URLhaus Database

You are currently viewing the URLhaus database entry for https://buyfreshperu.com/wp-content/cFiBzMLXI7djvlY8OE0C1vtSqtWMaOMzRz5jaKis3cAmXzOpReTqZXUUtYaTBe/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:761898
URL: https://buyfreshperu.com/wp-content/cFiBzMLXI7djvlY8OE0C1vtSqtWMaOMzRz5jaKis3cAmXzOpReTqZXUUtYaTBe/
URL Status:Offline
Host: buyfreshperu.com
Date added:2020-10-28 17:59:05 UTC
Last online:2020-11-09 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 18:00:04 UTC to admin{at}frantech[dot]ca,fdias{at}frantech[dot]ca)
Takedown time:11 days, 22 hours, 43 minutes Bad (down since 2020-11-09 16:43:34 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-30Untitled_WV5005850758JM.docdoc 2004d64ee603572e13a168eca558d2ade8169581208022e51896e0589e07116dn/aHeodo
2020-10-30DOC_GCHCY0XXR6RD91.docdoc 1e363452c2a67d40f01390488a99f68ce6fab805b45eab93ee2db2469bf1b05fn/aHeodo
2020-10-30dat_PO_10302020EX.docdoc f4983c5881da987bb4dcca9069e0134657dbd559cf50165c0f35c3f1c4595948n/aHeodo
2020-10-30REP_OEJ_100120_XDV_103020.docdoc 7936fd61383857a4def1dbe2e3c320a04038eaeb4eac1d4c313a7dcf3dcd3cdfVirustotal results 35.94%Heodo
2020-10-30Dat_PO_10302020EX.docdoc 3416748dde8336e8081847df55d2ef61d1081a8bd9d76faa5922683231da8c94Virustotal results 43.55%Heodo
2020-10-30List_15JGRWY.docdoc 8c5ec7de8acd87d586e9bf7a74458c2a96f88ddbeacbde0ae3791d84594cc983n/aHeodo
2020-10-30Attachment_88017683077.docdoc a9e9b3f8a28330089d36e3ace6c5aa5ce2a38204767293a05e9c407ad2c4da4en/aHeodo
2020-10-30INF_83333560412206.docdoc f39a18ddfada38fd5b1f2c0c242c50c50fc842b96af2c528b843c6e8a155379aVirustotal results 37.50%Heodo
2020-10-306CMWAAEREN.docdoc ceac47b63a26dc75f489b8882600b4a6ffee7b0c5b5dca3ef7732746cd3ec229Virustotal results 40.32%Heodo
2020-10-30OYD_XKE_100120_TPG_103020.docdoc 4cd342f5baeddb3b9ce82b0f360ee43411ce30c8abede6b1f2a8181ed08da110Virustotal results 39.06%Heodo
2020-10-30FILE_XC2810814711UL.docdoc b2312b8854268bd1ca23427d7f7aaf8b3013aa1c4ef1d7676e73a5667418b9e3Virustotal results 40.62%Heodo
2020-10-30Attachments_FT8957120970WI.docdoc b8e37cb47da5ecf96e85afba207c615504c6e0d63335b4d2b9304fda9543eeafVirustotal results 34.92%Heodo
2020-10-30Mes_SRF_100120_XNS_103020.docdoc dadbc26e625015d8adce96198388664a77553836c9079db77d9084f5140a64e6Virustotal results 35.94%Heodo
2020-10-30Attachment_LI1568009430PI.docdoc a51d194ff7cccab7defe2f64127934a4ff3699de37c60019b40dd62d631baf04Virustotal results 34.92%Heodo
2020-10-30ARC_2SUAAELQZH.docdoc 2fe61550011a52e12cb324aa8cd06faeece3d1f05ae42f1c51bb7e055a647877Virustotal results 30.16%Heodo
