URLhaus Database

You are currently viewing the URLhaus database entry for http://tfbauru.com.br/cgi-bin/6Rz6fraVUF/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	597896
URL:	http://tfbauru.com.br/cgi-bin/6Rz6fraVUF/
URL Status:	Offline
Host:	tfbauru.com.br
Date added:	2020-09-22 15:15:06 UTC
Last online:	2020-09-29 09:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2020-09-22 15:16:07 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:	6 days, 18 hours, 40 minutes (down since 2020-09-29 09:56:24 UTC)
Tags:	emotet epoch3 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-09-26	7U.exe	exe	74fb744cf4f40a7dccef03e89144a7b069174a78cbbdf6c9cea4c3a87d201fd3	40.00%	Heodo
2020-09-23	5d3yzdkeeCqC.exe	exe	7810e26352d47003d56d46dc767f542e76277ed4961f49c18268ba495d79d43f	n/a	Heodo
2020-09-23	TmGSk30ZurIxhOns.exe	exe	876b4bf41937d8fc1087973945333107a21325038c5871210c21e677fa2d970d	15.49%	Heodo
2020-09-23	7hjs6GJ9lmrt4I1.exe	exe	cfa55e1fe3daf918ac9e7d065f7f0a8e57301b700d8b8df57f8530db17e37cca	n/a	Heodo
2020-09-23	xQUOvGc4nDTx4XdVOPb.exe	exe	5db53e3646d292cb5936430d0dce04fb9ec594bce14136db14804df27783cd47	n/a	Heodo
2020-09-23	WvlA1pXGSZ3aG.exe	exe	631eb7d2023469d937a9b38b7f60c2a121e44cb4db7ff0951a0baefcaa6e8bf1	n/a	Heodo
2020-09-23	tZVW3zhMdzTiy22xNG6.exe	exe	96fb367700ca895613fb73f83773272beca5a979a7905e793c4572dae6926aba	n/a	Heodo
2020-09-23	JEiHCItvCzRf13bm.exe	exe	0727d784983dfacc783faa78b4c4095eaadfba463b32587466d85681cdad19bf	16.90%	Heodo
2020-09-23	8SL9xkM.exe	exe	ad536f95ab1be26b19aafa1b700f8cee6bd60fb1324025610f110eaf16c95995	n/a	Heodo
2020-09-23	oeyXdAaIjI.exe	exe	ee6784a0394e439b8d936885cfae3f7c8dbe2df441c79e5874e1f98a7ee11b2e	n/a	Heodo
2020-09-23	XX94lKa41.exe	exe	5e53218e72d3cb799d3b011c2300db466073463bea2d6152c1d5d93eda374565	n/a	Heodo
2020-09-22	O2aiiC2F5iNv5b7enq.exe	exe	82cd0101f7341f50a59f30800326a6d0efd6463d1a069e599303fd6a0f4875ef	n/a	Heodo
2020-09-22	3spMnaob.exe	exe	e1cf07dc72e75dc82d7ddc3b817ff5ca177030d92ee07972ef28828e61501fc4	n/a	Heodo
2020-09-22	ZgfTdr49YDvpp4U7.exe	exe	ae2cfd339abd9a526ab202058b691689bfe5248037074356df6b18e0b4377f0a	n/a	Heodo
2020-09-22	DnA1cQ71sJ0rV7.exe	exe	e036bb64131d0fdf9ac088ec4f1bff3bda6e19b794e08e0017a06297665da89c	n/a	Heodo
2020-09-22	cIAcrwsQc.exe	exe	096da092fcf218978e08a36fcea6a2bdf46e059ad6bfa0f0add3ac18fe135e1f	n/a	Heodo
2020-09-22	rNTDP9RH.exe	exe	7a7430902ff7c267512c330aada4ed9d970e57900086da580a8a85e620cd6fd7	n/a	Heodo
2020-09-22	uBAPto9mHH7.exe	exe	13e3f211648d8ba3af19df75a296351684227a731731b2843fb8f0d304232bf4	n/a	Heodo
2020-09-22	ywM5gdbAwmSI9r.exe	exe	504a036576a6fa11534de1f4fded132061a202c5d045bf82e753aac75e2702a3	n/a	Heodo
2020-09-22	WNGVYRm8.exe	exe	66cbf63f7d2f73d5e8174a207664e0c9bb299273543ba33158fb67bafdf714c6	12.68%	Heodo
2020-09-22	kiZRYxBL7DYhx20lrJHH.exe	exe	006af7c46cf6f5e86809602ed212969830db18cb20df245dca877e25e276b4b2	n/a	Heodo
2020-09-22	A2Ru11WY.exe	exe	7097c4131ea68a660c5f5b6e71900c46a40515d69ae0a52c9abe35567ce3f012	n/a	Heodo
2020-09-22	sPSPJJOhTTmgPUnNDIZD.exe	exe	9c4f6ef5f2e764f35c8b0729a9f24d1aa8823b3a3df41b20ae8ef8437b745902	n/a	Heodo
2020-09-22	FzHm4aX.exe	exe	fc2d4079b126c1b9c30f3fc01adfd6edbe6d9fe49fb03b5576aa2e59a78eb33e	n/a	Heodo
2020-09-22	NYXAN31ZstQgW.exe	exe	aae25bddcb865af38d262aa26e01e78af76cdc2f782b9633595a7e4e33e99ec4	n/a	Heodo
2020-09-22	FKs6YJR9grI4iZnY.exe	exe	0455c921a4ff7cd93f24532e6799ea7c2ba207dc44194c6ea27ef878ae7315e9	n/a	Heodo
2020-09-22	x.exe	exe	6307bde48b65e73bffc9ab873085f53a7beb6044cad4de8cf7125b361e6fba4a	n/a	Heodo
2020-09-22	AmDR10ScOhqcQTc3GP57.exe	exe	689cd648cb102f93cb1fb7372a8a377d5c2c486df811acef0b0cb6b53ef05856	n/a	Heodo
2020-09-22	OEpeJHaE9nlpdF3Y.exe	exe	a80d177bfe21a5d3a12ced46bb37ca56936343a46faa056624a3cf72c3a2d74e	n/a	Heodo
2020-09-22	VL.exe	exe	e66f471d3e7a50338c9663869fe655b688bd88c2275bb2e9cced563818ae5661	n/a	Heodo
2020-09-22	rlbsGlLtVFFkINft.exe	exe	c3b8ed01ee78f2f8acea80524fd74dbfd927ea9837779d07cfd6c76b471adf46	n/a	Heodo
2020-09-22	IAp.exe	exe	c31e116c0fcfcf57f53d7c048369195296796121184bdff7d63c601de1403400	n/a	Heodo
2020-09-22	i.exe	exe	de63f9ec586ddf9059f93a3d0d04c9b448b97146eda516977aed125847c58d32	n/a
2020-09-22	E.exe	exe	d36b124148daa069213e0a79123e0bb9692fce0d957c17941c59b4cc8b21155f	n/a	Heodo
2020-09-22	DC.exe	exe	cfc4136182bcd4c247c25181e444f0c7a4edc2e7090850520e074bfab981ca66	n/a	Heodo
2020-09-22	X2lU2pIfkb337olCHUw3.exe	exe	67f9cbd12c4f86ef1732a335aa25ed0e051f46140d3c421ee5f1f0da2d600e99	n/a	Heodo
2020-09-22	bRlYSYB6f4Y5cSbP.exe	exe	ae76d54850f32b770ea2c15f39fc700f5068e58c08ca16a63de6790aa363ffd0	n/a	Heodo