URLhaus Database

You are currently viewing the URLhaus database entry for http://montegrappa.com.pa/VzEQMY which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:58189
URL: http://montegrappa.com.pa/VzEQMY
URL Status:Offline
Host: montegrappa.com.pa
Date added:2018-09-20 06:38:09 UTC
Last online:2018-09-29 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2018-09-20 06:40:11 UTC to abuse{at}godaddy[dot]com)
Takedown time:8 days, 17 hours, 24 minutes Bad (down since 2018-09-29 00:04:33 UTC)
Tags:emotet link exe heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-2170381.exeexe 3872fe724cd0bfa89781c747599e3ce5543049c754d6b4f2584e972e83d0e007Virustotal results 29.85% Heodo
2018-09-2137639.exeexe 28ec07a3128488a936f422a9da3a6ab4832697a4637d22249935f9c4fb500d04Virustotal results 28.36% Heodo
2018-09-213143.exeexe 3624a652bf1d82ed48922e09d8a23151f9b3e4a1a43f5d67213929ee1ec2e927Virustotal results 32.84% Heodo
2018-09-216.exeexe c5df7114c70be49859a82aa0b594ee825e495967217bb3a54c37d5d1ff8d7ab1Virustotal results 27.54% Heodo
2018-09-2153575790.exeexe d316d8cd0398faedb6b875db1749ed3701a1fc12e5f9f354cfc089b6bf3b89aeVirustotal results 30.43% Heodo
2018-09-2142164.exeexe 78d1b89deb07aa95bae63cf114c9f780482dde1e2face6246092f6d410d1a2a7Virustotal results 18.84% Heodo
2018-09-2134772184.exeexe 34755b59268ff2443a7c0a01941a2beb5bd1f0f13a5719cf2b94bccbb99046d1Virustotal results 18.84% Heodo
2018-09-205239.exeexe bb894a7b03081d81830aca9f36b4a4e59b737dea2be3ee08053ef6851503d9c9Virustotal results 18.84% Heodo
2018-09-2054968126.exeexe 29917a77f6ae29440a95ec64b25ea3e1ea594a235500d63bec3a49d373e5fcd2Virustotal results 21.54% Heodo
2018-09-205.exeexe 775c6e705f49f3bc5c3afb95fb3e383b0b55260298efb91a02fcfee7003f3bd3Virustotal results 23.53% Heodo
2018-09-2068.exeexe 168812f3a6316d7d2db78924d0f0019d8700d4fd8f672f0ff0ca9e296b1dee18Virustotal results 23.19% 
2018-09-20787579.exeexe 39e8d93e086a2e29401f1d7d6747742bee362d9600de7f69ff7cfd72509bea48Virustotal results 17.65% Heodo
2018-09-2052915071.exeexe 98f66f74344f65bcfe59e888252dd9327b6e01a81efd8bb909c621cd76ea0476Virustotal results 22.06% Heodo