URLhaus Database

You are currently viewing the URLhaus database entry for https://comercial2001.com.br/hts-cache/OCT/CIiYkIJiHJPO8qHWg/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:586501
URL: https://comercial2001.com.br/hts-cache/OCT/CIiYkIJiHJPO8qHWg/
URL Status:Offline
Host: comercial2001.com.br
Date added:2020-09-21 13:59:36 UTC
Last online:2020-09-21 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-21 14:00:31 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:1 hour, 54 minutes Good (down since 2020-09-21 15:55:14 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-21FILE_2020_09_21_CLP843606.docdoc 70dbc4cb021488253faec5d8447c680d8bf7285fe74e0728c0c8051719877104n/a Heodo
2020-09-21File 2020_09_21 N62633.docdoc 5532e7441feb84ff86270beee49a0add1600e5a88a0edab8e37ad5e9db16c29dVirustotal results 25.86%Heodo
2020-09-21MES 174336.docdoc 5bbc50e7511d96f3499f30c3000fa522641f4988ac06bab6016fe595a5f31ef7n/aHeodo
2020-09-21Inf_20200921_I851.docdoc 012c334db958a84f1f475fe44c1a86195a783c7701b6aadeec5c06b539158fc8Virustotal results 23.73%Heodo
2020-09-21doc-851.docdoc be9ecab012cc1458f1122eb7bea407629129263e22b0606c4c68046b82f55eden/aHeodo