2020-10-30Dat_TI1763996987WZ.docdoc c2d7ed25c4c34f44dc293833d3ea302d281d24981385c437e411a50ede35e72bVirustotal results 30.16%Heodo
2020-10-30file_15994734.docdoc 1e2927648e6c1e230ea519611dc8ffc414549f3da0fbe74854b2b2431a5731aen/aHeodo
2020-10-30Dat_PO_10302020EX.docdoc 6f999fd1f81ce48aa6d5e6da8c78e33ef00744f321f0f76af259f5846bc69b24Virustotal results 29.69%Heodo
2020-10-30arc_54532273.docdoc 2bd445000ef12b82a7dbb15a89578a71ad17a82cf8b2f19239fa60afb2ba84f3Virustotal results 26.56%Heodo
2020-10-29doc_16543568.docdoc 57a23ee50bad094280feb716af4f6917dcf92157f899a609736ead07c82e6432Virustotal results 26.56%Heodo
2020-10-29UNTITLED_578163012298.docdoc f69a365c0b551ac35010e98b64364feedecc32dae4284fb4afe62ced4b5d17ebn/aHeodo
2020-10-29Inf_53037282.docdoc fafa3f90775c5c6e8670f2ac2f7602e60d30f1f8ad279f220686e2eac91c25d5Virustotal results 27.87%Heodo
2020-10-29Attachment_27540699.docdoc 77b9310b55e2267372f1458cc4c01a27f95067e8d1dad41137ee348a9dccaa32Virustotal results 28.12%Heodo
2020-10-29Mes_PO_10302020EX.docdoc 168c46a9b7c3c72ceb572a447f6317e5b66aca4735ea8e096bc92f0d03628879Virustotal results 34.38%Heodo
2020-10-29Untitled_65241065.docdoc 00f960f2c4dc8abaf471b3c55c877aad66b636338bd2d67a565393058b78c125Virustotal results 35.48%Heodo
2020-10-29REP_HXZNHYT.docdoc 18456f3c952a94d93064ab5e0fc948f5cf8c35d1615d18886c7ef84d7dc22a2an/aHeodo
2020-10-29arc_URYBFX2TQY4C.docdoc 13346ca40c9af892bbe6242932212dc0320fcb73469450be993fe2b55f9126fcn/aHeodo
2020-10-29File_HR6829628760SH.docdoc 6f9552836a90ddea2d599b100ecf6a8cda08714d1f8f7f848cf6684ab9ff6b78n/a Heodo
2020-10-29OSSS_UVO_100120_XUT_102920.docdoc 51657b8a72e7e81349ee2744529184125522759769f93b02aebc3a2d33fddc2bVirustotal results 27.87%Heodo
2020-10-29Doc_LD0129794092IJ.docdoc 060a5c65a7cc6ecfa1290f84d608e94a147a447e1dd75ceedd3490ab079b6e74Virustotal results 31.25%Heodo
2020-10-29file_11526610.docdoc 8767bc3debff2695a4cb7dbd39f82b3c021888d7e244ffdc79af9883ce6f3449Virustotal results 31.25%Heodo
2020-10-29Doc_24913539.docdoc 542607ccac2f39cec525786fc1e27c06359a30669af200f8cd1974e15680fa73Virustotal results 31.25%Heodo
2020-10-29ARC_94391311584878718.docdoc a5d70f05d98720bd04c84440dd37092752ad5412805815ee92472cfc5c2aa1b7Virustotal results 32.81%Heodo
2020-10-29N_OHR_100120_FTT_102920.docdoc 1cfbaf38e833a8dcab12a6f7a0c42e5b5033bc4f188f022607c0e3853f92a6eeVirustotal results 31.75%Heodo
2020-10-29C_PO_10292020EX.docdoc 26116918df27572814521839a1d3ffdb544bc825e81c871aa514890cc6411d44Virustotal results 29.69%Heodo
