URLhaus Database

You are currently viewing the URLhaus database entry for http://megasolucoesti.com/R9KDq0O8w/payment/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:628981
URL: http://megasolucoesti.com/R9KDq0O8w/payment/
URL Status:Offline
Host: megasolucoesti.com
Date added:2020-09-30 11:08:11 UTC
Last online:2020-09-30 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-30 11:10:15 UTC to abuse{at}hospedagem[dot]net)
Takedown time:7 hours, 51 minutes Good (down since 2020-09-30 19:01:47 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-30PO_09302020EX.docdoc a3d743d11312e842641d3124985266cfd1471f8d21881fb7dfc8dfa9cbd1fe47Virustotal results 26.23%Heodo
2020-09-30B_GAN_090120_PWK_093020.docdoc 499e1db2bcd68d444f9d810f5489c4bacfc42b709036484694dfab71fcbe1153n/aHeodo
2020-09-30BAL_4M8D140ZMJRF.docdoc 5fa75a02b1c855828a4a11cf3cf8da64502f2b4023c776b5f37c98ef894df875n/aHeodo
2020-09-30PO_09302020EX.docdoc b131abadbdd99b90888c049f0e4ff59936adb011886d570d1652cef7c209c4d1Virustotal results 26.23%Heodo
2020-09-307568YNC04RQECPLQ.docdoc d1cf503fbba6cc08731bec93c969a61a90d2e0a3f84c4a913535c9ab77e41160n/aHeodo
2020-09-30T_PO_09302020EX.docdoc c86715ec898705b4f96afa145de31fef0c732dd66d0e2707407cb453731f9facVirustotal results 22.95%Heodo
2020-09-30IG4466477648XE.docdoc 25ea63c6b2b40a9e3cd16e7ff7bef353fc6d0a0d87b8a661aebc9e377439f8efVirustotal results 22.95%Heodo
2020-09-30BAL_89174724.docdoc e0598f2efbf03596b6fc2d73a58184b9a4d4277d2fc01322308e86a132582e2dn/aHeodo
2020-09-30FILE_QA44ZPB.docdoc 1d5daccb3ffdca9e417370c654eefb0f6a0b2c3de51d7ca751c676d623cd57bcVirustotal results 22.58%Heodo
2020-09-30G_D4LTQ60J0V0OH5.docdoc cdc88da9dc92cd4bbf8e6de747dd552a54b99dce8dfc68b79373710fc7938e52Virustotal results 22.58%Heodo
2020-09-30DOC_EVS6XN0YFMC8UVJ.docdoc a4ba9b07b2355a1be394ecf01c4d26aae440491439fa0db4e7905eaa82a79e81Virustotal results 23.33%Heodo