URLhaus Database

You are currently viewing the URLhaus database entry for https://edutt.com.br/wp-content/Overview/qcv4MBIR5jM/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:559791
URL: https://edutt.com.br/wp-content/Overview/qcv4MBIR5jM/
URL Status:Offline
Host: edutt.com.br
Date added:2020-09-18 19:41:05 UTC
Last online:2020-10-07 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 19:42:10 UTC to google-cloud-compliance{at}google[dot]com)
Takedown time:18 days, 16 hours, 51 minutes Bad (down since 2020-10-07 12:33:45 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-21FILE_2020_09_19_W595534.docdoc d28151cda4058aa8e8c1175ab6fea760c7c6812f758570a50fca1ad2b52eea2eVirustotal results 55.93%Heodo
2020-09-18Untitled_20200919_Z36602.docdoc bccc6031b088f432a5b9d9303eceeb6d9ba9da4ec4f85997f393f67e2d552819n/aHeodo
2020-09-18List-20200918-WU34536.docdoc ca8696eb2a7a3679a7ae16ce3c6032ee9f69cba3cfa7aa47d9dabeaaccdb137dVirustotal results 28.07%Heodo
2020-09-189891 G59908.docdoc 6582b37fd7a1c9ef797e7f6db679df941000a9f14475cff833abe8d4b78e51f7n/aHeodo
2020-09-18arc-2020_09_18-IX7753.docdoc 1d188489aa0c86820ef03aef6d4c6737367a5872ca87080c9fb14670099d756dVirustotal results 31.03%Heodo
2020-09-18dat_299650.docdoc 799cf64025403edb028118bd2dd2cb46f0af67fe2bc92310035fc1389e1f4bc3n/aHeodo