##############################################################################
# URLhaus ASN CSV Feed                                                       #
# Generated on 2026-05-28 06:14:57 UTC                                       #
#                                                                            #
# For questions please refer to:                                             #
# https://urlhaus.abuse.ch/feeds/                                            #
##############################################################################
#
# Feed generated for AS8342
#
# Dateadded (UTC),URL,URL_status,Threat,Tags,Host,IPaddress,ASnumber,Country
"2026-01-22 17:08:08","http://78.153.155.97:8080/download/dvmw.pdf","offline","malware_download","opendir|ua-wget","78.153.155.97","78.153.155.97","8342","US"
"2026-01-09 13:07:29","http://78.153.155.97:8080/html/info/index.php","offline","malware_download","elf|php","78.153.155.97","78.153.155.97","8342","US"
"2025-12-15 12:54:12","https://upsinfo2025.com/download/dvmw.pdf","offline","malware_download","MetaStealer|msi","upsinfo2025.com","78.153.155.97","8342","US"
"2025-12-15 07:04:08","http://78.153.155.97:8080/downloads/README.pdf.lnk","offline","malware_download","lnk |MetaStealer|opendir |WsgiDAV ","78.153.155.97","78.153.155.97","8342","US"
"2025-12-07 17:05:18","https://www.1c-bitrix-perenos.adm-center.ru/","offline","malware_download","clickfix","www.1c-bitrix-perenos.adm-center.ru","195.161.68.210","8342","RU"
"2025-11-01 10:33:11","http://any-deskt.net/download/setup.pdf","offline","malware_download","MetaStealer","any-deskt.net","78.153.155.97","8342","US"
"2025-11-01 10:33:09","http://78.153.155.97/download/setup.pdf","offline","malware_download","MetaStealer","78.153.155.97","78.153.155.97","8342","US"
"2025-10-31 21:51:10","http://78.153.155.97:8080/downloads/manual.pdf.lnk","offline","malware_download","lnk|opendir|Quakbot|WsgiDAV","78.153.155.97","78.153.155.97","8342","US"
"2025-08-04 19:23:18","http://myprojectdocs.com/file/setup0408.pdf","offline","malware_download","encrypted|opendir","myprojectdocs.com","78.153.155.144","8342","US"
"2025-04-20 07:59:17","http://pluswap.com/files/progi/WapProof.zip","offline","malware_download","","pluswap.com","195.161.68.210","8342","RU"
"2025-02-09 19:33:02","http://193.233.237.190/bot.arm5","offline","malware_download","32-bit|elf","193.233.237.190","193.233.237.190","8342","RU"
"2025-02-09 19:33:02","http://193.233.237.190/bot.arm6","offline","malware_download","32-bit|elf","193.233.237.190","193.233.237.190","8342","RU"
"2025-02-09 17:42:02","http://193.233.237.190/bot.m68k","offline","malware_download","32-bit|elf","193.233.237.190","193.233.237.190","8342","RU"
"2025-02-09 14:05:03","http://193.233.237.190/bot.arm","offline","malware_download","32-bit|elf","193.233.237.190","193.233.237.190","8342","RU"
"2025-02-07 10:10:03","http://193.233.237.190/bot.arm7","offline","malware_download","32-bit|elf","193.233.237.190","193.233.237.190","8342","RU"
"2025-02-06 01:41:02","http://193.233.237.190/bot.ppc","offline","malware_download","32-bit|elf","193.233.237.190","193.233.237.190","8342","RU"
"2025-02-06 01:40:03","http://193.233.237.190/bot.mips","offline","malware_download","32-bit|elf","193.233.237.190","193.233.237.190","8342","RU"
"2024-10-16 15:24:23","http://arcloud.ru/ammyadmin.exe","offline","malware_download","FlawedAmmyRAT|FlawedAmmyyRAT","arcloud.ru","81.177.6.164","8342","RU"
"2024-10-16 15:24:10","http://algoritm-support.ru/AA_v3.exe","offline","malware_download","FlawedAmmyRAT","algoritm-support.ru","81.177.24.41","8342","RU"
"2024-10-15 16:16:10","http://195.161.114.43/smg/tools/dControl.exe","offline","malware_download","","195.161.114.43","195.161.114.43","8342","RU"
"2023-06-19 07:26:26","http://81.177.143.184/mig.exe","offline","malware_download","CoinMiner|exe","81.177.143.184","81.177.143.184","8342","RU"
"2023-06-19 07:26:25","http://81.177.143.184/dc.exe","offline","malware_download","exe","81.177.143.184","81.177.143.184","8342","RU"
"2023-03-14 19:02:11","https://potolki-razumno.ru/connect/","offline","malware_download","250255|7710|geofenced|Gozi|ISFB|ITA|redir-302|Ursnif","potolki-razumno.ru","195.161.69.18","8342","RU"
"2023-03-14 19:01:41","https://potolki-razumno.ru/scarica/","offline","malware_download","250255|7710|geofenced|Gozi|ISFB|ITA|redir-302|Ursnif","potolki-razumno.ru","195.161.69.18","8342","RU"
