URLhaus Database

You are currently viewing the URLhaus database entry for http://facanha.com.br/wp-admin/FILE/TTkKsKbi4og6GB9zJQ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:618770
URL: http://facanha.com.br/wp-admin/FILE/TTkKsKbi4og6GB9zJQ/
URL Status:Offline
Host: facanha.com.br
Date added:2020-09-28 20:07:08 UTC
Last online:2020-09-29 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-28 20:08:04 UTC to abuse{at}hospedagem[dot]net)
Takedown time:17 hours, 54 minutes Good (down since 2020-09-29 14:02:21 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-294261.docdoc 99a68035cce1da220ffd1445a21e399fa1829e89bbda973b8ec6a3dcd6e8f4d9n/aHeodo
2020-09-29Dat-20200929-852.docdoc 6742ecfe387572b5377d9dd4a476a24c98755c2594bbf861694e57750345e086Virustotal results 29.03%Heodo
2020-09-29dat_20200929_0343.docdoc e0058745c1cd85f4d628a90a9aa61a222d863b27bee2393c8228ec6a1e4a533cn/aHeodo
2020-09-29Inf_20200929_N38780.docdoc 8002caa170e531cfdab75c3470478f6a2a7e1324b9ae2e13fcb1b3e4e98494cen/aHeodo
2020-09-29REP_880.docdoc 98ca5617082e699b7edf525fdceb3e43d181d5907503029ea680366ec177d376n/aHeodo
2020-09-29INF_757.docdoc 23db18611cc3211223cfdd257760fe8f0f127f1113c2ba3790da00e78ed9b0cen/aHeodo
2020-09-29Attachment 2020_09_29 K513641.docdoc 85ba13ee16a5ff34d7cd00ef3c2b0b66b42a35a096a004ef4420420711e4855cn/aHeodo
2020-09-29Attachment-44706.docdoc 405eafda68956f4def6b853f960ee3ee58fd39ad89c0c28ceec2cd79ba8255f1n/aHeodo
2020-09-29DAT_2020_09_29.docdoc 537faf166e9635b27ed7122d94b71cfe50d7efa925cd39680f7ebdd7d74c1ac5Virustotal results 24.19%Heodo
2020-09-29list_2020_09_29_85316.docdoc cac06b51ffab60f06e2c63890ef00ee519095bdb694fcbf45f78ee1b0e6607fdVirustotal results 22.58%Heodo
2020-09-29list 826.docdoc 0fecfde61b7f7f3534c0bc1768d898beeef96c53f2ff2aea67835319b4c5fe91n/aHeodo
2020-09-29Untitled-RZM358.docdoc b7056419e85c6864c6fd5388dc8336d6ff6d8e735951f7e6ea8e2b324b88716en/aHeodo
2020-09-29Rep 20200929 TD3270.docdoc 90207d8f64c83f5fb51435ac667cd89263cfac55d955cb185a0bee96742a3db1n/aHeodo
2020-09-29LIST-20200929-765266.docdoc 7445b05e7a3c94e1d62297061c4af67e79100fbf39fab821cd62f748684996ecn/aHeodo
2020-09-29Doc-D3159.docdoc 778910821e18b797ca46987ed26acc1eb53089fdc923d7351a99b275f00b899eVirustotal results 22.58%Heodo
2020-09-29mes 2020_09_29 576.docdoc 8b2f092d7111a63a1e399dd9961fd728074628eea1b4f6d61ca40b3efe2521fbn/aHeodo
2020-09-29UNTITLED ABD3058.docdoc db2827442fd94158d69409377c110fe47b1b4837baca1664d42e4090d1fddb32n/aHeodo
2020-09-29TTG440_2020_09_29_8440081.docdoc f464ed4cae1eb3e3eacb5bd81cf88686ad8d321e7d77d91e397524b3a907b47dn/aHeodo
2020-09-29LIST 2020_09_29 82508.docdoc ed9cef79f5dceb4cae1a46854e3724794bb5d809266cd39d048a6edad7aa90a3n/aHeodo
2020-09-29Arc_7900752.docdoc e3dc51bc9f8c677f14405f021c1a9ff9a3e99868fc68cc55320fd4234789fc83Virustotal results 40.32%Heodo
2020-09-29REP-554.docdoc dffe6b12754772da4ccc5aa7c07425a752a3680f801e0df24fc609e879e83e8cn/aHeodo
2020-09-29Doc_2020_09_29_JP44784.docdoc 3928efa7c8b5593d40342ecd2411be994dc63bcc0a56f74ad10e1602d64cbf5bn/aHeodo
2020-09-29List_6673.docdoc 2c16fca27937e2766a07443bf96260808f79450a1e130e0a0fdc2649dd940d7bn/aHeodo
2020-09-29Inf_2020_09_29_Z537234.docdoc 2af6ee72c4fc0cd1ff72c28e91edb4b7f854dab317591ca48ff21589c7f65fe6Virustotal results 40.32%Heodo
2020-09-295774520 QAI302051.docdoc a721713b9b8dbf3f7afde4ecda5e2161a48cf67c5277c3836c0df121ca2d6b18n/aHeodo
