URLhaus Database

You are currently viewing the URLhaus database entry for http://montegrappa.com.pa/VzEQMY/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:58364
URL: http://montegrappa.com.pa/VzEQMY/
URL Status:Offline
Host: montegrappa.com.pa
Date added:2018-09-20 17:20:57 UTC
Last online:2018-09-29 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: JayTHL
Abuse complaint sent (?): Yes (2018-09-20 17:22:08 UTC to abuse{at}godaddy[dot]com)
Takedown time:8 days, 6 hours, 40 minutes Bad (down since 2018-09-29 00:03:00 UTC)
Tags:heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-09-2170381.exeexe 3872fe724cd0bfa89781c747599e3ce5543049c754d6b4f2584e972e83d0e007Virustotal results 29.85% Heodo
2018-09-219396795.exeexe 28ec07a3128488a936f422a9da3a6ab4832697a4637d22249935f9c4fb500d04Virustotal results 28.36% Heodo
2018-09-21044348.exeexe 3624a652bf1d82ed48922e09d8a23151f9b3e4a1a43f5d67213929ee1ec2e927Virustotal results 32.84% Heodo
2018-09-216.exeexe c5df7114c70be49859a82aa0b594ee825e495967217bb3a54c37d5d1ff8d7ab1Virustotal results 27.54% Heodo
2018-09-214.exeexe d316d8cd0398faedb6b875db1749ed3701a1fc12e5f9f354cfc089b6bf3b89aeVirustotal results 30.43% Heodo
2018-09-2124.exeexe 78d1b89deb07aa95bae63cf114c9f780482dde1e2face6246092f6d410d1a2a7n/a Heodo
2018-09-205239.exeexe bb894a7b03081d81830aca9f36b4a4e59b737dea2be3ee08053ef6851503d9c9Virustotal results 18.84% Heodo
2018-09-209551.exeexe de7b8b4de51d9009cf9aefa723b0fbbb3f03dba45eceef645c93944d31d391ebVirustotal results 16.42% 
2018-09-2054968126.exeexe 29917a77f6ae29440a95ec64b25ea3e1ea594a235500d63bec3a49d373e5fcd2Virustotal results 21.74% Heodo