URLhaus Database

You are currently viewing the URLhaus database entry for https://www.obraprimaconstrucao.com.br/wp-admin/ObAcTwtC6jXgLylgATFc7JcZXESkyy9ngsqn4Mo1AdNZqOigWx5XCnS/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:956426
URL: https://www.obraprimaconstrucao.com.br/wp-admin/ObAcTwtC6jXgLylgATFc7JcZXESkyy9ngsqn4Mo1AdNZqOigWx5XCnS/
URL Status:Offline
Host: www.obraprimaconstrucao.com.br
Date added:2021-01-12 22:39:07 UTC
Last online:2021-01-13 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-01-12 22:40:14 UTC to abuse{at}upcloud[dot]com)
Takedown time:12 hours, 44 minutes Good (down since 2021-01-13 11:24:51 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-13T84VC0H0.docdoc 841f665e7fa0dafb08a148c375fc49b0594eecdf01d44cc9b7ea8e6c6b5fe024Virustotal results 41.94%Heodo
2021-01-13L6J8GASY.docdoc a5bb3ac2e78e042dd5e7f8a6297f4c6290d2249def0472bc9cc8b4e7ee8b44b4n/aHeodo
2021-01-13KSYHAB2XJ6.docdoc f8721e02d2a1b17f4f0c25a48de68111b8fba9021c0d52937db63b6b71de90e7n/aHeodo
2021-01-136B7COVRJZS7SUFFC.docdoc e15c02bbd3d290f0492a1d6b55ef31424f833b24c9466e30744fdbed4665363en/aHeodo
2021-01-13NA7N9A6G9SY9G.docdoc 312b117cbf5978bd3892498f1a639053b43bcf66ae14b5d0eb891706fb266dc1n/aHeodo
2021-01-1398PKSPK96W60.docdoc 17ae598e992451fcbd61f1dfe70a4added1091173dadd5cb163aea9902eaf79aVirustotal results 38.10%Heodo
2021-01-13DJGDVV.docdoc 4ac3c771a4cf5e381984161bbef7c1df3a4c5b75d22d5c6dfd6b494d0cdfc073n/aHeodo
2021-01-13JR6QHNU8.docdoc 8ba824dd866fdd551510bd16a8aa9e635047ff142ae942f0764ee739f9189a24Virustotal results 41.27%Heodo
2021-01-13W6ZIMIM516BFQSDY.docdoc e50c941c576a54fb30415ca63016572e9104d7be02cf3a1f220e72e6aec6a1ffn/aHeodo
2021-01-13RSPYUKZ6.docdoc 91fefaa06a266ddd8ecf9b0bdc0233b9fc5ed2dc5890a9b3fb0b9d6d2484ec6fn/aHeodo
2021-01-13ZKQ0GWFY8F78L.docdoc 13ede1e9cb06a6abe06852ba6a76f88ddb689b084f5aeba3e0191db38eb60818Virustotal results 38.71%Heodo
2021-01-13Z7KVWL5U0.docdoc 097b546148ccae5d28356e609d5d5e40e78842cc86fbd8f95294c716cf972a15n/aHeodo
2021-01-135237URT97JFG7GQ.docdoc 69213fe20f37b11ee793f1a08646e8743dd43057e3590d982c1dcbe9c59e9cd9n/aHeodo
2021-01-13LVC8EQ6R.docdoc 5108bd26eac69910dba769ef8434a799db506304bd38e56cdf7cf180f046770cn/aHeodo
2021-01-13H2TF98.docdoc 1d60cf7a5a88c9b4a1b2c9ea649413891cd78db09b85027981ec9491cb954e1bn/aHeodo
2021-01-13OIWSYW.docdoc 4b0fc81c56dac2f6f2af440333f257bc04a338944fb5ce831dfb9aa19685d94eVirustotal results 38.10%Heodo
2021-01-13SF501X4TF1DM6MY.docdoc 3b34e75cce4b617fd876f0145c30b4ea5af865c2edb3b8cc89fdc268bb347b1aVirustotal results 38.33%Heodo
2021-01-132N4W3RVEQZU1V8AI.docdoc 8119507768cd4e6016c010e4c444ef4675e3e44509c9935d10dd5347aa9e5619n/aHeodo
2021-01-13STZDH3P3BH8RRY6S.docdoc 1482d4727689bb4aedeeb0dc3658dd0ec67d73c6fc1e66bc1ab074bc4b6dd739Virustotal results 35.48%Heodo
2021-01-13NPJ6DG.docdoc 517e2cbde3c6477b3c5f844d987a09b94e880056661d2b5919444a00f6402fe9n/aHeodo
2021-01-13V40KOV5Z0VBO.docdoc 8add0bb0118c43903e19b209639a22041bb08f833c47625a62be533c7eab7151n/aHeodo
