URLhaus Database

You are currently viewing the URLhaus database entry for http://bnldata.com.br/test/xxZvnCVc6dFvG50tS1ZQvWYQaEqhHxdq2uGrp3hEU/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:758440
URL: http://bnldata.com.br/test/xxZvnCVc6dFvG50tS1ZQvWYQaEqhHxdq2uGrp3hEU/
URL Status:Offline
Host: bnldata.com.br
Date added:2020-10-27 23:28:06 UTC
Last online:2020-11-10 23:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-27 23:30:11 UTC to abuse{at}lacnic[dot]net)
Takedown time:14 days, 0 hours, 2 minutes Bad (down since 2020-11-10 23:33:05 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29Rep_78128984.docdoc 00f960f2c4dc8abaf471b3c55c877aad66b636338bd2d67a565393058b78c125Virustotal results 34.92%Heodo
2020-10-29File_9136850973.docdoc c61fca273223598ec29bcc70b0f716f3cb0ff9d9e293a02c8e0328dcf0011153Virustotal results 34.38%Heodo
2020-10-29list_SO11BW9N.docdoc 37ce904c25d97f1199866c304c053e85219d0b201d3015981963506a9a65e327n/a 
2020-10-29FILE_PF7486246599RQ.docdoc 1d2d63dd74788f9a324d010be937b862f1f99911e53f326e1ea5e1eec48a9b79Virustotal results 34.38%Heodo
2020-10-29Untitled_39040023.docdoc b2d41822b2d89807592fd225c8450a8005e877760a656a6477ac0a28e3aa0250Virustotal results 31.25%Heodo
2020-10-29Attachments_40184599.docdoc 060a5c65a7cc6ecfa1290f84d608e94a147a447e1dd75ceedd3490ab079b6e74Virustotal results 31.25%Heodo
2020-10-29REP_ZUW_100120_EDO_102920.docdoc 16d27526d0453d93110c60d19d8a4680f2ae783858a4ec2093a235fcb819556dVirustotal results 33.33% Heodo
2020-10-29Doc_UTA_100120_JYI_102920.docdoc af09d9b10580277dc290b458dfb6b85501ce39d6e430f87ee3fd349c3f672860Virustotal results 31.25%Heodo
2020-10-29Dat_72792061.docdoc 66f21ad9f94f3926c870736b3a33af58b00eea538ae8da9b7cd71ad1eb5614d6n/aHeodo
2020-10-29DOC_LKB_100120_MYE_102920.docdoc 44fd0e531f131ec3393dcbb90c1ac8baee6d5c4438afa02d458e67436af9a1b9Virustotal results 28.12%Heodo
2020-10-29doc_PO_10292020EX.docdoc 98de74a1b000e840bd188d7a4e35eb9150102a43f8c4fe5357bebae3ad586955Virustotal results 26.56%Heodo
2020-10-29D_RMF_100120_PLP_102920.docdoc 160b0b89551ebfd8cb3f4274dc5f8cdb203642886e8f1e95b493227e4b34ace7Virustotal results 26.56%Heodo
2020-10-29Inf_PO_10292020EX.docdoc e71176f87f966b10a6770fcfffe18e9e8ffd08139967c62d7ff50e63ece6b72fVirustotal results 22.81%Heodo
2020-10-29J_YIN_100120_ZGH_102920.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo
2020-10-29inf_10114850.docdoc be618ac705727cdda9e24768ea029114053b42e8d111433524e3b4f36ecc6f88Virustotal results 28.12%Heodo
2020-10-29LIST_E43EAHFJ.docdoc 13b5e4daa9de72cca849daddaf829c4a3c019c11cebbc6e0c7fb67481fbc9b97Virustotal results 28.12%Heodo
2020-10-29rep_PO_10292020EX.docdoc 5ed767510e9b2630ac3c6ea38470821c0c85acaf712cb5f45eddd5f6e0fcdc17Virustotal results 26.98%Heodo
