URLhaus Database

You are currently viewing the URLhaus database entry for http://bhar.com.br/caurina/5UZ5Mesyq1J/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:560777
URL: http://bhar.com.br/caurina/5UZ5Mesyq1J/
URL Status:Offline
Host: bhar.com.br
Date added:2020-09-18 21:13:06 UTC
Last online:2020-09-22 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 21:14:06 UTC to abuse{at}hospedagem[dot]net)
Takedown time:3 days, 18 hours, 3 minutes Bad (down since 2020-09-22 15:17:45 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19Dat_T14575.docdoc 4cd1338ce62760cd78c5eeb9a795195c5801a562e6adb2d0f0984640a5719bc3n/aHeodo
2020-09-19UNTITLED 2020_09_19 P6951.docdoc 4a9b7794b446b3948e75da5f390b3cfd4764afe8d48109c42ef37606f5b4f572Virustotal results 32.20%Heodo
2020-09-19rep.docdoc d91d3355ed5c4d2b1c8a1577424bb71aa3ef224770b4d5c01dd7703a4c329eceVirustotal results 27.12%Heodo
2020-09-19Arc-J2937.docdoc 17b333cc6c291651161d6bab9f62df4f89a31b13b8b8db8722c6e6d069d1bc30Virustotal results 22.81%Heodo
2020-09-1967320945-20200919-F177815.docdoc 614c62ac24ffd787e87c3f0be186188b9c87530dcc81b1559e388c1e06d1e2c7Virustotal results 22.03%Heodo
2020-09-19doc G3245.docdoc e4873536ba7b163dc9a87dd2dc7d447b502e63eaaebf88fcf4635d423772db47Virustotal results 22.03%Heodo
2020-09-19ARC 20200919 A616.docdoc f5ca634bdeacd64ccc52ea932bd221762cc68524fcef2df96c77ecd777d16670Virustotal results 22.03%Heodo
2020-09-19EO6285 2020_09_19 614794.docdoc 0b58ba1859d47221ab95122240157d9d4bc885723fb94b700f1c36cb28edf3c6Virustotal results 22.03%Heodo
2020-09-19Dat_20200919_60118.docdoc 0d6380a49e7088513773efca368acb3a783954a2d4df49ea9b730c9e49969458Virustotal results 23.73%Heodo
2020-09-19List_2020_09_19_1532.docdoc 000dd08101567f408a0ee2b7d095d3baa02f532ed3839f66b60b9d64ce065d17Virustotal results 22.41%Heodo
2020-09-19Attachment_2020_09_19_119.docdoc 906eb841dd00ed7c09bdb5dc7c0d3722f6313536e45201301a2db07d0fe04beaVirustotal results 23.73%Heodo
2020-09-19doc-20200919-2062.docdoc c358d536ae6f128e4d3e87de606603d1eb16268041e18e130fac19804fb21de4Virustotal results 23.73%Heodo
2020-09-19list-2020_09_19-NRT466155.docdoc 606c981a35630090fe7df6ea2bd78be7c01eb20f5d266ba2432b209e9bf26eb8Virustotal results 22.03%Heodo
2020-09-19Doc_20200919.docdoc 9ad2fe8f74ea62256c9ad4c199d69c91b8c76f9a605cb5c038fcbec9d0e85054Virustotal results 22.03%Heodo
2020-09-19dat_2020_09_19_431290.docdoc b7b9257d8c50f28e5aa87090083acecd0359655c255d52dd1030c0375097e0e6Virustotal results 24.14%Heodo
2020-09-19ARC 20200919 047300.docdoc cab5f70f9a6d1f300828e8c715696273befca7a141ca5e75b69b5a408ee432b2Virustotal results 30.51%Heodo