"2023-03-14 19:01:13","https://potolki-razumno.ru/agenzia/","offline","malware_download","250255|7710|geofenced|Gozi|ISFB|ITA|redir-302|Ursnif","potolki-razumno.ru","195.161.69.18","8342","RU"
"2022-04-26 10:41:04","http://gym1505.ru/sites/default/files/osa/asobubu_tdutYlr98.bin","offline","malware_download","encrypted|GuLoader","gym1505.ru","81.177.48.197","8342","RU"
"2022-04-25 15:47:05","http://gym1505.ru/sites/default/files/bin_tbRxmWTuEH67.bin","offline","malware_download","encrypted|RAT|RemcosRAT","gym1505.ru","81.177.48.197","8342","RU"
"2022-04-25 15:47:04","http://gym1505.ru/sites/default/files/remcos-new-WO-S_ysrycQDeu215.bin","offline","malware_download","encrypted|RAT|RemcosRAT","gym1505.ru","81.177.48.197","8342","RU"
"2022-04-25 15:46:08","http://gym1505.ru/sites/default/files/eryt.vbs","offline","malware_download","RAT|RemcosRAT|vbs","gym1505.ru","81.177.48.197","8342","RU"
"2022-01-19 07:30:07","http://yonka-centr.ru/yk3f5e/032411937-2607850/","offline","malware_download","emotet|epoch5|redir-doc|xls","yonka-centr.ru","81.177.140.54","8342","RU"
"2022-01-19 07:30:05","http://yonka-centr.ru/yk3f5e/032411937-2607850/?i=1","offline","malware_download","doc|emotet|epoch5|Heodo","yonka-centr.ru","81.177.140.54","8342","RU"
"2022-01-11 22:01:06","http://bc.opelservice.ru/privacy-policy/AsiU/?i=1","offline","malware_download","doc|emotet|epoch4|Heodo|SilentBuilder","bc.opelservice.ru","81.177.165.50","8342","RU"
"2022-01-11 22:01:04","http://bc.opelservice.ru/privacy-policy/AsiU/","offline","malware_download","emotet|epoch4|redir-doc|xls","bc.opelservice.ru","81.177.165.50","8342","RU"
"2022-01-11 21:46:05","http://123.opelservice.ru/privacy-policy/GiD6xUhw3rRVko5/","offline","malware_download","emotet|epoch4|redir-doc|xls","123.opelservice.ru","81.177.165.50","8342","RU"
"2022-01-11 21:46:05","http://123.opelservice.ru/privacy-policy/GiD6xUhw3rRVko5/?i=1","offline","malware_download","doc|emotet|epoch4|Heodo|SilentBuilder","123.opelservice.ru","81.177.165.50","8342","RU"
"2021-01-29 16:25:05","http://77.83.117.225/snype.arm4","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-29 16:25:05","http://77.83.117.225/snype.arm5","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-29 16:25:05","http://77.83.117.225/snype.arm6","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-29 16:25:05","http://77.83.117.225/snype.mips","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-29 16:25:05","http://77.83.117.225/snype.mpsl","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-29 16:25:05","http://77.83.117.225/snype.ppc","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-29 16:25:05","http://77.83.117.225/snype.sparc","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-29 16:25:05","http://77.83.117.225/snype.x86","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:16","http://77.83.117.225/yasddfa.ppc","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:16","http://77.83.117.225/ysdfd.x32","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:15","http://77.83.117.225/gafsde.mpsl","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:12","http://77.83.117.225/gadfe.x86","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:12","http://77.83.117.225/yakuza.ppc","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:08","http://77.83.117.225/yaksddfs.i586","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:07","http://77.83.117.225/gaefds.arm6","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:07","http://77.83.117.225/gafdse.mips","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:05","http://77.83.117.225/gafsde.sh4","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:05","http://77.83.117.225/sdfza.m68k","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2021-01-25 16:40:05","http://77.83.117.225/yafsda.arm4","offline","malware_download","elf","77.83.117.225","77.83.117.225","8342","RU"
"2020-11-18 12:14:26","http://logotypin.ru/g4ea7trqx.zip","offline","malware_download","dll|Dridex","logotypin.ru","195.161.41.242","8342","RU"
"2020-10-16 21:44:04","http://gkdon.ru/wp-admin/1S6VmpyWk4BHE/","offline","malware_download","doc|emotet|epoch1|Heodo","gkdon.ru","81.177.174.12","8342","RU"
"2020-06-02 15:36:24","http://xn--80aahkozerffs9j8a.xn--p1ai/ikzrat/NQAD_7705928_01062020.zip","offline","malware_download","Qakbot|qbot|spx131|zip","xn--80aahkozerffs9j8a.xn--p1ai","195.161.68.159","8342","RU"
"2020-06-02 08:08:35","http://xn--80aahkozerffs9j8a.xn--p1ai/ikzrat/9741599/NQAD_9741599_01062020.zip","offline","malware_download","Qakbot","xn--80aahkozerffs9j8a.xn--p1ai","195.161.68.159","8342","RU"