2020-10-29086792715691955.docdoc 9e8de88a3e7aabf6248a4a17e376f37501cb0437cf9127abda8283191eee760aVirustotal results 25.00%Heodo
2020-10-29Attachment_PO_10292020EX.docdoc b97ef63f4cdcb7c82862e52763408c1c6e70b9e4282e940d30c71dee4630e8d3n/aHeodo
2020-10-29INF_536102882591018491020.docdoc b770e53d7a44c680b7ce2fc81e13b5de570dce0b57c587442874b3c5f6f94d83Virustotal results 26.56%Heodo
2020-10-29Inf_E0TXL4GIEN5.docdoc 4a66929263cee2a8c48e07dbf1fb484199f5d51da94f42703fff35d3213235d9Virustotal results 24.59%Heodo
2020-10-29Attachment_4EU6OMOA.docdoc a536a1efba18ff7db257286623904f5d131c7e933b0af1302fec81dfca157b65Virustotal results 20.97%Heodo
2020-10-29Arc_PRA_100120_HZD_102920.docdoc 12c570f649005ea1ae77c36167843e3e87252075b68b652c5f05b0d8e54b2ad0Virustotal results 20.31%Heodo
2020-10-29Attachments_PO_10292020EX.docdoc 8b4afb8076a68f93b44032c82700252f8971b853903b31fd0eaf50671f7c3cd7Virustotal results 20.31%Heodo
2020-10-29rep_XT9968691893SE.docdoc f679622b39b3a0f7e21e8cfad7010f742f0a5f0803d671fa01c2e01b8cbd01b2Virustotal results 20.97%Heodo
2020-10-29Untitled_QO0282801409JZ.docdoc 0cacb466a5cd54765f2b551a75b8b0880cd991d16fd662402d00efc578060da7Virustotal results 20.31%Heodo
2020-10-29O_NHE_100120_YGZ_102920.docdoc 8e812f35e13e8d4d2d376ab456fb4335c9468ba58bb5a4bc7fdf14c959388f6dVirustotal results 20.63%Heodo
2020-10-29Attachment_PO_10292020EX.docdoc 371a442d56b47bd24ec601a710beb116a75f09be269d0a2e18b29d6fe0927bc1Virustotal results 20.00%Heodo
2020-10-29FILE_888235623551389046946.docdoc 1ecf50c67d4c4bf7eba5ed050c6500f7ab6a2b63b66f12dd23748e22e9a34ce7Virustotal results 44.26%Heodo
2020-10-29Attachments_PO_10292020EX.docdoc ffa31d45d93161ab298442d4f9d83cf8b0bcead9e50e92a048b6b0900415b59cVirustotal results 41.27%Heodo
2020-10-29rep_UI0519282300RS.docdoc 6cff316da0b26621e5b1fc3d5a85c6931a68a90fde20acf702195a175fb4ce44n/aHeodo
2020-10-29JEI_100120_GDP_102920.docdoc 203c3fd643e932d50df0ccb5aa112bf49bbf44dd16e722b4bdc67551bf3fb133n/aHeodo
2020-10-29Doc_PO_10292020EX.docdoc 316d4d608dd006d9abc0d3530dd84b38bf4b22bec80a8f5821f795c9b52f2cadVirustotal results 40.32%Heodo
2020-10-29FRBC_05976773.docdoc 5d0b92f454b00f1679bc6b090749bf784d1fa854eac55bf453eec083b6aa2076Virustotal results 41.27%Heodo
2020-10-29Dat_LKG_100120_CMW_102920.docdoc 7161db36ab8dfa34e4ae1aefa3d4fd7923a2a89118835e1e8bc905216bbf70e8Virustotal results 38.10%Heodo
2020-10-29INF_52311246.docdoc 1baeed811a902b926b7e18dca28f8eb0f73a98a4b06b396119ac5532f0a6d9edVirustotal results 36.84%Heodo
2020-10-29Mes_SKX_100120_HVH_102920.docdoc 4c8eeccd2a16f80874acd0057d5ec622d3701e32a3198bdb763f39e39ea28982Virustotal results 38.10%Heodo
