URLhaus Database

You are currently viewing the URLhaus database entry for http://menusdigitales.teksi.mx/js/esp/oDtSgUDjxpwRtYO/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:719619
URL: http://menusdigitales.teksi.mx/js/esp/oDtSgUDjxpwRtYO/
URL Status:Offline
Host: menusdigitales.teksi.mx
Date added:2020-10-19 19:48:04 UTC
Last online:2020-10-19 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-19 19:50:24 UTC to abuse{at}liquidweb[dot]com)
Takedown time:2 hours, 27 minutes Good (down since 2020-10-19 22:17:54 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-19Untitled_20201020_542936.docdoc 690a4efeaba7d8fb29ee6f9d39381c4f7ac5f540bd5e6ee68505e61e3969d07cn/aHeodo
2020-10-19Attachment 2020_10_20 FJ200.docdoc 462d667db40bf34b4c87eac6795e3be18930efb8cf95f78c3a6eda8d21d6c95bVirustotal results 37.10% Heodo
2020-10-19LIST 20201020 9458983.docdoc 71e4ec3e11f734f0ce73a46fcbe3079f4418154382d6389da01859b9ad74bd99Virustotal results 37.10% Heodo
2020-10-19LIST ULK918.docdoc 2da0ef0ca6c372248db1c0649512c63d840327ce42f58c710711ac7d7f5c32dbVirustotal results 37.10% Heodo
2020-10-19Mes_2020_10_19_PDJ91920.docdoc 91e9ec22d3f510e1b7ba947611f13faf6b0d80eac73e3672b1d5fffafed7b759Virustotal results 37.10%Heodo
2020-10-19UNTITLED 20201019 723390.docdoc 31c64f6a21d4a14319fdcafa6eb86d6668b5968e832b79b5dead97973eb7b006n/aHeodo