2020-10-29FILE_NFP_100120_VGG_102920.docdoc 8346b2d45100fecf34dce32ed484ccecf682c1d43684638368b5d23cc8cdb83eVirustotal results 28.12%Heodo
2020-10-29doc_3640323679420968853.docdoc cc18834ee43070da990675aa77ca54b1f00e3af5bb607464447c3ebdcd2cb356n/aHeodo
2020-10-29dat_BSK_100120_MNE_102920.docdoc 99857fbf70a8f28cea7e04d87e230a5ac8003391f929a597df5f173b6aba145bVirustotal results 26.56%Heodo
2020-10-29DAT_ZM6328388902YM.docdoc 75df04fe2bbfe95af6c2ff3ad6beb372645597b0350f6cc16f995a09e27da829Virustotal results 26.98%Heodo
2020-10-29Mes_PLP8GKDQ0AP.docdoc 6e992b163322df62793d0be6d3352fd31697d2e040bd8997df4f954ae3537494Virustotal results 28.12%Heodo
2020-10-29arc_SAVLBOSQT.docdoc d29f362916257a9602f0f49c1032faeed3f6672544c15ad9c3b471a6328f830bVirustotal results 28.57% Heodo
2020-10-29N_PO_10292020EX.docdoc 5ed767510e9b2630ac3c6ea38470821c0c85acaf712cb5f45eddd5f6e0fcdc17n/aHeodo
2020-10-29Mes_1CHKXHCCVOT9V2O.docdoc 4578d3920daacf96ae730e547892639558d1ae71b1820d402dbcbfc3ebfcc816n/aHeodo
2020-10-29PQ_042457517402256335.docdoc b770e53d7a44c680b7ce2fc81e13b5de570dce0b57c587442874b3c5f6f94d83n/aHeodo
2020-10-29DAT_BIY_100120_IKS_102920.docdoc c77bdf30a9a94eafd3718a954bd79a8e9ad3b32761d6c45ae1b79245df7599bfn/aHeodo
2020-10-29arc_RTT_100120_JYT_102920.docdoc 93ef9ecf091dd0a2f463f8b10a73d301ad965547315b43fcd5c1a4995c513525Virustotal results 20.31%Heodo
2020-10-29K_BHI_100120_BXZ_102920.docdoc c56962ccf0f482b04c168639afb894430e7cb71c873faac02d8f3a34107f33a8n/aHeodo
2020-10-29DOC_7116721453890566.docdoc b3fa2642d482abe33fb06c5480db8883954bb076b663c838f67dc4966b89f71dVirustotal results 21.67%Heodo
2020-10-29FILE_13088662.docdoc 0cacb466a5cd54765f2b551a75b8b0880cd991d16fd662402d00efc578060da7n/aHeodo
2020-10-29Doc_PO_10292020EX.docdoc a372ab149bf1539aadb69ea0484133adaea91b0c000a9bfdafa445dc23230d3dVirustotal results 20.31%Heodo
2020-10-29DAT_JGE_100120_DJQ_102920.docdoc 4105e48c905f55328aa0a89a608c302216a2d4b119573ef85d1e9902d0531119Virustotal results 20.63%Heodo
2020-10-29FILE_70473239605684.docdoc 5caf4fac63b4007116c090e6db0db81ad250d822e1fc251885c10d80d24b861en/aHeodo
2020-10-29list_6RELVQ7M.docdoc 5a00d4a9d8e50c06f30007460af1dc4f73950dff8ef4d1966ec4098c16712bf0Virustotal results 42.86%Heodo
2020-10-29ZJ_PO_10292020EX.docdoc 0e53051dbf546a108fa426f2bcb29572190b7a210e906b9e2c5464e85d23cdaaVirustotal results 41.27%Heodo
2020-10-29List_DNN_100120_MJY_102920.docdoc 6cff316da0b26621e5b1fc3d5a85c6931a68a90fde20acf702195a175fb4ce44n/aHeodo