2020-10-29Attachment_JYK_100120_JLY_102920.docdoc 1053508dba9607d8d25a553d3059249c8ff3fc0f143ea47103c1842a20098c2cVirustotal results 38.10%Heodo
2020-10-29U2ZB5717J6SCQ.docdoc 384a86ce03971610e03d72c4c46dd311c1719b3264e1f8724c6314a5f724b5ccn/aHeodo
2020-10-29UNTITLED_QH52G7B7GD05R.docdoc f54166916a8e40e0d024df928029c9f35e013fb4b7a39eeb0554e8dc2820dc9cn/aHeodo
2020-10-29List_PO_10292020EX.docdoc 86e75a29b09e4c13f09413659396c9e8807d5ece5659f8aa54e011613ed7c447n/aHeodo
2020-10-29DAT_PO_10292020EX.docdoc 46e6c0f62d299a4510ce400f90d5f8e2280b0ffa5e465ce7433624327bc07c0bVirustotal results 36.51%Heodo
2020-10-28file_PO_10292020EX.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7Virustotal results 25.81%Heodo
2020-10-28File_PO_10292020EX.docdoc b693171616c84c6e6bf6f7a486ac2efef18cab45a608593d95def463549f2f74Virustotal results 25.40%Heodo
2020-10-28Mes_F1O18FIYZDFL.docdoc b453a71649f01fe941d53cdae60f24c08a2ef3294472d662be990ed0b961d3ccn/aHeodo
2020-10-289373274629.docdoc eb056d51f99a6aeefbd8db271b24784e988b456f939812f40b9b6108a4805941Virustotal results 22.58%Heodo
2020-10-28Rep_BDW_100120_VHK_102820.docdoc c79ff6d2cb77b1d4e7bc6bea1ea1b05d78d536e72254e93dbaeb1122ff214d8eVirustotal results 22.22%Heodo
2020-10-28Inf_PO_10282020EX.docdoc f25bd084ce8d81cd2533601965f19c49105798af5fa7465757626b6cd057dd61n/aHeodo
2020-10-285OX8IAMQ.docdoc aa4fa922d7e80e83494ebc5639c0549754860e3de9ffd6b8f4f455a8ef6f8a2fVirustotal results 19.35%Heodo
2020-10-28FILE_PO_10282020EX.docdoc e5efd5e64316b51e501368020870705546ec2e8de04a25f5905192984126e747Virustotal results 17.46%Heodo
2020-10-28INF_14551256.docdoc 3fe50d0556d64f8a7214fa4e311bb0075f31b6bb0ea009d852c70bbe51a1782aVirustotal results 17.46%Heodo
2020-10-28LIST_QP0746312955DT.docdoc 6f587af9bf1d3fd4e20091fbeeff179d6280cc928c2e02857eb954aa37c7de98Virustotal results 17.74%Heodo
2020-10-28File_PO_10282020EX.docdoc 3e40a7defd105440e12f2955234fba81780b20f1dbc188417b1381f6738ab15fVirustotal results 17.46%Heodo
2020-10-2856057235456626746209281.docdoc f8c7566296ab5b125218fcfca6cb017b25bf92027db687ec545e8897a62c59f9n/aHeodo
2020-10-28rep_757649754648951596579026.docdoc 6db32dbb0eafc0f691a50a4632adf82b9e0206663e1b82259542e8eecdfae00aVirustotal results 17.74%Heodo
2020-10-28Inf_99104793239851685.docdoc b2df21abd3019bad332f1f34211b5a7f809af8d92737bb020afff3e6f0147a37n/aHeodo
2020-10-28Dat_CX2MAYTUUGT.docdoc aa825d666a2394dad05c014830cd132ecdbabfe1dcfd7e7eba18ed43bda6de33n/aHeodo
2020-10-28inf_8TRS91B.docdoc fda83ece49e1914433f256654dde13a87be6f4a6b03bde2e2060c2ee1cdb815dVirustotal results 25.40%Heodo
2020-10-28LIST_PO_10282020EX.docdoc 0285b11153063e88e38a1f507f0bc7da9d0cd443a93a28f5d029fb201910f212n/aHeodo
2020-10-28Inf_ZL8364685916PS.docdoc 193422b30b299a52450704ddbc93cc49c2bf39fb28b197b01d27bb4ed99c09e7n/aHeodo