2020-09-19Rep_VV014079.docdoc 7914bb6c3d6664a065cdb3f06cfc21a7f85fd7423e3b5af3468245d1f03edf5cn/aHeodo
2020-09-19Dat-2020_09_19-73009.docdoc fca26f8a9f6995a0a5dccd24f54b77b3d5c855fe48084f99f9b2da3382f88c2fn/aHeodo
2020-09-19IC430 20200919 740160.docdoc 9f038a3f8faa7d88948648de22b5ab1fdd3cc1d598fc1125ff950daa9fadc4b1n/aHeodo
2020-09-19Mes-S682.docdoc c67445bd4a7a3846de10ecccfc8117f4c144d3c2cc2ed29bbd934d3e06dd7e9bn/aHeodo
2020-09-19Inf 20200919 DEI025952.docdoc 006e64b6cfe2567e6bc6685453e8009b6b2bee02a0ce99713266b04087241d0cn/aHeodo
2020-09-19rep_2879.docdoc 0e7b7cc13660693acc3ac77a1ba7b6128c10bfe810eecb4d67f8b315e94c047dn/aHeodo
2020-09-196539 191.docdoc 678355b541ffa2eb21d7b767a9e6039f3447aaaad39161002cf3b66c1d44c1dcn/aHeodo
2020-09-19doc_ZS3394.docdoc 1f4636599b3de756ee92e6c14346ceabf27b76d2b45abe64d1d9f48f0e4c3bf9Virustotal results 22.03%Heodo
2020-09-19Doc-2020_09_19-234.docdoc 4186791608fe67e3dd4a2f61f52ed52ba67c4d7d75996cbf27f8379a44509f18Virustotal results 22.03%Heodo
2020-09-19Arc-2020_09_19-G32380.docdoc 75e37e5c3591743af109482748f2a48e550f1a9d767316a8cece66fb4fe8c222n/aHeodo
2020-09-19DAT-2020_09_19-GO106325.docdoc 9e398469dae4d767b068930ed48a2283bade08114e66f158454ede4cf08d5bcfn/aHeodo
2020-09-19inf_2020_09_19_CLQ797.docdoc 7da90a568b11f5619217fc3f607646d3fba7a56ef64303b2ab72b8751d9308fcVirustotal results 22.41%Heodo
2020-09-19File_20200919_91378.docdoc 6584db21f3b24953242d8d42e4ffa62e8026aebaea9f5c6b5cae066f4c279370Virustotal results 22.81%Heodo
2020-09-19171914-2020_09_19-O22478.docdoc 23c8490e131915effd12a2adf737b6fb74515b1b54759d0bb237eb7392338c08n/aHeodo
2020-09-19MES-20200919-2697.docdoc 9b15f15ca0fc3748ef3b9f9a91bae081e2b5c076d1b39e7e16cfbe3a08cc5070n/aHeodo
2020-09-18Untitled_20200919_ZI532.docdoc 3eb7679ffcb5eb0cd537545d2e28ad49fdb4bc89366476f731659703b6707ff5n/aHeodo
2020-09-18mes_2020_09_19_XO395548.docdoc 7e37d762b881d0b1d6897e3d3c7ae449bebad8d250e6573923944ad8c0c22c28n/aHeodo
2020-09-18UNTITLED-20200919-KJ916525.docdoc df50fc4b87844f590011e4655d981e4aa7d498dec2d0940b554aea8538567352Virustotal results 22.81%Heodo
2020-09-18Doc-20200919-0341885.docdoc f56906e33a9a9bd3b074b3b5c24c2e98ba58817c4c61452977054f27d0d9312dn/aHeodo
2020-09-18list 2020_09_19 GF6426.docdoc 8750d49fc1ba34c16ce392d088b1843101a6669f5407b567c2dff708351b81ccVirustotal results 22.03%Heodo
2020-09-18DAT-X71368.docdoc bad0da6e5c3252214e74c5ebd3ebca1b19331a5dc3c62d1b0c400f8ad73303a7Virustotal results 22.03%Heodo
2020-09-18INF-20200919-3740961.docdoc d28151cda4058aa8e8c1175ab6fea760c7c6812f758570a50fca1ad2b52eea2en/aHeodo
2020-09-1814454ISA-20200919-UXE63295.docdoc bccc6031b088f432a5b9d9303eceeb6d9ba9da4ec4f85997f393f67e2d552819n/aHeodo