2020-10-29doc_RFM_100120_DNJ_102920.docdoc 613bf944597cf7f2300dcd8a24394ca5de6c6f85ae7e41d98b2a3b4fe59b6779n/aHeodo
2020-10-2970485536.docdoc 1f79e269f336ed5d08b7024f844206f953ca742c7bbaee4cdc6fc1e46c15f2abn/aHeodo
2020-10-29mes_XFD_100120_DRM_102920.docdoc 761d87bcf6f5369f3cf451125ea7a56b683a729b1a4caf4a329bfcf95591d189n/aHeodo
2020-10-29arc_BA4306659732DK.docdoc 99e51b37403045ddf233e0cb386646fd8113f346206f33dc28e6f8cf667f3dd4Virustotal results 38.10%Heodo
2020-10-29Mes_JQ5CHPUS.docdoc 1baeed811a902b926b7e18dca28f8eb0f73a98a4b06b396119ac5532f0a6d9edVirustotal results 38.10%Heodo
2020-10-29List_4O7UA01SRLXO8SV1.docdoc 4c8eeccd2a16f80874acd0057d5ec622d3701e32a3198bdb763f39e39ea28982n/aHeodo
2020-10-29LIST_PO_10292020EX.docdoc 1053508dba9607d8d25a553d3059249c8ff3fc0f143ea47103c1842a20098c2cn/aHeodo
2020-10-29INF_PO_10292020EX.docdoc d41fde459d5a6605355b1daac05e7fe5ed46f2f70d564951027067566a049475n/aHeodo
2020-10-29Arc_78315697.docdoc 665ea7994646d6f55327063f07c46e3d51cce78766dc14fc03031b5581283b10Virustotal results 38.10%Heodo
2020-10-29file_PO_10292020EX.docdoc 9f2ed62dea3b679b6dfecbb79905a34ef056e81af2e92c4249fe4521711b047fn/aHeodo
2020-10-29Mes_21190317311582629322769.docdoc 648262e8476fb8b619abd0b6929748ed5354de0997068e2d2c349a3c15d8f1d6n/aHeodo
2020-10-28Attachments_DF7045446644HG.docdoc 2a7fa7333c9651955476107db7c4fabaa333b34c5c6938bfad143ae443d94dd7Virustotal results 25.81%Heodo
2020-10-28PO_10292020EX.docdoc ff451db73672e713a3b5a30084d42b5d09a39ca3651cbb1b3c15ce4b18234592n/aHeodo
2020-10-28Mes_CDF4HRK2V.docdoc a3fc674142c99cf43ec65daf8d31036f96aac0f9ef66988b6b3d80ac73f60bfbn/aHeodo
2020-10-28LIST_PO_10282020EX.docdoc cb2de094d6518308daefaa75867659fdee298e4a0617b473ce48c4dcdea085deVirustotal results 24.59%Heodo
2020-10-28Inf_BI2UY7IUGE3GZ.docdoc c79ff6d2cb77b1d4e7bc6bea1ea1b05d78d536e72254e93dbaeb1122ff214d8eVirustotal results 22.22%Heodo
2020-10-28List_3034251766467947764567.docdoc aa5e7414db596bbbac651408e85b19557a2415a2e42a4a2689cf37c1f3dc1c10n/aHeodo
2020-10-28list_NT8917761433LP.docdoc d6303488215bed0c5947cbdf5bf3009ebd3e3e2e42817eb737f08741b0f3d57fn/aHeodo
2020-10-28dat_CQ3652137654XP.docdoc 74bb58aee05391c699fefedb79da019fc9e7b0d6d81d068d0ce1d192cc9e4556n/aHeodo
2020-10-28UNTITLED_PO_10282020EX.docdoc 290d99668c637b392210c43c77b9672357db0df908a2cee8c6c84399c0f3dc55n/aHeodo
2020-10-28mes_OF3725560497DO.docdoc 54a04ad4747b88954b6501afd0c033a819bfd9e67df5354ed77031d04e8e23bcn/aHeodo
2020-10-28LKUP_50334191437991.docdoc 93d882200983e8ea91da547916ade52e52c5f684c19434eb8e3312b4d4251bb1Virustotal results 17.74%Heodo