URLhaus Database

You are currently viewing the URLhaus database entry for http://bhar.com.br/elementos/form/46384843289115740/i4r50n-0112/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:732386
URL: http://bhar.com.br/elementos/form/46384843289115740/i4r50n-0112/
URL Status:Offline
Host: bhar.com.br
Date added:2020-10-22 03:07:06 UTC
Last online:2020-10-26 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-22 03:08:21 UTC to abuse{at}hospedagem[dot]net)
Takedown time:4 days, 11 hours, 12 minutes Bad (down since 2020-10-26 14:20:27 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22October invoice.docdoc 59235980108e00a0011ebeca9348c5a39ef6d6ec0b052e15ddeb825e9c21e3d5Virustotal results 39.66%Heodo
2020-10-226755546601ER.docdoc 7104dd32f9de62701f5d5a01ac763237757d11e8fa2c10ec24749f5791467fcbn/a Heodo
2020-10-22Invoice.docdoc 67c1b651e75a7c189396cf60ba8461c90336f917091b09d97b042a0ca7ef70a2Virustotal results 38.33% Heodo
2020-10-2200242.docdoc 9becf1ac7aade032f8c2f1f3c42d2525ac67ca430d309bf1b76e131cd2e57d3eVirustotal results 38.71% Heodo
2020-10-22CK0021360698SP.docdoc 0ffde0e4b91dd4178cf8bb09de58e8de279118d242b1fe487ee1451627d0ddbfn/a Heodo
2020-10-22Payment.docdoc a92e9fd1aaea72831f29e20e4afe829f2fd63c7645e2ae3b8b4786a8ade2b0b6n/a Heodo
2020-10-2207732803.docdoc 837053e508d4b63b491b2e13135ab62be34d6cafbc9a8cbd7d763816dc17f4afVirustotal results 39.34% Heodo
2020-10-22Invoice.docdoc 590f3326107d8c55dee6b4ab08d4a73d007cf21ed92119b2dd72a17a1054564aVirustotal results 39.62% Heodo
2020-10-22Invoice #0982.docdoc f3164116b10a1f31343bf4f0c47e83711070cf2d2fa4558bc6b869a82bf26fcdVirustotal results 40.38% Heodo
2020-10-22Form - Oct 22, 2020.docdoc 171b68003d3217f50e0238721e0957d775d8eb225067a0191f56f2a31b998629Virustotal results 40.74% Heodo
2020-10-22Payment.docdoc 02017d31154b40bfb9a6397f32cceb8688dbad209e1b284245d0efb2e0fec907n/a Heodo
2020-10-22Invoice #68861838.docdoc d8bbe49377ebac547c2afa2ab29a64b774b4ddb3501f62becbaedf4d24c33a0fn/a Heodo
2020-10-22Invoice #0838081.docdoc 749e0e405f25ff952f9ac9f879f50fcaac51258237b698562dc85c891bf323a8Virustotal results 35.19% Heodo
2020-10-22October Invoice.docdoc d60a5b32d8f9d47bc60a8227a98cce49b50d11ff3464da426f073e91dcfe7a16n/a Heodo
2020-10-22Payment.docdoc c997bba83eb4e15d19a871e5f4e7f506eb780772858f744dd12742b9c678e897Virustotal results 50.91% Heodo
2020-10-22JOA-100120 BGGU-102220.docdoc 0cbc8f1c920ee2d242a6ca5d19dfadee47264af9f96e500ffd59de43cc83bd0dVirustotal results 50.00% Heodo
2020-10-22invoices 144 & 3524.docdoc 69d757b68d226d928a8538ca855767f25d71e1acc3b2cf87443689a15ef183ceVirustotal results 50.00% Heodo
2020-10-2200663062842.docdoc 97b65be9fd47454760b1e5fd5912b7ec4d36712b38bc2c381b4671464abc096fn/a Heodo
2020-10-22001820777.docdoc 20cb9774c3025651dcd7afb95472891f1b6bdab40da18e17775e4ec56084d0a0Virustotal results 49.18% Heodo
2020-10-22Form - Oct 22, 2020.docdoc f22e043076e2cafc9155e8e740e5ab74406ed9e83d3f875772e3f82b69d8d93cn/a Heodo
2020-10-22Payment status.docdoc 3cea95fe241c36b02ffc90f1260df43c8fc77e7acde8d5804ba4a461203332d0n/a Heodo
2020-10-22Invoice 30300.docdoc 4c0eefb631af43ca75f18562817c8ac29361fdf7b5a528341efa855a8d1c6a6aVirustotal results 40.35% Heodo
2020-10-22Inv. 00159408574.docdoc 7fc0ea2dff012c502278a94d7dddb537859be6ac340e8ddecd41eb42b169a7a7Virustotal results 46.43% Heodo
2020-10-22Payment status.docdoc 889113bf50a9e3543f97ca07e4e572f2328587944be4de82f441ba1b23e6ece1n/a Heodo
2020-10-22Inv. 044453.docdoc 077db39d1c6f7785aa6191761f4033eeaf24c81e2c0ed0f104e798e63a6a1c4aVirustotal results 44.64% Heodo
2020-10-22INV_16985.docdoc 29e0f3a1a3ea0fa9c5f4f6de0c645b84d175af82725200c3d2fddfebb517c938Virustotal results 40.74% Heodo
2020-10-22Invoice 98531.docdoc 90828b96547b35641ebd76b91c0200f8f057974be00f528002acf24663c9991fVirustotal results 60.78%Heodo