"2020-06-02 06:58:53","http://xn--80aahkozerffs9j8a.xn--p1ai/ikzrat/NQAD_16401_01062020.zip","offline","malware_download","Qakbot|Quakbot|zip","xn--80aahkozerffs9j8a.xn--p1ai","195.161.68.159","8342","RU"
"2020-06-02 06:58:47","http://xn--80aahkozerffs9j8a.xn--p1ai/ikzrat/00851051/NQAD_00851051_01062020.zip","offline","malware_download","Qakbot|Quakbot|zip","xn--80aahkozerffs9j8a.xn--p1ai","195.161.68.159","8342","RU"
"2020-06-02 06:58:42","http://xn--80aahkozerffs9j8a.xn--p1ai/ikzrat/7954712/NQAD_7954712_01062020.zip","offline","malware_download","Qakbot|Quakbot|zip","xn--80aahkozerffs9j8a.xn--p1ai","195.161.68.159","8342","RU"
"2020-06-02 06:43:45","http://xn--80aahkozerffs9j8a.xn--p1ai/ikzrat/95053/NQAD_95053_01062020.zip","offline","malware_download","Qakbot|Quakbot|zip","xn--80aahkozerffs9j8a.xn--p1ai","195.161.68.159","8342","RU"
"2020-06-02 06:37:47","http://xn--80aahkozerffs9j8a.xn--p1ai/ikzrat/NQAD_77498_01062020.zip","offline","malware_download","Qakbot|Quakbot|zip","xn--80aahkozerffs9j8a.xn--p1ai","195.161.68.159","8342","RU"
"2020-05-13 16:34:35","http://conference.vlgprojects.ru/fsxijcpft/5555.png","offline","malware_download"," 2020-05-13| Qbot|Qakbot|Quakbot","conference.vlgprojects.ru","91.226.30.3","8342","RU"
"2020-01-30 17:35:04","http://garantiya27.ru/setlanguage/browse/c4yemqvmi8/","offline","malware_download","doc|emotet|epoch2|heodo","garantiya27.ru","195.161.69.18","8342","RU"
"2020-01-21 20:13:05","http://mfcozmo.ru/components/closed-5wN9WI-LVeIO2A5/individual-profile/12708865038914-4Fby2qoVwK2x/","offline","malware_download","doc|emotet|epoch1|Heodo","mfcozmo.ru","81.177.135.211","8342","RU"
"2019-12-17 17:30:03","http://saunaugra.ru/wp-admin/YxKIB/","offline","malware_download","doc|emotet|epoch3|heodo","saunaugra.ru","81.177.136.113","8342","RU"
"2019-12-17 01:41:03","http://mediarama.ru/wp-content/closed-box/additional-cloud/3oi7ud-9u1w4vu12v4y1/","offline","malware_download","doc|emotet|epoch1|Heodo","mediarama.ru","217.107.219.154","8342","RU"
"2019-12-13 20:26:20","http://mediarama.ru/wp-content/7MWBTiKZs_M2XUimL_48037_NFpLd7G/interior_warehouse/08202156_FPRAXr/","offline","malware_download","doc|emotet|epoch1|Heodo","mediarama.ru","217.107.219.154","8342","RU"
"2019-12-13 18:48:04","https://turkishrivierahomes.ru/cgi-bin/Pages/5c0hkgqr-799579-2131202-cs4ufbib-uo42oc/","offline","malware_download","doc|emotet|epoch2|heodo","turkishrivierahomes.ru","91.226.30.3","8342","RU"
"2019-08-04 13:39:02","http://www.konsor.ru/keygen.exe","online","malware_download","exe","www.konsor.ru","195.161.68.199","8342","RU"
"2019-08-04 13:10:04","http://konsor.ru/keygen.exe","online","malware_download","exe","konsor.ru","195.161.68.199","8342","RU"
"2019-07-01 17:29:20","http://djal.ru/wp-admin/3","offline","malware_download","","djal.ru","217.107.219.122","8342","RU"
"2019-07-01 17:29:13","http://djal.ru/wp-admin/1","offline","malware_download","","djal.ru","217.107.219.122","8342","RU"
"2019-06-28 11:20:10","http://ovz1.j952574.pk7kn.vps.myjino.ru/client.exe","offline","malware_download","exe","ovz1.j952574.pk7kn.vps.myjino.ru","195.161.41.222","8342","RU"
"2019-06-05 08:10:34","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/YTqXEuhn?PMBK=2","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:10:22","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/ALFMxWqfaU?fPd=6","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:10:13","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/LRdUsIFA?BweG=9","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:10:09","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/nYVfFrL?vVFCn=2","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:10:09","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/wyKVIzM?FrUbh=8","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:10:09","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/zIcO?yKrPm=0","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:09:24","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/EGmnkFXfr?rnm=2","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:09:20","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/lMWs?eiRI=2","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:09:20","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/oYozDrMf?QJw=8","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:09:12","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/HwPkLt?nHm=6","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:09:12","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/VbvkSqUwCi?qBv=3","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:09:07","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/rywzMAc?VMX=9","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-06-05 08:09:07","http://www.forexpf.ru/click/?url=http://searchselfstoragequote.com/WkDqmB?ruTYM=1","offline","malware_download","#downloader|#ursnif|#vbs|geofenced|ita","www.forexpf.ru","81.177.34.158","8342","RU"