2021-01-13M1L50O5XA4.docdoc 16eb97b9e71a4f97f60c57a97cef02a96840cf2265de548a48d100c53682f079n/aHeodo
2021-01-13VIRM7KC.docdoc dce677f882225d278abb2d40d2b9265cce902255c7f76c01d7e3600eb9693359n/aHeodo
2021-01-13ES2TLX0YHLTEKW.docdoc 2d2fa64b93abf2055071f77d797832e29b37dcf63c6991b6dbfd0e779af8c115Virustotal results 33.33%Heodo
2021-01-13LAUVWFURWP8M8CQL.docdoc 4771dd49032265dd34546f17b8e6c0b5f76db086e311ff7bdf0999bec88085eeVirustotal results 33.33%Heodo
2021-01-13YNT8AQRNTP.docdoc 2a53fabb5988ade6a70b074b8f0be78d6538fe2242407d2486b949d07e014b90n/aHeodo
2021-01-131PN61R8Q.docdoc 866744b3695d0b0c7d2e887aa1d3b2be95583ae6a88f31fbc0f4f6c150477804Virustotal results 29.03%Heodo
2021-01-133TTEC3HDFYPQN80.docdoc 2b6753eb2af4183cddaba440724e2688f177239a136d69c216b0823508fadf15Virustotal results 29.03%Heodo
2021-01-13TL3GUQJ7OFPZS.docdoc c3b7ff21320580568f7e1b978e5374ccb1a15fe34c35f94eb2463c1570faf385Virustotal results 26.98%Heodo
2021-01-13ZKUNZX7I7XOBLJQ.docdoc 274ec03dc6e83bf12177697052207e2413c15948b42bb11df4a4ee110eb84803Virustotal results 26.98%Heodo
2021-01-1328JN8C11RUJH.docdoc 8510370235baa3ba052e4110ae5571a7f1215dc584e1ef954934737a71a87b8bn/aHeodo
2021-01-131WRJW4.docdoc 02a4f728e72a9b3f8acbdfdce4bb3390cdbd32fd2a8ff9d4294afbfeb8ef65e6Virustotal results 24.19%Heodo
2021-01-130NAQC5BP.docdoc d2232dfab1a3d97b00285d3baeedaff80ee090c7fb8bec50f6fb23554fc7d4aaVirustotal results 22.22%Heodo
2021-01-13V7LX82F2A.docdoc d77e78f619d681603f2d2c3ecc803419724067121e18623302a4155a0efba1fbVirustotal results 22.95%Heodo
2021-01-13XI90VPJ0F8DMRJQK.docdoc 6531485e7908b63b71fed89fd7a5e90a7d0250b15f1f9f25552776518ecf1b94Virustotal results 22.58%Heodo
2021-01-13UFM0FA1.docdoc d93333dbffefb763131024dffc1c0723d897a65c7b8d2701f5fa5bc9498ae89fVirustotal results 23.81%Heodo
2021-01-13NVCT24A.docdoc b80739d7b435e5a620e5c121269e1f8a2050a87d1a4d6b934107346c62d09ddcn/aHeodo
2021-01-13I0ZXWIRJP8MQC4H.docdoc 8c2f83d72c4e23bb25c6c7eb77d454db3994f2dd2c4cacde4a29011c0a029055n/aHeodo
2021-01-13SHI0PZ2NEP.docdoc d537bf50ec4b548ea84743bd82fca89f61456fdabd24530cb04214c8d7fe7043n/aHeodo
2021-01-12YEVRML14J43.docdoc fa94db36e6f47c1aaf4d141055594716287ceb31cfd4b5ce0ab5c350cffc7969Virustotal results 20.63%Heodo
2021-01-12I9QFNAAJZIUF.docdoc 82cbebfcfcfbdd97e4f714428e572c4f2320187eac194b733816109c957e9505Virustotal results 20.63%Heodo
2021-01-12O4MS8FNYH3K6.docdoc 64eb7d3d61983ec4c3f76417ab3adae35e948beedfb837b63af638d04a455825Virustotal results 21.31%Heodo
2021-01-12Q08VYD9N42.docdoc b75406d6fe0aa668a576c191ab39489f0384ceeed853597d9f951bbf8b11326fVirustotal results 19.35%Heodo
2021-01-12BIBXMVBA1O2CG8L.docdoc 7fddbf064d9c7c99d9949a3af2f5f9fcbce61a69b80cd3c81bbe12f58cc68484Virustotal results 20.63%Heodo
2021-01-12D4BUGID4.docdoc 0f2701f8a2887d860bdb0dfe233f7e25ee8852103dc87658ff1b67b34a1c30b7Virustotal results 20.63%Heodo
2021-01-12QJ8JCM6WLS.docdoc 988a420c56f820f5165a56b7d242998ef580c2191ef089928aec599f8732533dVirustotal results 20.63%Heodo