URLhaus Database

You are currently viewing the URLhaus database entry for http://nettube.com.br/img/Documentation/e3ggeb2hyb/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:560969
URL: http://nettube.com.br/img/Documentation/e3ggeb2hyb/
URL Status:Offline
Host: nettube.com.br
Date added:2020-09-18 21:31:14 UTC
Last online:2022-08-24 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-19 05:30:03 UTC to abuse{at}algartelecom[dot]com[dot]br)
Takedown time:1 year, 11 month, 14 days, 6 hours, 29 minutes Bad (down since 2022-08-24 11:59:21 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19E30LUVC.docdoc 1f267368325cfd8a9665680a987d4b866cbc949478dd3d8485e357ec821295f3Virustotal results 50.85%Heodo
2020-09-19SJNP_59827851.docdoc cda0f300f10989d730a1ea43471dfadb97cb10e13a73fbabeb565b5fbfd6bc30Virustotal results 45.76%Heodo
2020-09-19MAPL_PO_09192020EX.docdoc b1be0fa6951b0252445d71a28ba08ada17974551790e1c61194c013249c97425n/aHeodo
2020-09-19REP_UF6ETEBRECM69.docdoc ca453113011d23c6e8b95d9ca6c1b36fe27cec37139b376a7f9fd7f2a665d42fVirustotal results 49.15%Heodo
2020-09-19BAL_PO_09192020EX.docdoc 4fdb1e6203d6e04a6229d129f4087b311a3824e7fc345b00b555b9593f6f9adbn/aHeodo
2020-09-19REP_PO_09192020EX.docdoc f29d80209cde1118a9399b3937016f28ff68863180d6f36ef6d55fd099de06c1n/aHeodo
2020-09-19INV_BE5107546865CE.docdoc f45366fd48bfadbe704572fe3f559494d82fc82a99673cf792e760777f56ece1Virustotal results 45.76%Heodo
2020-09-19DOC_PO_09192020EX.docdoc 87888ab358912c8c811b942e25e6e58df8ad065a33cb1041ae790d60cfad79den/aHeodo
2020-09-19INV_XA1618901130JC.docdoc 5f38c1fbef4f42be0184fb63effb0a6d953cbb55009cae9ade7e21c580ace133Virustotal results 35.19%Heodo
2020-09-19INV_PO_09192020EX.docdoc 085e7e7f6527b89c4e08c3a4094c41e50f2f10bf83f6f38feeeb5291f9ae9491Virustotal results 43.64%Heodo
2020-09-19XVZ_090120_ODG_091920.docdoc cc21dad99db9fe14ebb5e963372e9b2bb57c453683119891b367387d06f812edVirustotal results 40.68%Heodo
2020-09-19REP_PO_09192020EX.docdoc 283fa803d0bcd99ac43b6d04b267e8fe8de71ea98d41f73ff426fc27fcba6dc2n/aHeodo
2020-09-19ZNO_090120_FNQ_091920.docdoc 3c2d30dc81db1b5fd85d00649cc0efb7f00b2be6a2a8be88fcf3ab9e627c346bVirustotal results 33.90%Heodo
2020-09-19UERT_13007498.docdoc 0549a96b45be7693d38af5e4063355260635db3e33191b92e82e43c49eda7901Virustotal results 38.98%Heodo
2020-09-19BAL_PO_09192020EX.docdoc b837078057329148a35e96ef42c7c83e16fd7f203fa7f1f225fc1a42246349c2Virustotal results 36.21%Heodo
2020-09-19INV_15CQED8F3.docdoc d59d39c60431ec6eecee3ee2b23f4ef8b22020fac5da115f07105432a953fa09Virustotal results 25.42%Heodo
2020-09-19DOC_741357330.docdoc cdb7ce8fb7effdc8c98c363838bd824c3fbcc6a08290601a0e6027f1c6faffddVirustotal results 25.86%Heodo
2020-09-18INV_PQ6539169917LZ.docdoc ec0a9a535ccb576248f4c7900428f2a898853aa83d6cdff165a23414125d8a68Virustotal results 25.42%Heodo
2020-09-18DOC_24378184.docdoc a89a3fb97be7cefc4d26bbdfb463943abc4b7a4ad8f448b559cabed432592458Virustotal results 35.59%Heodo
2020-09-18REP_PO_09192020EX.docdoc 86c2a46361bb27398793003ff2619e6242bf0e8de2c5d895ed923f766d40b7e5Virustotal results 32.20%Heodo
2020-09-1871934941.docdoc af7a05d648d4175f924ff2431748c2bf40e15eeb256d2135bfeba80f4adbd149Virustotal results 24.14%Heodo
2020-09-18K_IJ22MQ4Y.docdoc e6efa97f9a08f01b78d5a5e02d3ef06892f126a52bacb798cd5546dbfcb5e139Virustotal results 28.07%Heodo
2020-09-18HBNC_PO_09192020EX.docdoc e767562438c04ed2d3dee57114d125b4446278c036106d12eb8e7fd9d9a93940n/aHeodo
2020-09-18FILE_PO_09192020EX.docdoc 4a0e1fa1af2997f150fe806a7ff482e45c83132a101a0808e8ced6e543de770aVirustotal results 34.48%Heodo
2020-09-18379IEK0F.docdoc 6a500490be1db393b419c4d2dc1bd43557bd87fe40b7b996037834fb137d8d0eVirustotal results 31.03%Heodo
2020-09-18PO_09192020EX.docdoc f5fb5d637a37ec6c6c5288f46bb6ad3cb9559037f8df024aba1f9bde1d477a4aVirustotal results 42.37%Heodo