"2019-05-10 13:02:03","http://sobakaevro.ru/wp-content/paclm/lt63iey8qk72_rp5g0nmvbe-953829737136736/","offline","malware_download","doc|emotet|epoch2","sobakaevro.ru","217.107.34.198","8342","RU"
"2019-05-09 12:37:16","http://195.161.41.90/a.exe","offline","malware_download","exe","195.161.41.90","195.161.41.90","8342","RU"
"2019-05-07 10:17:23","http://salonmelisenta.ru/wp-includes/whdfc-gayscw-osxag/","offline","malware_download","Emotet|epoch2|Heodo","salonmelisenta.ru","81.177.165.139","8342","RU"
"2019-05-04 01:27:02","http://195.161.41.90/1.exe","offline","malware_download","exe|GandCrab","195.161.41.90","195.161.41.90","8342","RU"
"2019-05-04 01:19:05","http://195.161.41.90/c.exe","offline","malware_download","exe","195.161.41.90","195.161.41.90","8342","RU"
"2019-05-03 23:35:02","http://mainbild.ru/wp-content/FILE/2nm98of9ql9bow9zlvqzco2cz_hwhfhgib-992754034572995/","offline","malware_download","Emotet|Heodo","mainbild.ru","217.107.219.16","8342","RU"
"2019-05-03 19:00:23","http://195.161.41.90/3.exe","offline","malware_download","exe|GandCrab","195.161.41.90","195.161.41.90","8342","RU"
"2019-05-01 12:28:04","http://mainbild.ru/wp-content/FILE/thDLqIBRPABu/","offline","malware_download","","mainbild.ru","217.107.219.16","8342","RU"
"2019-04-12 14:47:05","http://trotuar-tver.ru/wp-admin/TWXo-QLgDi4gYPz5Wa6_DonnqCla-kt/","offline","malware_download","doc|emotet|epoch2|Heodo","trotuar-tver.ru","195.161.41.117","8342","RU"
"2019-04-12 14:38:10","http://kovkaplitka.ru/wp-content/uploads/2018/10/LnEmY-TldEd2vE6Wk7eK_hvsvMhuzO-HDx/","offline","malware_download","Emotet|Heodo","kovkaplitka.ru","195.161.41.117","8342","RU"
"2019-04-12 14:38:03","http://plitka-kovka1.ru/wp-admin/FPHy-ukqmLjH5egJi6H_XZuhCdbZ-jFQ/","offline","malware_download","doc|emotet|epoch1|Heodo","plitka-kovka1.ru","195.161.41.117","8342","RU"
"2019-04-08 14:42:06","http://gorniy.seofreelancer.ru/wp-content/r5iql-v12mp5-uxbvpaw/","offline","malware_download","doc|emotet|epoch2|Heodo","gorniy.seofreelancer.ru","217.107.219.122","8342","RU"
"2019-03-20 13:56:11","http://185.128.213.110/win.png","offline","malware_download","exe|TrickBot","185.128.213.110","185.128.213.110","8342","RU"
"2019-03-20 13:56:10","http://185.128.213.110/tin.png","offline","malware_download","exe|TrickBot","185.128.213.110","185.128.213.110","8342","RU"
"2019-03-20 13:56:09","http://185.128.213.110/sin.png","offline","malware_download","exe|TrickBot","185.128.213.110","185.128.213.110","8342","RU"
"2019-03-20 13:56:08","http://185.128.213.110/toler.png","offline","malware_download","exe|TrickBot","185.128.213.110","185.128.213.110","8342","RU"
"2019-03-20 13:56:07","http://185.128.213.110/worming.png","offline","malware_download","exe|TrickBot","185.128.213.110","185.128.213.110","8342","RU"
"2019-03-20 13:56:06","http://185.128.213.110/table.png","offline","malware_download","exe|TrickBot","185.128.213.110","185.128.213.110","8342","RU"
"2019-03-20 13:56:04","http://185.128.213.110/radiance.png","offline","malware_download","exe|TrickBot","185.128.213.110","185.128.213.110","8342","RU"
"2019-03-13 13:45:03","http://naumow.myjino.ru/db/stroi-industr.zip","offline","malware_download","js|ransomware|RUS|Troldesh|zip","naumow.myjino.ru","195.161.68.199","8342","RU"
"2019-03-13 13:44:49","http://greekrep.ru/tmp/install_574b25d89146e/html/com_contact/categories/stroi-industr.zip","offline","malware_download","js|ransomware|RUS|Troldesh|zip","greekrep.ru","81.177.6.147","8342","RU"
"2019-03-12 11:25:21","http://kriksenergo.ru/files/blogs/krik_rus/reso.zip","offline","malware_download","js|Ransomware|RUS|Troldesh|zip","kriksenergo.ru","195.161.41.160","8342","RU"
"2019-03-12 03:26:03","http://kriksenergo.ru/files/blogs/krik_rus/msg.jpg","offline","malware_download","exe|Troldesh","kriksenergo.ru","195.161.41.160","8342","RU"
"2019-03-12 01:36:14","http://naumow.myjino.ru/lang/kia.zip","offline","malware_download","js|RUS|Troldesh|zip","naumow.myjino.ru","195.161.68.199","8342","RU"
