URLhaus Database

You are currently viewing the URLhaus database entry for https://www.cmpc.org.ar/replace/u8CzuzUycTjvfy/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:761792
URL: https://www.cmpc.org.ar/replace/u8CzuzUycTjvfy/
URL Status:Offline
Host: www.cmpc.org.ar
Date added:2020-10-28 17:33:17 UTC
Last online:2020-11-02 02:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 17:34:14 UTC to abuse{at}lacnic[dot]net)
Takedown time:4 days, 8 hours, 36 minutes Bad (down since 2020-11-02 02:10:42 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-28MES_PO_10292020EX.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7Virustotal results 25.81%Heodo
2020-10-28inf_747238683144.docdoc b693171616c84c6e6bf6f7a486ac2efef18cab45a608593d95def463549f2f74Virustotal results 25.40%Heodo
2020-10-28LIST_79151505.docdoc f22f6b796d73cadef21281fb4120d425395b7c6457e38524dde128830ccfc02dn/aHeodo
2020-10-28Arc_PO_10282020EX.docdoc 92bad3b1416d1b7f759e20c2214cbfe1f31b2f334d818e67dd917cde8a72befcVirustotal results 24.19%Heodo
2020-10-2832884743.docdoc c79ff6d2cb77b1d4e7bc6bea1ea1b05d78d536e72254e93dbaeb1122ff214d8en/aHeodo
2020-10-28FLC_100120_SGO_102820.docdoc 81c78e098a3815757ed038c5f386d54156fe5ea85eeea2bc5baceff398d35a3aVirustotal results 19.05%Heodo
2020-10-28dat_BT7190616143KC.docdoc d6303488215bed0c5947cbdf5bf3009ebd3e3e2e42817eb737f08741b0f3d57fn/aHeodo
2020-10-28ARC_GV9594977521NN.docdoc ad112b9ed4b1078a7142b24121c402ec49a036e33bf0e514f8bdc5b720c216deVirustotal results 17.46%Heodo
2020-10-28List_84241563.docdoc b37d06b7214bfe63791800e16b2589e81d2cebdd172b8d680fdf9e287f366674n/aHeodo
2020-10-28Inf_OKZ_100120_YFJ_102820.docdoc 3fe50d0556d64f8a7214fa4e311bb0075f31b6bb0ea009d852c70bbe51a1782an/aHeodo
2020-10-28INF_JSK_100120_IXY_102820.docdoc 3e40a7defd105440e12f2955234fba81780b20f1dbc188417b1381f6738ab15fn/aHeodo
2020-10-28Mes_RY8691181843IV.docdoc 6c0cb9fa14216686237503039df79f6ee1a2766d5878c2e3ab77c9ace4204c11n/aHeodo
2020-10-28doc_ZZB_100120_BFX_102820.docdoc f207f9d7d69d40750c785e148a03135f64befdda1557791c124d468ffe54f99en/aHeodo