URLhaus Database

You are currently viewing the URLhaus database entry for http://motofix.pt/wp-admin/G5fYMDgCBzTYJcg56IrFVDC3Qij9dU09/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:757053
URL: http://motofix.pt/wp-admin/G5fYMDgCBzTYJcg56IrFVDC3Qij9dU09/
URL Status:Offline
Host: motofix.pt
Date added:2020-10-27 16:14:17 UTC
Last online:2020-12-07 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 16:16:28 UTC to abuse{at}sharktech[dot]net)
Takedown time:1 month, 10 days, 16 hours, 55 minutes Bad (down since 2020-12-07 09:12:26 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-11-06INF_99Z033E5XRPWU7X.docdoc 1a8d6c536b01f518f7452d34e6b3e890102da582e2978424e26beeae7b4e8e10Virustotal results 66.67%Heodo
2020-10-28list_70607876635396335491.docdoc 95d5a2d7dcee12209de69b8db569c01e68322524257ca16c36f43ac546532c95Virustotal results 25.00%Heodo
2020-10-28Rep_27350116.docdoc a9dab3a7ee17c4e9ebd90271c21ba1f27a69094147e4f37b14e8b584ef3bf74cn/aHeodo
2020-10-28File_62782512.docdoc 43159cae0059060554e0c283a577d48c0b825e44856b3afcf24ac2f6ef831334Virustotal results 28.30%Heodo
2020-10-28REP_PO_10282020EX.docdoc 5e692d0f6341638d540a0dd0458062a4852cdc65dd6551956aaa28c4d417416aVirustotal results 27.78%Heodo
2020-10-28Attachments_03993643.docdoc 42437dded751c17d78164701713e5a181726b5fa47472556a1eaede5aac86c17n/aHeodo
2020-10-28REP_APR_100120_YIM_102820.docdoc ef87afc95689c73759bee33f83ee37d3a46dcdd5dcd498921e9cc06eb3f02455n/aHeodo
2020-10-28List_PO_10282020EX.docdoc a30d2b343e3646a2a05e98c5b7f976a1f67e12574ecb880a2a460bec35735f6fn/aHeodo
2020-10-28DAT_RHN_100120_MHV_102820.docdoc 4d2065b87b5e9b6d1f4bc0bb53b3244c9d61eb3fd8c95d64757935758065ff29Virustotal results 22.58%Heodo
2020-10-28arc_PO_10282020EX.docdoc 5b5139dd7a1ffc7d31ef829c6f23afb23a459dc8aa0a8f900970875ecd254e39n/aHeodo
2020-10-28FILE_PO_10282020EX.docdoc e6e605ad811f416df52bdd27b76218c84b0f27c3ce272e28b373c86440fb089dVirustotal results 22.95%Heodo
2020-10-27mes_GLV_100120_YHZ_102820.docdoc 90f1f20d90c0a5c6c32d6eca01833ff1db7b1325a5db427d7c5871fe3d5096f3n/aHeodo
2020-10-27Inf_IZ4649539120OA.docdoc 51dc9e5a948487f714ef9600e3188b99aaebca09db45c0cd628d561945767476n/aHeodo
2020-10-27Inf_DEW_100120_MOP_102820.docdoc 8e85fc146f42da5ce9bd07ed3322d5b72df91418635f9d077b0de01c0fa30231Virustotal results 22.22%Heodo
2020-10-27UNTITLED_7354979387028727007090677.docdoc 7aa10dde15927ea374516ecf0c02332c44d93290a94510cbd83a4eea88cd43ebn/aHeodo
2020-10-27Arc_38102465798199217.docdoc 98c713e8df6c92a443138d43fc4435e730cf2515b07e1402ca23c7b03e6f6448n/aHeodo
2020-10-27UNTITLED_PO_10282020EX.docdoc 444561d4fffc7ef6089bcd8ff849a9688f26c828917dc6f29ebc13ef1a813568n/aHeodo
2020-10-27inf_3661281294110.docdoc b01b01566c73b1c2ecfd4f04bda6c7cc3c1c12646562ae1f615733fb1cc89b37n/aHeodo
2020-10-27Mes_PO_10282020EX.docdoc adaa6cfe6f38da277ca461fdc4d6c81d643d1c91babe46515180b90cd041fc15Virustotal results 19.67%Heodo
2020-10-27ARC_PO_10282020EX.docdoc d95495b44443903768e45d7c485be8e45fb7f2223a2acb47a20bded372edbed4n/aHeodo
2020-10-27FILE_9J3200SZ.docdoc eff4ff103b1930c43c7f0ae267a43b853c4cc734db4c80473d028efff6e8f7f2n/aHeodo
2020-10-27WJ8969095448RB.docdoc bcf036ce2601b15386e469cd4b8ba679dc20519df2f62236f361d4c3eaffbc33Virustotal results 44.44% Heodo
2020-10-27DZ59CAWKVFLI.docdoc 036ecbd16e9e3447bb91b61a15f1416ce3dd66a18b0e4ef048f87e5fb74319a1Virustotal results 45.76%Heodo
2020-10-27ARC_8158282791441517844.docdoc 94bb2eb0f0b8a0f61ff20360dbf6e4b89188c5157bc940f9d38dd4cb68a4539an/aHeodo
2020-10-27ARC_19007550.docdoc 1ad28606bff91478a2383c7deb56c563f2c3912df1f1ae81b0fd16892f3842d4Virustotal results 46.67%Heodo
2020-10-27list_VTA_100120_HJJ_102720.docdoc 42c0ca75903e2ecf17a86645e72752d15c47d76bbb5bdb0c7fb5493f8939d952n/aHeodo
2020-10-27List_PO_10272020EX.docdoc 36f438d9f983ff13b0d9cd592093dc78f38fb115c966eefa01db80b01bbda192Virustotal results 44.44%Heodo
2020-10-27INF_73108701.docdoc e0d8252260d1c59a8cb22f97dce540a7f5272ed1052a3edbc71b265e175151aeVirustotal results 45.00%Heodo
2020-10-27MES_13861112985900.docdoc 075ad3915034b09cca40f0ad72699dd72104a12ec16645aac558092604c8bbb6Virustotal results 45.90%Heodo
2020-10-27inf_FA8227594372MB.docdoc 5ed7759274be901ba33c4f6edc3933a460141c8fd98a83304db9c6a344adecefn/aHeodo
2020-10-27List_RSB_100120_BQS_102720.docdoc 1663fbca3bfee0c76af0ff5fa1e59b2d4e10eb3b17a1c5d41a092adf85f30eadn/aHeodo
2020-10-27dat_PO_10272020EX.docdoc 04c4ec6ce334fcb141b92d6e0a177aa261d773d79e3c9a671db3fe228bc7fa7dVirustotal results 47.46%Heodo