"2019-03-12 01:32:02","http://kriksenergo.ru/files/blogs/krik_rus/major.zip","offline","malware_download","js|RUS|Troldesh|zip","kriksenergo.ru","195.161.41.160","8342","RU"
"2019-03-11 14:24:03","http://naumow.myjino.ru/tmp/sessions/zakaz.zip","offline","malware_download","zip","naumow.myjino.ru","195.161.68.199","8342","RU"
"2019-03-08 18:07:23","http://pravprihod.ru/files/hwfoi-mxs2p4-samjv.view/","offline","malware_download","Emotet|Heodo","pravprihod.ru","81.177.165.50","8342","RU"
"2019-03-07 05:52:39","http://185.128.213.12/s.dat","offline","malware_download","ammyy|exe|flawedammyy|payload","185.128.213.12","185.128.213.12","8342","RU"
"2019-03-07 05:52:28","http://185.128.213.12/rol1","offline","malware_download","ammyy|exe|flawedammyy|payload","185.128.213.12","185.128.213.12","8342","RU"
"2019-03-06 18:00:08","http://pravprihod.ru/desktop_app/j4pkm-j2glz-uftbe.view/","offline","malware_download","","pravprihod.ru","81.177.165.50","8342","RU"
"2019-03-06 08:05:14","http://gid.sad136.ru/wp-includes/certificates/GKPIK.zip","offline","malware_download","js|Ransomware|RUS|Troldesh|zip","gid.sad136.ru","81.177.165.129","8342","RU"
"2019-03-06 06:28:41","http://kazancerkov.ru/wp-admin/zv2je-pv9fui-aiuqc.view/","offline","malware_download","Emotet|Heodo","kazancerkov.ru","81.177.6.125","8342","RU"
"2019-03-04 16:33:03","http://pravprihod.ru/desktop_app/l9w3-xha20-rtyrs.view/","offline","malware_download","Emotet|Heodo","pravprihod.ru","81.177.165.50","8342","RU"
"2019-03-02 11:39:16","http://81.177.23.54/putty.exe","offline","malware_download","exe|payload","81.177.23.54","81.177.23.54","8342","RU"
"2019-03-02 11:39:09","http://81.177.23.54/2.exe","offline","malware_download","exe|payload","81.177.23.54","81.177.23.54","8342","RU"
"2019-03-02 11:39:06","http://81.177.23.54/1.exe","offline","malware_download","AZORult|exe|payload","81.177.23.54","81.177.23.54","8342","RU"
"2019-03-01 06:25:06","http://81.177.23.176/radiance.png","offline","malware_download","exe|TrickBot","81.177.23.176","81.177.23.176","8342","RU"
"2019-03-01 06:25:06","http://81.177.23.176/table.png","offline","malware_download","exe|TrickBot","81.177.23.176","81.177.23.176","8342","RU"
"2019-03-01 06:25:06","http://81.177.23.176/worming.png","offline","malware_download","exe|TrickBot","81.177.23.176","81.177.23.176","8342","RU"
"2019-03-01 06:25:05","http://81.177.23.176/toler.png","offline","malware_download","exe|TrickBot","81.177.23.176","81.177.23.176","8342","RU"
"2019-03-01 06:25:05","http://81.177.23.176/win.png","offline","malware_download","exe|TrickBot","81.177.23.176","81.177.23.176","8342","RU"
"2019-03-01 06:25:04","http://81.177.23.176/tin.png","offline","malware_download","exe|TrickBot","81.177.23.176","81.177.23.176","8342","RU"
"2019-03-01 06:25:03","http://81.177.23.176/sin.png","offline","malware_download","exe|TrickBot","81.177.23.176","81.177.23.176","8342","RU"
"2019-02-27 10:27:29","http://ccs-moscow.ru/libraries/cms/captcha/pikz.zip","offline","malware_download","js|RUS|Troldesh|zip","ccs-moscow.ru","81.177.165.50","8342","RU"
"2019-02-27 10:26:19","http://elinika.ru/templates/siteground-j15-57/images/pikz.zip","offline","malware_download","js|RUS|Troldesh|zip","elinika.ru","81.177.6.147","8342","RU"
"2019-02-27 10:26:06","http://englishrep.ru/administrator/cache/pikz.zip","offline","malware_download","js|RUS|Troldesh|zip","englishrep.ru","81.177.6.147","8342","RU"
"2019-02-26 15:48:20","http://fastter.allsb.ru/xmlrpc/cache/pikz.zip","offline","malware_download","RUS|Troldesh|zipped-JS","fastter.allsb.ru","195.161.68.199","8342","RU"
"2019-02-26 15:47:13","https://www.off-road-light.ru/logs/pikz.zip","offline","malware_download","RUS|Troldesh|zipped-JS","www.off-road-light.ru","81.177.136.80","8342","RU"
"2019-02-25 17:29:20","http://pravprihod.ru/Telekom/Transaktion/02_19/","offline","malware_download","emotet|epoch1|Heodo","pravprihod.ru","81.177.165.50","8342","RU"
"2019-02-22 19:25:08","http://hillmann.ru/download/Newreceipt/hngi-DIyk_YrgP-AB/","offline","malware_download","doc|emotet|epoch1|Heodo","hillmann.ru","195.161.62.121","8342","RU"
"2019-02-20 19:24:50","http://hillmann.ru/company/online_billing/billing/open/view/ptcE7DoGkS0HzazvR/","offline","malware_download","doc|emotet|epoch1|Heodo","hillmann.ru","195.161.62.121","8342","RU"
"2019-02-20 13:59:03","http://pravprihod.ru/US_us/corporation/New_invoice/AldCH-P7_Nyq-MO/","offline","malware_download","Emotet|Heodo","pravprihod.ru","81.177.165.50","8342","RU"