2020-10-28dat_PO_10282020EX.docdoc 245da199877ac955b9c2640666afb19d13d640da90766a000f6fc8b2c909582en/aHeodo
2020-10-28LIST_35792020.docdoc e3f985d78f34ecba84d0385e8f3eb538aef89ae24be739e98166ce3c3422b236n/aHeodo
2020-10-28Rep_AJP_100120_HEM_102820.docdoc ae264639594117f77da175c96741827cc7ecee91be8eeb65c10f207c26a2e800Virustotal results 17.46%Heodo
2020-10-28Attachment_TNUHQT91FIUFCHM.docdoc c7a9fcbd5e7cf2f7c00c2ce737e5f37d79fca2af4840700fbec2812fe888df80n/aHeodo
2020-10-28mes_BWUDKX9I.docdoc 19c244f40868914450fb2bccb57e67ab4fb5679b222017b8c0dfd53dc1980334Virustotal results 17.46%Heodo
2020-10-28FILE_36503464.docdoc 5a3856662e4cbb0a005a296d49553490ac6012c6d56158cdc1b75615410ad792n/aHeodo
2020-10-28Rep_PO_10282020EX.docdoc 55b75c968db5ee5a5d9c094f132128d97bac46c4e846ecb190fef5b3a002fab4n/aHeodo
2020-10-28list_8769072724220.docdoc 4c8c238793080292318a1698f8e3bb506d63d0e1335171fb6ba9ce1369c5daeeVirustotal results 17.46%Heodo
2020-10-28UNTITLED_OGN_100120_ZPO_102820.docdoc 0e2c0a0f94967cefdd4f1faa8e5d51a24a7d8c786970382aba5143ab4e0c98c4n/aHeodo
2020-10-28DOC_TBV_100120_KYU_102820.docdoc 586ff0aded5422c4339495e0480f86f8454c8a813252983954522edc060f6e0en/aHeodo
2020-10-28INF_PO_10282020EX.docdoc f557390768f97bbb354c11917ec9e1ae3447832fbc09b34625656d8cb3db0931Virustotal results 14.75%Heodo
2020-10-28list_BKF_100120_YDX_102820.docdoc c88a8bfd26b88fe11810b85a6ced566f6ecd9c06b535f98d8c7451c66c1716d2Virustotal results 28.57%Heodo
2020-10-28ARC_PO_10282020EX.docdoc ce14f27765b4ed177ea779ef8f7eb00b4e09b985d0969e6a139c40a58133956fVirustotal results 28.33%Heodo
2020-10-28dat_99440508812544823962.docdoc a2b3de3e6d67d8b984e20da13e2338fb10bb97088378f08537ed93228f6850e1Virustotal results 28.57%Heodo
2020-10-28LIST_GU8712100676TD.docdoc 971349194e2895c67d792f09a40990e6754e2ce4fa00b738c17c34cbb88cc6e2n/aHeodo
2020-10-28Untitled_LY6386799635ED.docdoc 0fdb302c3db79d7ed89244d7adf4c56d5cc9e4643c3e5bac39c3e82cff3834e7n/aHeodo
2020-10-28LIST_PO_10282020EX.docdoc 783e3178de387969ad58cadd83de2b88c6cffa406063d2f66e5ee8b67db11b4aVirustotal results 32.08%Heodo
2020-10-28Untitled_46405851139.docdoc 7b343ed21ad3bb90d645e681807a420dfe3d74c032752a75cdaa9aa8cd934663n/aHeodo
2020-10-28PO_10282020EX.docdoc f10a2b9719d2cd6b88deefff1b2c61c214527041c7097ccd16d96c80c577f58cVirustotal results 28.57%Heodo
2020-10-28061504000251939.docdoc 969f5e0df23f888aebe6c8cd981961e3bb23f514d3d55148d8c56d0309a7532dn/aHeodo
2020-10-28rep_073613435572317395198.docdoc af7a1932766cf0a2a6bc07298751e49a47f81b2b7f255579bcc6d1a93f335af4n/aHeodo
2020-10-28DOC_LOZEFZI84V.docdoc a67871eaa10790dfc0459026fe390127f88e0e7ef794ca29ca3ef501bf0bbc98Virustotal results 28.57%Heodo
2020-10-28inf_80420435030923021365363.docdoc 089982175b8c27323227a0cbe60942992e1cd89852436e481f6947e75cb25d67n/aHeodo
