URLhaus Database

You are currently viewing the URLhaus database entry for http://figueiraseguros.com.br/default/En_us/Past-Due-Invoices which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:57268
URL: http://figueiraseguros.com.br/default/En_us/Past-Due-Invoices
URL Status:Offline
Host: figueiraseguros.com.br
Date added:2018-09-18 06:23:16 UTC
Last online:2018-09-18 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-09-18 06:24:21 UTC to abuse{at}hospedagem[dot]net)
Takedown time:14 hours, 14 minutes Good (down since 2018-09-18 20:38:30 UTC)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-18Customer No 236391.docdoc d9399fb7b2baa7dc5cbe0c77349f9d4322c4d959fbab41380a72e127b06b8456n/a Heodo
2018-09-18Review invoice required.docdoc 9261dc4ae5f52e5bc5763d6b19d3f6dfc1b477443a529be859b5768c5a5d0645Virustotal results 39.34% Heodo
2018-09-18Billing Invoice - Job # 1550644.docdoc feee8acbcc3930f549e0904cc9ea8c2b949d504bfcbde901f78f5aee90371218n/a Heodo
2018-09-18Statement as at 18.09.2018.docdoc 5f93473fe6c92cb4f153dc02396406cabf83cea5aef104213e7fbb077296ce96n/a Heodo
2018-09-18Outstanding invoice.docdoc 32672ba948b154df420ba14abb99948d5b1337f0782e1701e08e52c4457beebcVirustotal results 29.51% Heodo
2018-09-18Outstanding invoice.docdoc 32672ba948b154df420ba14abb99948d5b1337f0782e1701e08e52c4457beebcVirustotal results 29.51% Heodo
2018-09-18Statement as at 18.09.2018.docdoc e7c72310e11de330478d8c7e16313f08e341a411c3fd3357d6df41afe14a4f0bVirustotal results 34.43% Heodo