"2019-02-19 14:53:28","http://site.38abc.ru/Februar2019/GUVCEOTM0045508/Rech/FORM/","offline","malware_download","doc|emotet|epoch2|Heodo","site.38abc.ru","195.161.62.167","8342","RU"
"2019-02-19 13:18:01","http://test.38abc.ru/De_de/TVHAIKM6164145/Rechnungs/DOC-Dokument/","offline","malware_download","emotet|epoch2|Heodo","test.38abc.ru","195.161.62.167","8342","RU"
"2019-02-16 03:42:19","http://xn--90aeb9ae9a.xn--p1ai/Amazon/Documents/022019/","offline","malware_download","doc|emotet|epoch1|Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-02-16 03:38:18","http://ronex90.myjino.ru/Amazon/Clients_information/2019-02/","offline","malware_download","doc|emotet|epoch1","ronex90.myjino.ru","81.177.140.54","8342","RU"
"2019-02-15 19:45:06","http://new.focus-group.spb.ru/US/document/GrTf-LPKo_RpNAup-sn1/","offline","malware_download","Emotet|Heodo","new.focus-group.spb.ru","81.177.140.54","8342","RU"
"2019-02-15 19:27:39","http://focus-group.spb.ru/Amazon/Details/022019/","offline","malware_download","doc|emotet|epoch1|Heodo","focus-group.spb.ru","81.177.140.54","8342","RU"
"2019-02-15 13:50:06","http://test.38abc.ru/En/Invoice/052494575759824/NbVv-we_izUt-B3z/","offline","malware_download","Emotet|Heodo","test.38abc.ru","195.161.62.167","8342","RU"
"2019-02-14 11:59:10","http://femconsult.ru/US/download/UYyoL-8uuE_RcrgGmUff-li/","offline","malware_download","emotet|epoch2|Heodo","femconsult.ru","195.161.62.121","8342","RU"
"2019-02-13 23:45:55","http://xn--90aeb9ae9a.xn--p1ai/xerox/NGWL-eHat_nrqqdaZ-36/","offline","malware_download","doc|emotet|epoch2|Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-02-11 23:40:11","http://femconsult.ru/En/Invoice_number/063685399/qxHOA-o2_J-e5/","offline","malware_download","Emotet|Heodo","femconsult.ru","195.161.62.121","8342","RU"
"2019-02-11 22:08:08","http://xn--90aeb9ae9a.xn--p1ai/En_us/company/86292351/tppR-Ssdb_SxULZKP-76/","offline","malware_download","Emotet|Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-02-07 17:24:46","http://femconsult.ru/BLfze_NC-zDLZhwhwf/iW/Clients_transactions/02_19/","offline","malware_download","doc|emotet|epoch1|Heodo","femconsult.ru","195.161.62.121","8342","RU"
"2019-02-07 14:11:14","http://xn----8sbb2acf4axdje.xn--p1ai/doc/Invoice/72068198849/esYl-AYv_ngPyDNdy-0k/","offline","malware_download","Emotet|Heodo","xn----8sbb2acf4axdje.xn--p1ai","81.177.135.246","8342","RU"
"2019-02-07 11:13:04","http://www.am-test.krasnorechie.info/DE_de/NGJPHWFSLJ9287497/DE/Hilfestellung/","offline","malware_download","Emotet|Heodo","www.am-test.krasnorechie.info","81.177.6.147","8342","RU"
"2019-02-06 23:52:03","http://am-test.krasnorechie.info/FeWH-lThPb_Zv-F48/","offline","malware_download","doc|emotet|epoch2|Heodo","am-test.krasnorechie.info","81.177.6.147","8342","RU"
"2019-02-06 16:13:04","http://xn--90aeb9ae9a.xn--p1ai/En_us/Copy_Invoice/5480522999/rQpZ-TTLo1_tOJhWtJ-0gO/","offline","malware_download","Emotet|Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-02-05 15:49:39","http://femconsult.ru/SMxM_MHh8Q-MJPBBWVWT/acX/Documents/2019-02/","offline","malware_download","doc|emotet|epoch1|Heodo|Nabucur","femconsult.ru","195.161.62.121","8342","RU"
"2019-02-05 00:06:37","http://am-test.krasnorechie.info/Yweu_Bv-dohxFV/Yp/Messages/022019/","offline","malware_download","doc|emotet|epoch1|Heodo","am-test.krasnorechie.info","81.177.6.147","8342","RU"
"2019-02-04 22:34:31","http://askibinyuk.myjino.ru/EN_en/xerox/XlSG-FEJ6_AUFP-Cd/","offline","malware_download","doc|emotet|epoch2|Heodo","askibinyuk.myjino.ru","217.107.219.53","8342","RU"
"2019-02-01 21:37:38","http://xn--90aeb9ae9a.xn--p1ai/gYPuB_e9W-TmH/yw/Attachments/02_19/","offline","malware_download","doc|emotet|epoch1|Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-02-01 14:23:36","http://frezerovka-laser.ru/llc/Invoice_number/bTvLU-1g_WmYKZqOhw-UgF/","offline","malware_download","doc|emotet|epoch2|Heodo","frezerovka-laser.ru","217.107.34.187","8342","RU"
"2019-01-30 14:10:03","http://xn--90aeb9ae9a.xn--p1ai/RakQb-T5CEu_PsQdDRDCa-WKx/3984552/SurveyQuestionsUS/Invoice-8217455/","offline","malware_download","doc|emotet|epoch2|Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-01-30 10:55:15","http://bag22.ru/Rechnungen/012019/","offline","malware_download","emotet|epoch1|Heodo","bag22.ru","81.177.139.151","8342","RU"
