URLhaus Database

You are currently viewing the URLhaus database entry for https://mobaviation.com.br/wp-content/PhDYRnvcUlnAQaKF79LC6b6XC1sx6IfVLuNVMTPELTQIwItaQZGT6iQm/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:761408
URL: https://mobaviation.com.br/wp-content/PhDYRnvcUlnAQaKF79LC6b6XC1sx6IfVLuNVMTPELTQIwItaQZGT6iQm/
URL Status:Offline
Host: mobaviation.com.br
Date added:2020-10-28 15:29:07 UTC
Last online:2020-10-28 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 15:30:06 UTC to abuse{at}locaweb[dot]com[dot]br)
Takedown time:4 hours, 13 minutes Good (down since 2020-10-28 19:43:39 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-28UNTITLED_75288980.docdoc aa4fa922d7e80e83494ebc5639c0549754860e3de9ffd6b8f4f455a8ef6f8a2fVirustotal results 19.35%Heodo
2020-10-28ARC_52703211.docdoc 03cee0e4bd76ec300e6e09d41fb6cfc6e24346ed58c3aec95bc6a8dae7838a69n/aHeodo
2020-10-28doc_QYM_100120_TFW_102820.docdoc 548e2dd3c73fb009710071b48a2afd21140eb1328ad31397857707060efc61a3n/aHeodo
2020-10-28LIST_VX4585226022SZ.docdoc ac9272ebdc022c3e93ef6dff217e30a0434094ccb3b6c5ab79cc97a94cf1825dVirustotal results 17.46%Heodo
2020-10-28file_WOH_100120_LER_102820.docdoc 78344d3e894155b6b6fa65119c449406b1ad08900e1cb58f68d7efba27947084n/aHeodo
2020-10-28Dat_99416934.docdoc 783f27e26d14d3995898c2e135fa9944d4015481789286efd92026c7ef2ffdbfn/aHeodo
2020-10-28FILE_PO_10282020EX.docdoc 6db32dbb0eafc0f691a50a4632adf82b9e0206663e1b82259542e8eecdfae00aVirustotal results 17.74%Heodo
2020-10-28Untitled_SUF_100120_KSN_102820.docdoc 972396084dfd074cef1c597e9766918fc0d394d11b8762d20395a86ad5b5883an/aHeodo
2020-10-28I_AUR_100120_PWZ_102820.docdoc de6aea23d0d0c49a68ce1e1762c71c2976fefcbf72b8b2676fec3c065edf9b47Virustotal results 16.39%Heodo
2020-10-28LIST_PO_10282020EX.docdoc 463241e6a0960fd095261611fd7c0192520ec5ef493dac9c695b7c0ab74f43fbn/a Heodo
2020-10-28Mes_TY4661935514GN.docdoc 1bb8a0d1e93744c80a39b6c4fbbcf82de0e0ad276098c7ef29a556daa1d0fa15n/aHeodo
2020-10-28mes_EE3936257317VP.docdoc 0285b11153063e88e38a1f507f0bc7da9d0cd443a93a28f5d029fb201910f212n/aHeodo