2020-10-2802096863.docdoc 96c1906f7dbb6cdf1beff4a38feeede08acd1e3c95112c076c1d4c7a6cd0adaan/aHeodo
2020-10-285360921175324547132244.docdoc 087c51a90ce1975819e515fd65ce7583219cb9a7eecfe2c20191cf2d1196eac9Virustotal results 29.03%Heodo
2020-10-28PM_4897838667488334335165731.docdoc ed432b4a387becc419df96f24140626602c26a169999780c2309f0f5190a1321n/aHeodo
2020-10-28LIST_7XTVLE3QDPDMJ7.docdoc 9c509bf6c3b7824436cb299b2efffd013f3b0b156e9398a6975b71b50152cac3n/aHeodo
2020-10-28file_UD2330793097EI.docdoc a74bd9bb59caf16dcb34bc909644f9b39712ff04e230af2fd8f4838af00e85f8n/aHeodo
2020-10-28Arc_JUO_100120_FNN_102820.docdoc 2a46f3f595f2eea533b556a67f2558d85d955f1784d1d48cbe78b2e5fae35f34n/aHeodo
2020-10-28list_ZF1VP6C.docdoc fe13971c49c4731ae4fdc32c49bbb6796383a27db3ca2340642ed9d0c1753880Virustotal results 31.48%Heodo
2020-10-28QQG_AKK_100120_GFB_102820.docdoc 3120df1e06f01820a9e9aaf64e33f5ff4b4e39647ef7552f6f98535a9c17e68dn/aHeodo
2020-10-28AGWOOE3FQXK.docdoc d3e4041b0325e0794fe6a1b0a78783b8c05b595f0631c24d7d8e11c53fa5e8e4n/aHeodo
2020-10-28Attachment_UKE_100120_IRO_102820.docdoc f3caca68ae462481d5bac777996fa838a0dce95c7eb782713404fa5e3712a2abn/aHeodo
2020-10-28File_SD2559627062XG.docdoc 56bac923cdfd4440f1cb05f87560995bd487d31fb83f16ba23e935825657a7feVirustotal results 23.81%Heodo
2020-10-282710722816329069.docdoc a9dab3a7ee17c4e9ebd90271c21ba1f27a69094147e4f37b14e8b584ef3bf74cn/aHeodo
2020-10-28Rep_PO_10282020EX.docdoc b7ee22f0341587e221b8a80c3caf8fe78b8d8ba06220d4cc28641f82d0d32bb0n/aHeodo
2020-10-28N_PO_10282020EX.docdoc e809029e144d585294881c1cc21836d527c1547b45b9f97446ca6bc9987c3ee8Virustotal results 25.00%Heodo
2020-10-28FILE_JO8573389462XP.docdoc 5e692d0f6341638d540a0dd0458062a4852cdc65dd6551956aaa28c4d417416aVirustotal results 27.78%Heodo
2020-10-28ITU_100120_ILW_102820.docdoc 1fb4278069691dd947dc414fae8cd33f4b9309293ff8919ab9fdf39e30cda63an/aHeodo
2020-10-28INF_82232222.docdoc 2465a69c8fb97c28ffa75430d1a57b44738516d54440661711c1284bcb81a99en/aHeodo
2020-10-28mes_PO_10282020EX.docdoc a30d2b343e3646a2a05e98c5b7f976a1f67e12574ecb880a2a460bec35735f6fn/aHeodo
2020-10-28doc_EB2P9S9YZM4.docdoc 4d2065b87b5e9b6d1f4bc0bb53b3244c9d61eb3fd8c95d64757935758065ff29Virustotal results 22.58%Heodo
2020-10-28File_R6NI8S2.docdoc d3c0be044c41601dfa9c299cdd01957fdb3368175976582bc1d83c203391c78dn/aHeodo
2020-10-27DAT_PO_10282020EX.docdoc 9efa8997bf4ffcc29b996b1a0dd651e92bacb8e79143a0c008cf1eb4a8b41cbdn/aHeodo
2020-10-27UNTITLED_7DUBR9R3I35N.docdoc 90f1f20d90c0a5c6c32d6eca01833ff1db7b1325a5db427d7c5871fe3d5096f3n/aHeodo
2020-10-27list_5517565429638788459040913.docdoc bfc255c1fae47d22c3a502329ae24b49b0fc4169c49c13a4b1091cb686e3ccedn/aHeodo