URLhaus Database

You are currently viewing the URLhaus database entry for http://maximusatelier.com.br/puzo/zB2NFAuDg85sYO9AIWMlP5enQDJ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:949557
URL: http://maximusatelier.com.br/puzo/zB2NFAuDg85sYO9AIWMlP5enQDJ/
URL Status:Offline
Host: maximusatelier.com.br
Date added:2021-01-05 16:56:11 UTC
Last online:2021-01-05 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-05 16:58:09 UTC to CloudFlare Anti-Abuse API)
Takedown time:2 hours, 12 minutes Good (down since 2021-01-05 19:10:58 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-057NRS03AQ6OASM.docdoc 888776cebb09cc8d90c901e5d554ad1e10b89a06a5825dead7e08dab23fb7491Virustotal results 41.27%Heodo
2021-01-056J0EFU1FEH6VM9.docdoc 8244590faad750ada6f77a0967d82df9343e6e5df6882ec4926f1024d041c2d9n/aHeodo
2021-01-054QAUPJTP.docdoc 3139013c53da9f4c7c2fed417c91a6c3575034b75234dba4d13e5a9c0a5cead8Virustotal results 41.94%Heodo
2021-01-05QVB1OU0N7YUA.docdoc 62e74ce72095ea7b31c0afa3b8730fdbd7efb75dd60899a64f4879bca64d396fn/aHeodo
2021-01-05IJ62WQAR.docdoc 6eeffb79f8c4aa26fe40db3e13ce97d3fc0401bb06b16362301bde1524534f16Virustotal results 41.27%Heodo
2021-01-052FX1WEQ6S.docdoc 4e3a0ad4ce849705cfb0b25ceb1b9447b104129bf30552f0fe1591fac04a39a5Virustotal results 41.94%Heodo
2021-01-05I79TYIT8OCS9.docdoc a8713fbee086f687f8bd38ea51497a24ef912675ebdd1738a8d2190f980d6b57n/aHeodo
2021-01-05W0697OP.docdoc e4e839fc6e675fddabb7379eb120dbfcf806e83bbb109f762f1eab7aaf44b36en/aHeodo
2021-01-05D9MUQWHPVS.docdoc d9f1daa0db3b8bb962e18b383421e2af30f8a1b2c16d334b8c422b5d16d7b42cVirustotal results 41.27%Heodo
2021-01-054GGC0O3L1LV4.docdoc d46ba86119e2dd83214de690677f6a6804a514580f74a8b698bd9feba2c914a1Virustotal results 41.27%Heodo
2021-01-05RZXCN45TXJM8BAL.docdoc 45f05e1da52c5b530a011d51f38686ee7189707bbfa17d0b760de2a4a8895edan/aHeodo
2021-01-05HTTBZVYJSYNZ.docdoc a2790bfeafea9f12eea6a40da413d84e2517341f83f83c18ef5dc7f8fb9e4722Virustotal results 38.10%Heodo