URLhaus Database

You are currently viewing the URLhaus database entry for https://www.meuvoto2020.com.br/wp-admin/lm/GNWZPm/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:721565
URL: https://www.meuvoto2020.com.br/wp-admin/lm/GNWZPm/
URL Status:Offline
Host: www.meuvoto2020.com.br
Date added:2020-10-20 04:33:04 UTC
Last online:2020-10-28 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-20 04:34:02 UTC to abuse{at}contabo[dot]de)
Takedown time:8 days, 16 hours, 28 minutes Bad (down since 2020-10-28 21:02:12 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-27Form - Oct 20, 2020.docdoc d2fe08b3c831101fc944a5ca54cfa5e7358df511efb6f8cb39d5036034553bf9Virustotal results 66.07% Heodo
2020-10-20U3074375477HR.docdoc 31c9941b5e674b482e7b5020bce1c27dd86c8529fe254326dcd4a86d137492e1Virustotal results 48.39% Heodo
2020-10-20Form - Oct 20, 2020.docdoc 365d3d49f5595f8f953aea3c3d22743b8319fad46a667472b4c3504b8efb805bVirustotal results 52.83% Heodo
2020-10-20PO# 10202020.docdoc f5996a9cae20e6d4cc8ef73a116b7b97723ef49093a4d518c6c85d757126cdb1Virustotal results 50.00% Heodo
2020-10-200285245073.docdoc 63079c50ac6b966778ae92e6a4d39927b58a475be4b8d095192b40ad5a877756n/a Heodo
2020-10-20October Invoice.docdoc 9dead7615c9982a5935592ea257a1c754b61ee79c39b61345ce30c18e1756cb2Virustotal results 50.94% Heodo
2020-10-20October Invoice.docdoc 73f22ba33ef477380a8177c19532c0e6a7c993ac47333c22b3ad4b53544bade1Virustotal results 49.06% Heodo
2020-10-20INV #295 FOR PO #024172782955.docdoc 45327af6d3d75a274f4c5d122adc41d42ddff44e520c7c02efb3df87adc64be0Virustotal results 50.82% Heodo
2020-10-20E9922878489UY.docdoc 7c78e9a0268425f2bff9e8fdf80e9bef5210401291ab9d1f251a97849f2711c7Virustotal results 49.06% Heodo
2020-10-205306282.docdoc a7a71a8db9345289a21c62edb7085cbff3e0dfcbaf3b66e6e17506a60af10fd2Virustotal results 51.61% Heodo
2020-10-20WYA-100120 HTLQ-102020.docdoc be3645a6416b42048d934a1330244b34134f64f504a20c92af99c1ecd301deecVirustotal results 51.61% Heodo
2020-10-20Invoice.docdoc 351fcc4213634fcc050b1b9fa1b83edb1aa5b64736aaf801c2928e5deb5c35b4Virustotal results 50.00% Heodo
2020-10-20October Invoice.docdoc 942f47744db5e721c7c600c36f1c1af3455fdf7e3fbb76011c000c221e06b687Virustotal results 47.54% Heodo
2020-10-20form.docdoc b53ae43743c6308bc894bdee9df0745d8c360217f26cf37ceda3a979b519969bVirustotal results 48.39% Heodo
2020-10-20XLW-100120 WQDH-102020.docdoc bd3634b192d3a73ca432502cf51882a5b60ab2d2b5617b526cf8cb2431a31404Virustotal results 52.83% Heodo
2020-10-20invoice.docdoc b52f4d01a0ab4d1cc721d51d83479234dda82213536075936f096f0d1203552eVirustotal results 45.16%Heodo