"2019-01-28 14:12:02","http://xn--90aeb9ae9a.xn--p1ai/Amazon/En/Clients_information/01_19/","offline","malware_download","doc|emotet|epoch1|Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-01-25 15:45:03","http://xn--90aeb9ae9a.xn--p1ai/PayPal/Payments_details/012019/","offline","malware_download","Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-01-23 13:05:46","http://xn--90aeb9ae9a.xn--p1ai/RDEKGMI9050734/Rechnungskorrektur/Zahlungserinnerung/","offline","malware_download","doc|emotet|epoch2|Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-01-21 13:46:11","http://xn--90aeb9ae9a.xn--p1ai/Amazon/DE/Kunden-informationen/012019/","offline","malware_download","doc|emotet|epoch1|Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-01-18 20:22:03","http://ria.krasnorechie.org/Transactions/01_19/","offline","malware_download","emotet|epoch1|Heodo","ria.krasnorechie.org","81.177.6.147","8342","RU"
"2019-01-17 10:14:06","http://xn--90aeb9ae9a.xn--p1ai/Transaktion/DEZ2018/","offline","malware_download","emotet|epoch1|Heodo","xn--90aeb9ae9a.xn--p1ai","81.177.135.211","8342","RU"
"2019-01-15 14:09:27","http://www.krysha-max.ru/Information/01_19/","offline","malware_download","emotet|epoch1","www.krysha-max.ru","195.161.41.198","8342","RU"
"2019-01-15 14:09:14","http://krysha-max.ru/Information/01_19/","offline","malware_download","emotet|epoch1|Heodo","krysha-max.ru","195.161.41.198","8342","RU"
"2019-01-14 20:39:25","http://www.niman.ru/earD-Ncxsu_AzUmQINO-nSN/ACH/PaymentAdvice/En/Past-Due-Invoices/","offline","malware_download","doc|emotet|heodo","www.niman.ru","91.226.30.3","8342","RU"
"2018-12-28 06:39:26","http://newgreek.ru/images/img.jpg","offline","malware_download","exe|shade","newgreek.ru","81.177.6.147","8342","RU"
"2018-12-18 20:41:05","http://81.177.22.90/shtamm.abc","offline","malware_download","exe","81.177.22.90","81.177.22.90","8342","RU"
"2018-12-18 20:40:32","http://81.177.22.90/log1.php","offline","malware_download","exe","81.177.22.90","81.177.22.90","8342","RU"
"2018-12-12 11:37:07","http://artscreenstudio.ru/assets/Telekom/RechnungOnline/112018/","offline","malware_download","emotet|epoch1|Heodo","artscreenstudio.ru","217.107.219.53","8342","RU"
"2018-12-11 03:27:39","http://pepperhome.ru/En_us/Payments/122018/","offline","malware_download","doc|emotet|epoch1|Heodo","pepperhome.ru","81.177.141.15","8342","RU"
"2018-12-11 02:57:25","http://www.inumo.ru/Ref/9713629122scan/EN_en/Question/","offline","malware_download","doc|emotet|epoch2|Heodo","www.inumo.ru","81.177.165.191","8342","RU"
"2018-12-10 21:14:44","http://pepperhome.ru/En_us/Payments/122018","offline","malware_download","emotet|epoch1","pepperhome.ru","81.177.141.15","8342","RU"
"2018-12-10 16:15:10","http://www.inumo.ru/Ref/9713629122scan/EN_en/Question","offline","malware_download","emotet","www.inumo.ru","81.177.165.191","8342","RU"
"2018-12-07 19:44:15","http://www.inumo.ru/US/Clients_Messages/122018","offline","malware_download","emotet|epoch1","www.inumo.ru","81.177.165.191","8342","RU"
"2018-12-07 17:04:06","http://pepperhome.ru/IRS.GOV/Internal-Revenue-Service-Online/Tax-Account-Transcript/12062018","offline","malware_download","doc","pepperhome.ru","81.177.141.15","8342","RU"
"2018-12-07 16:02:06","http://artscreenstudio.ru/IRS.GOV/Internal-Revenue-Service/Tax-Account-Transcript/12062018/","offline","malware_download","doc|emotet|Heodo","artscreenstudio.ru","217.107.219.53","8342","RU"
"2018-12-07 13:10:04","http://artscreenstudio.ru/IRS.GOV/Internal-Revenue-Service/Tax-Account-Transcript/12062018","offline","malware_download","emotet|epoch2|Heodo","artscreenstudio.ru","217.107.219.53","8342","RU"
"2018-12-02 16:57:03","http://777ton.ru/574570BVEFR/PAYMENT/Business","offline","malware_download","doc|Heodo","777ton.ru","195.161.41.160","8342","RU"
"2018-12-02 16:38:02","http://777ton.ru/l9vollhec4/cat/Buchungsnummer.20-6466818235-42693204044.zip","offline","malware_download","zip","777ton.ru","195.161.41.160","8342","RU"
"2018-11-28 04:09:18","http://arsenal-rk.ru/846FNDC/PAY/US/","offline","malware_download","doc|emotet|epoch2|Heodo","arsenal-rk.ru","81.177.139.247","8342","RU"
"2018-11-27 09:49:37","http://arsenal-rk.ru/846FNDC/PAY/US","offline","malware_download","doc|emotet|Gozi|heodo","arsenal-rk.ru","81.177.139.247","8342","RU"
"2018-11-23 14:52:03","http://franchise-city.ru/En_us/Coupons","offline","malware_download","doc|emotet|Heodo","franchise-city.ru","195.161.69.18","8342","RU"
"2018-11-21 20:42:11","http://htmedia.myjino.ru/En_us/Information/11_18","offline","malware_download","","htmedia.myjino.ru","195.161.62.167","8342","RU"
"2018-11-21 19:20:53","http://www.kudteplo.ru/r1/xls/2014/WARM.TOPL.Q1.2014.xls","offline","malware_download","","www.kudteplo.ru","81.177.33.8","8342","RU"
