URLhaus Database

You are currently viewing the URLhaus database entry for https://cmnivaria.com/wp-content/QY4hIpT7uw4RHC8QOGW89bfZv7UNWEP0DLUF3LJGfspX7/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:764538
URL: https://cmnivaria.com/wp-content/QY4hIpT7uw4RHC8QOGW89bfZv7UNWEP0DLUF3LJGfspX7/
URL Status:Offline
Host: cmnivaria.com
Date added:2020-10-29 09:35:11 UTC
Last online:2020-10-29 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-29 09:36:57 UTC to abuse{at}axarnet[dot]es)
Takedown time:3 hours, 40 minutes Good (down since 2020-10-29 13:17:04 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-29MES_1640763688805725578546.docdoc 1909a3514994e354da8e5abdfbb3b73173a1a6782a739ebdbfbacf098abf0fb2Virustotal results 20.97%Heodo
2020-10-29MES_08147170.docdoc 78234ae12ae1b1b5068a17fe32b5a2656a7f999789fa9df9eddb8445e6fd41d6n/aHeodo
2020-10-29arc_53291408.docdoc 8e33cf2204f19a828e1018b6ab9c762d52deb1ecd43a920491561fefd654086fVirustotal results 20.31%Heodo
2020-10-29AMH_100120_ICC_102920.docdoc ae454b06f63308de7e1a613281feea2eef089041c67af45e72ceec804482b526Virustotal results 20.31%Heodo
2020-10-29list_EM0530640252ES.docdoc 0cacb466a5cd54765f2b551a75b8b0880cd991d16fd662402d00efc578060da7n/aHeodo
2020-10-29Inf_MS6809134546QW.docdoc a372ab149bf1539aadb69ea0484133adaea91b0c000a9bfdafa445dc23230d3dVirustotal results 20.31%Heodo
2020-10-29ARC_YTQ5EJXLCRR2.docdoc 0eabb37538a78fb8b43917d7263b14ceeb7cd09922f2d1c397b8db18cab99e2bn/aHeodo
2020-10-29UNTITLED_UFA_100120_WTV_102920.docdoc 585ab6cc0502c04dedbca9318f5d7d278050dcfbeb477a09e8fee5b66916e38fVirustotal results 42.86%Heodo
2020-10-29Doc_ER3764332807ID.docdoc 38df7a8d7d8ddeec4905b01777148222f208d5030b7a44665b5fdafb5bd9ff19Virustotal results 40.32%Heodo