2020-09-29FILE 2020_09_29 668.docdoc 7b38b8806a5a362ee1e10b7798035408929bebc90e4977adceddcff61c4d2ac2Virustotal results 40.98%Heodo
2020-09-29doc-2020_09_29-VXJ51883.docdoc 3e79f14f4c08406b5c877414b692137f49a9ae3e6916d5f3d670901e85cef51an/aHeodo
2020-09-29arc 230655.docdoc 0028d5cab5558cff8e7be74cc0522d68dff4b695f5bf9e8067f2b5c61b0c05e8Virustotal results 40.32%Heodo
2020-09-29mes-20200929-923254.docdoc b19337ff283d5e928eb6bc9b902fc02a47f506746ab9fc02955e02d7112f3be5Virustotal results 40.32%Heodo
2020-09-29205 20200929.docdoc 3add839e36dd8220b814341ec042bcd0657086d23b752dcad88436d1f6c92574n/aHeodo
2020-09-29Attachments-2020_09_29.docdoc 658bf819d7e6b0baafd4e46ba41a1984adea5dfe3e73194e110623c819efb8dfVirustotal results 38.71%Heodo
2020-09-29MES_20200929_UZ112629.docdoc 15e628ef0bab8fa7574005e71632246fa922e8aeabe4dec14dccfcfb2d87beden/aHeodo
2020-09-29Inf_2020_09_29_7552.docdoc bcc520a7c5542f305e98d2eddf75f362f4771597d4e51101ea9485aac97614e6Virustotal results 37.10%Heodo
2020-09-29Untitled-83994.docdoc cfd9a84a3da6e0d9517765f4c7a3e1fb0c86932fffdddcae62e0354e5a2dd882n/aHeodo
2020-09-29Dat.docdoc 76625b162b7830d0e881fcc218b3a1a5e02876825b671ae1ea5234fa2c9863f8n/aHeodo
2020-09-29inf-2020_09_29-UNC3450.docdoc cbbd7ed4de288e481568bfd404ee416c9654434c90d5453323245df46900c45an/aHeodo
2020-09-29579_2020_09_29_414.docdoc 54f986a7c4d63bb4318487b8abb982035542b034084b85e68a6f22edbd7d3b01n/aHeodo
2020-09-29Attachment.docdoc 852f47fbed9614eb0e23b991f99bb8169cc0a46a1d4d5907cf021c0f4c89e092n/aHeodo
2020-09-29Arc_20200929_6596.docdoc 6204f39e37c6d400ac0f2645485382c118deedd3e22577637227b3ecb0253399Virustotal results 32.26%Heodo
2020-09-29Untitled-2020_09_29-S73234.docdoc 431d361d091946539cac8ed89298e63de4e17531277e185f37c063dd89273ef6n/aHeodo
2020-09-29File 2020_09_29 5692.docdoc 6507d66845c1e70cacab4feff11c6c27b240665a19d909a816639c3a59406562n/aHeodo
2020-09-28Doc_39372.docdoc 822600fc7c81e8f5a12a4ff52869d121c2adcf36c2b3922a68213f4de2bcc769n/aHeodo
2020-09-28INF 2020_09_29 XJL9860.docdoc a17bed0f94dba79b546f9dac5dfa4743718e8471482a8f79f38bb57d3a38c3acVirustotal results 27.42%Heodo
2020-09-28ARC PB53869.docdoc 87db481003cf7afd6d3cda5e4f25cec1329d666c4238e33a8dcaa986267b1d97n/aHeodo
2020-09-28List.docdoc 3103df8a9105f4dd3e55d0ae13c685690786635bcd12bbb8dd472a3ee6f3626dVirustotal results 27.42%Heodo
2020-09-28Arc 2020_09_29 98244.docdoc 25ba07757eed7d8e7d07336a49141f5ee33fa19b03abf8e4dffdc67175f64b7bn/aHeodo
2020-09-28Arc 2020_09_29 5658563.docdoc f317be75ff7d7bdb08b0bdf2f4252109948411c85935c5399577308128702cccn/aHeodo
2020-09-28DAT NOU331.docdoc 86b53319c4d4c9b97c68aa50776b4491ff45c60310d983e3e6dde0cc8bdfad63n/aHeodo
2020-09-28List 20200929.docdoc e1e84b8873782b776e85615ca88eb3194ce071f5f62297712a84764abb259cbcVirustotal results 30.65%Heodo
2020-09-2804129818_2020_09_29_218.docdoc 3fa1ed1c55588e5de1196a700249785a9b6c8d62a0d4155cbc47379a316836dbn/aHeodo
2020-09-28dat 20200929 778.docdoc 0537a8b60f70cff3524ae128de8c36be3e5c5d546657bc22795e8e8b2e1a02e8Virustotal results 30.65%Heodo
2020-09-28Mes 2020_09_28 5750.docdoc 5cf2cab29c6bf2d42b5b8cc8064c629e2700954c241dbb714c05d9309379cff7n/aHeodo
2020-09-28Dat 8122.docdoc ed3abaa21cdc78324276aae5eeb696f7116b15d243ffc9e575c5dc98280b7e50Virustotal results 31.67%Heodo
2020-09-2819561PD 2020_09_28 IHW3272.docdoc ad477afdea97a221878ddff802a9efad5559f7b83f41d0f4bc7f35d29cfcab97n/aHeodo
2020-09-28doc-20200928-JFW98639.docdoc 0a30286f2c6136992c19ec3d8b6d67aeb198133f5e4fd0fd477ffdbd1a3b2c5fVirustotal results 32.79%Heodo