2020-09-186CRRHQZV2.docdoc af0e40cc260afaf98685419c7a7e2a7bb5071876da22daeafb069c208b8a9ff1n/aHeodo
2020-09-18ZYN_090120_TDR_091820.docdoc 8f5dd0f7d3c0f356a4a2cd39351f11b5be1e32ff16162229fff6548dc8ada245n/aHeodo
2020-09-18REP_PO_09182020EX.docdoc 8780a28bd25c92af4f9ad2f7a4b99acaa81ae7f410964f7155f9b69037cd2c15Virustotal results 48.28%Heodo
2020-09-186WN3GCD2VUO4.docdoc 72a840be472b024fe4cd2e80a56e9a80988be7d4f16fa5df74eed66262615262n/aHeodo
2020-09-18G_02339393418177035617.docdoc eaf897448ba42c47e03919da87640483febb9e38c0f457471d5b91d0bd6b99e7n/aHeodo
2020-09-18BAL_ROFFQ0D6.docdoc 1121962d0a0d52780b13618c7cdcc2916ea8ffdcccb17ae0e54e0b9f8799c5ean/aHeodo
2020-09-18BAL_527416886955385137086.docdoc db5b2b2884b15b7c147a886a252cc856516d36b4c8fb587dc9a46063f39153a1Virustotal results 40.68%Heodo
2020-09-18FILE_PO_09182020EX.docdoc 7a087796ba52981da1f8e06f79b5bd1bdebeb961afe1f01af7864edfe071712eVirustotal results 42.37%Heodo
2020-09-18BVE3MOKAEQ.docdoc 3c558e63407682d8fee665283a24bb73c5839f85317215925264c1b15071b061Virustotal results 33.90%Heodo
2020-09-18INV_PO_09182020EX.docdoc c77851ba151f09f555db36179250d20da6817e32999215d3ba13dd47898e8fa5n/aHeodo
2020-09-18DOC_UW3242352160VF.docdoc 4b9a2688db3fd6465d84ee5baf9fbdf6c50772a16d3e7c265c758ae284e8a63dVirustotal results 37.93%Heodo
2020-09-18INV_EFV_090120_BFR_091820.docdoc ed98997bd450d0c8f1285f0677f4735e52e35f8504b6ab44ca0af91650f29ac4Virustotal results 36.84%Heodo
2020-09-18REP_NLJ_090120_NQZ_091820.docdoc 6e221be1094865f6f92e91e222da06c0cfb67ce691d0bd25afb4b4324bb05714Virustotal results 36.21%Heodo
2020-09-18DOC_ZV4057309098JH.docdoc f6bd46837e705aee39428d412f28116876f6351e1148b7ce01d5e1848b7d0061n/aHeodo
2020-09-18REP_PO_09182020EX.docdoc 4a6e1fd8e8858273824ae02adbef685cf16079c6baa36e1ff244a6b93db151b8Virustotal results 34.48%Heodo
2020-09-18IW_33627820910.docdoc fa5d401c1fa37a461f925c0ac23b8d1864c0081416c0b6494f9ba40ad25851eeVirustotal results 34.48%Heodo
2020-09-18INV_993933048038139874.docdoc 5c9ee841d3f2ca4934e2df7970319d3d7eaa875a68f3df8f691f19191fd138feVirustotal results 36.21%Heodo
2020-09-18INV_NCB_090120_NUS_091820.docdoc 6098ea8b508e01b7b777f7e9ae9b62e69f4e95a1bf8342c4d7ad98e5559d70d1n/aHeodo
2020-09-17FILE_4394053539631.docdoc 12412cd6a77f4f37c4af299317f54c6e10deb114a14d2ed1f0de95a3f8466b51Virustotal results 35.00%Heodo
2020-09-17RI1831646658ZR.docdoc 074d30932dc73bf17312105a7a4a157bd6cd44f75ce2cd67026282c6bdb3b21bn/aHeodo
2020-09-17Y_TS7716849524MQ.docdoc edee77f468412b29903ec095de648b2214e471174deffc438b41cb18fed1058bVirustotal results 33.90%Heodo
2020-09-17REP_Q5TV3NRFW1IN5S.docdoc 30a0aafbc20b823f768e9269e11b9794bc842a0a27daa52f1b09d0f8e87895b3n/aHeodo
2020-09-1719513817991.docdoc 18921283b9df87bfd574d3b19108c1b987dc19729196d6d54235ec8c102b4e1fVirustotal results 33.90%Heodo
2020-09-17INV_2DAL9YOR47L.docdoc 12d6b38f752ecea5e77fa8c3623f322427bd77fbe3070efe165d432a739f4bd1Virustotal results 33.90%Heodo
2020-09-1708044010848396251.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo
2020-09-17BAL_78238533.docdoc 09da007d427399a8878436226980680d7b93a39388023f1a70151a5fbcf16694n/aHeodo
2020-09-17BAL_35621844.docdoc 06d9b578344c156e8ad071f393393ddb23427ac4c5f2ade6b3fc90ef34da7031Virustotal results 43.10%Heodo
2020-09-17FILE_NB2399865195YM.docdoc 0b2362700a49af3797e3a32128e561ba70c171de8406a65e5290362ab574c31fVirustotal results 40.00%Heodo
2020-09-1716636173257089150.docdoc 54e22118b677aadbd92103152e9eb98f6a37c701dba7fcc87067d84e124d0ba9n/aHeodo
2020-09-17SLN_090120_SMI_091720.docdoc 28e0ec9faec8fb63dd3210568b84e14423b5bfe6e353859a2da0fadc23b3e8ddn/aHeodo
2020-09-17N_97808801.docdoc 55e876b6274746f9d8486bee3ae8b45b9fac29272c39e6d09ec38a93903d3decVirustotal results 35.59%Heodo
2020-09-17PO_09172020EX.docdoc 14650f22ccd9ac8f4effcb6415afc3ee21a1a681e0d621888dd3e28a30e9e237Virustotal results 36.67%Heodo
2020-09-17L_NI6944037128WS.docdoc 4988159f7deee6fa12b723aa0158f06c3e3b77034a97827b39e69ffa5c2b8d16n/aHeodo
2020-09-17G_PO_09172020EX.docdoc 17dab688841a1d907eb36a0850b082eac66fa7d5d3ce3d213033c08b3613e60aVirustotal results 31.03%Heodo
2020-09-17F_1024329587618.docdoc c6dcfa2a31a094225c25a0d53cccd915b76ab34be20b10fc775d740b3e6d9b21n/aHeodo
2020-09-17GCSK_506422861878925.docdoc 437bd5f99ce1bef9914ea519c89cebb01cdd47fa38a3118f59c850b469953465Virustotal results 32.20%Heodo
2020-09-17BAL_V04GF47VBYDQKU4Z.docdoc 8b081a09069960c73f3ed3a1535f10fc2f69885e61ff050e9a22b2d471bca7den/aHeodo
2020-09-17BHS_1HJ0DFK4.docdoc 3b200de37642bf547fd1238ca87c19bb62a4b13de3726d275d70acdd2f7bd4d9n/aHeodo
2020-09-17INV_PO_09172020EX.docdoc ad55f28a8afc74e7d12b0862d1efc14cccb40e3ff5a2faff1b30c26d2cba6d17n/aHeodo
2020-09-1749295433.docdoc cd11340f54374039a82b315dc4084c5a2f7f8ee0fa6c1960de673c0a400f86f0Virustotal results 32.76%Heodo
2020-09-17INV_ZDK_090120_SVR_091720.docdoc 24d870441096e99a67d348025f42e44c531b85ccc3a98c5f138e666ec44dcb46Virustotal results 31.67%Heodo
2020-09-17INV_PO_09172020EX.docdoc d6780dd989cd52d8f8db998fedd1bdc4d5b52c738e0850db64c96310eddd7c1an/aHeodo
2020-09-17X_GNM_090120_DYL_091720.docdoc 0424e4caf10c9b8b80f3114816b85e8268b9a288eb368e1ce66e6ab8e5b73b75Virustotal results 36.67%Heodo
2020-09-17FILE_73938053.docdoc 27eba47f653b19797edea37d8dbf75215328081ca3b6abb42719eb226a877a5dVirustotal results 30.51%Heodo
2020-09-17TAC_PO_09172020EX.docdoc fa191cce995bce7e56b494fa94b13859f68f274e86a7aceadbac93d6778ad84bVirustotal results 35.59%Heodo
2020-09-17FILE_ZRD_090120_LBK_091720.docdoc dd730a186b979cc083c88419bd457f1ad9a0c235f8ac5c7552b4b9d24fb9db2dn/aHeodo
2020-09-17DOC_1630563487902386131790.docdoc fb1da662dff89db69ca276e03a883c96c5089932488e637ff60637aa73d876b6Virustotal results 36.67%Heodo
2020-09-17DOC_CUM_090120_XXK_091720.docdoc 00f42d9a9acefed89581ed82845dd70bf86cca472f771ac1f7ca4bf48e7b2274n/aHeodo
2020-09-17BAL_17452796.docdoc a3efdad2ea2076e2a90cd4c401817a6d4e0dcffca6f825af796416755a6fb7e2Virustotal results 30.51%Heodo
2020-09-17LD0107304580VR.docdoc fd0f987936c01acfb91bb84e9e9c3e6f425f55d07887f14ee595ec418d252849Virustotal results 40.35%Heodo