URLhaus Database

You are currently viewing the URLhaus database entry for http://drguilhermemeyer.com.br/wp-includes/92346049575330/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:609834
URL: http://drguilhermemeyer.com.br/wp-includes/92346049575330/
URL Status:Offline
Host: drguilhermemeyer.com.br
Date added:2020-09-24 11:10:37 UTC
Last online:2020-10-06 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-24 11:12:06 UTC to abuse{at}uol[dot]com[dot]br,security{at}uol[dot]com[dot]br)
Takedown time:12 days, 9 hours, 53 minutes Bad (down since 2020-10-06 21:05:17 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-25REP_8554238734.docdoc 8a73bdca97395b9f659104c200734008fe685faff6734fc31ce0cd575090f1b2n/aHeodo
2020-09-25GAG5XHM1J4WDOR1.docdoc 16caa36f21f51e55b03a66ef15c29a8f7054a5fad88ff372ca0bba06dc40a971Virustotal results 36.07% Heodo
2020-09-25W_7088183693103353.docdoc fe2ee906d8d8678d7ec22ed99ec97b47b6bc55850eefac61f9ec622f2a049bb1Virustotal results 25.81%Heodo
2020-09-25039830231185948560947711.docdoc eefd694ad7a3c1d10441452c651459410143b5ce0d56e19d39c16c1114105d09Virustotal results 31.15% Heodo
2020-09-24PO_09252020EX.docdoc cb6066e63e21555c7c377b4cffcdb3372184cc0ebd90679b982724071507a67dVirustotal results 20.97%Heodo
2020-09-24BAL_NK0278203247ER.docdoc fe2c4c0e8452ed6b2c6e644296e472af18a988e142404e89061f6cb8f2420593n/aHeodo
2020-09-24BAL_LWK_090120_ROZ_092520.docdoc 8e4be7abeafb997210d1c39bf851ab0c4cd097268cf3664f53c72abc3dcce92fn/aHeodo
2020-09-2488554033717348.docdoc 356e4701cc94b7ffbf517afeef9f5c0bbe45782f861d51859f0bf099df96581bVirustotal results 32.26%Heodo
2020-09-24DOC_43169396.docdoc c8e1fe8c16784222fdc737735ed29812a5f1721e61b75f3386fa6ea802c9b525Virustotal results 21.31%Heodo
2020-09-24QSI_57667178.docdoc b77cd70861b08e97e103e926c367d38fb18c9588b70cce776fab3c7b9888c31cn/aHeodo
2020-09-24DOC_PO_09252020EX.docdoc dcd26d0a6efa5d5e5d222fb2514b682c86ffb540ef7defc9f034278cc7857adan/aHeodo
2020-09-2412077566.docdoc 7b5d921ddbc165e0f75ae5769137ef1546084f5d3fad75d9304b97495a5966a0n/aHeodo
2020-09-24FILE_FEE_090120_JSZ_092520.docdoc dcffae4b2bca57b2e8b65609a127df9975ff71d81bc14a409f0058dba81ebb56Virustotal results 29.03%Heodo
2020-09-24W_60701516.docdoc 2a3395e9459dc5f0fc72621c2299e98b4226e6b99cf6069d89004e3d430a219dVirustotal results 29.03%Heodo
2020-09-24VTJ_090120_FBV_092420.docdoc 715f9dc1efa5fca591ca9ec3b12ea2cbfb023fdeb8f0964988c191a7be6166c8n/aHeodo
2020-09-24BAL_KGPA04ED.docdoc e8920178a654a05f4d58c417ab5df624d778f70deb69ef450e79c6511c72e55bVirustotal results 21.31%Heodo
2020-09-24REP_LBH_090120_RHS_092420.docdoc 49cb977b6bc82a34e7733da5b4a34862f85b5afd2c8a0691c79d9e2b86dca29eVirustotal results 29.03%Heodo
2020-09-24INV_01280356.docdoc f558184120407b98a2f1473322ca913b07ff58cd20d06ae924a355e11821dc9bVirustotal results 29.03%Heodo
2020-09-24ZH0UYOS.docdoc 35ef0a522e2f7f98db76cd53d203d6389d65b2c0337b598482f1ca0fcfe5953dVirustotal results 29.03%Heodo
2020-09-24PO_09242020EX.docdoc f6f1cf12aa5337999c20c4cfd641254575e981ad7c463944cfe676ec92a23165n/aHeodo
2020-09-2475577594.docdoc df802c906676713581817048e135afe20200029ac5ff1c840ba82b5bbcda75caVirustotal results 22.58%Heodo
2020-09-24REP_4770943268416880.docdoc bc9273a8efb618cb9bb1842b7f8fabfa43e0038cc988c435a74308c0d2828955n/aHeodo
2020-09-24REP_96OTPWHQZSGO7D4X.docdoc 43204d25bd95979baf79eb7193cc7466a0fd658e87c94d666d71b88ac6979e88Virustotal results 20.97%Heodo
2020-09-24XWQ_090120_TCK_092420.docdoc 460d4f1fa3c90d50ae0a56c6c4c26bfcd3d3d22829baef98b7ea3e9b451974feVirustotal results 26.67%Heodo
2020-09-24JQA_090120_FQQ_092420.docdoc b8a9d5f54e75467b003cb37db317d9537fc49705aa3334531937929937b0eaaen/aHeodo
2020-09-24GW6323636559JH.docdoc da886aa9c4cf9af28406c6c6b2bd1a84fdca0dd1861259185aba9da512264acfn/aHeodo
2020-09-24DOC_IH3748463033GH.docdoc 896f6e1b9eb9656cfc68db252241fc7087192661175a0604505742223f0ef016n/aHeodo
2020-09-24FILE_GSW_090120_JUS_092420.docdoc 322437c9e679266325e5e5e4e5192b3480e02f680d56fbede6b807db9def583an/aHeodo
2020-09-24WCY_090120_DOV_092420.docdoc 3b6754841cd0be21c785048d546fed0ac9485c8d67dd12c0a9d69a31184786b3Virustotal results 27.42%Heodo