"2018-11-19 19:59:47","http://test.vic-pro.com/INFO/US_us/Service-Invoice/","offline","malware_download","emotet|heodo","test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-15 18:28:06","http://185.66.15.53/Sheel_Mailers.exe","offline","malware_download","exe","185.66.15.53","185.66.15.53","8342","RU"
"2018-11-15 00:02:33","http://mickpomortsev.ru/En_us/Information/112018/","offline","malware_download","doc|emotet|epoch1|Heodo","mickpomortsev.ru","81.177.141.15","8342","RU"
"2018-11-14 22:38:31","http://mickpomortsev.ru/En_us/Information/112018","offline","malware_download","emotet|Heodo","mickpomortsev.ru","81.177.141.15","8342","RU"
"2018-11-09 01:48:02","http://www.test.vic-pro.com/xerox/US_us/Sales-Invoice/","offline","malware_download","doc|emotet|epoch2|Heodo","www.test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-08 21:45:03","http://test.vic-pro.com/xerox/US_us/Sales-Invoice/","offline","malware_download","doc|Heodo","test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-08 20:17:07","http://test.vic-pro.com/xerox/US_us/Sales-Invoice","offline","malware_download","Heodo","test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-08 15:46:59","http://www.test.vic-pro.com/xerox/US_us/Sales-Invoice","offline","malware_download","doc|emotet|Heodo","www.test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-08 00:53:07","http://bona-loba.ru/200U/com/Personal/","offline","malware_download","doc|emotet|epoch2|Heodo","bona-loba.ru","81.177.140.28","8342","RU"
"2018-11-07 23:57:06","http://777ton.ru/US/Clients_information/112018/","offline","malware_download","doc|emotet|epoch1|Heodo","777ton.ru","195.161.41.160","8342","RU"
"2018-11-07 23:57:05","http://777ton.ru/US/Clients_information/112018","offline","malware_download","doc|emotet|epoch1|Heodo","777ton.ru","195.161.41.160","8342","RU"
"2018-11-07 07:51:37","http://bona-loba.ru/200U/com/Personal","offline","malware_download","doc|emotet|heodo","bona-loba.ru","81.177.140.28","8342","RU"
"2018-11-07 07:27:02","http://test.vic-pro.com/INFO/US_us/Service-Invoice","offline","malware_download","doc|Emotet|Heodo","test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-06 12:05:03","http://test.vic-pro.com/newsletter/EN_en/Outstanding-Invoices/","offline","malware_download","doc|Heodo","test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-06 07:36:48","http://test.vic-pro.com/newsletter/EN_en/Outstanding-Invoices","offline","malware_download","doc|emotet|Heodo","test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-06 06:31:02","http://www.test.vic-pro.com/newsletter/EN_en/Outstanding-Invoices/","offline","malware_download","doc|Heodo","www.test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-06 02:52:04","http://www.test.vic-pro.com/INFO/US_us/Service-Invoice/","offline","malware_download","doc|Emotet|Heodo","www.test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-05 19:37:40","http://www.test.vic-pro.com/newsletter/EN_en/Outstanding-Invoices","offline","malware_download","doc|emotet|heodo","www.test.vic-pro.com","217.107.219.53","8342","RU"
"2018-11-05 19:09:02","http://777ton.ru/DOC/US_us/Scan/","offline","malware_download","Heodo","777ton.ru","195.161.41.160","8342","RU"
"2018-11-05 16:37:19","http://777ton.ru/DOC/US_us/Scan","offline","malware_download","doc|emotet|heodo","777ton.ru","195.161.41.160","8342","RU"
"2018-10-05 17:43:40","http://underluckystar.ru/num9_setup.exe","offline","malware_download","exe","underluckystar.ru","81.177.33.248","8342","RU"
"2018-10-05 12:12:14","http://underluckystar.ru/addnum.exe","offline","malware_download","exe","underluckystar.ru","81.177.33.248","8342","RU"
"2018-10-05 12:12:08","http://underluckystar.ru/arcanum3_update.exe","offline","malware_download","exe","underluckystar.ru","81.177.33.248","8342","RU"
"2018-10-05 12:04:39","http://underluckystar.ru/num8_setup.exe","offline","malware_download","exe","underluckystar.ru","81.177.33.248","8342","RU"
"2018-10-05 12:04:03","http://underluckystar.ru/pluton6_update.exe","offline","malware_download","exe","underluckystar.ru","81.177.33.248","8342","RU"
"2018-10-05 09:18:04","http://underluckystar.ru/arcanum_update.exe","offline","malware_download","exe","underluckystar.ru","81.177.33.248","8342","RU"
"2018-10-03 19:14:18","http://03vologda.ru/EN_US/Transaction_details/102018","offline","malware_download","doc|emotet|Heodo","03vologda.ru","217.107.34.191","8342","RU"
"2018-10-03 04:46:22","http://81.177.139.249/gonieeciw/01872727459297-9000207452917684175.php","offline","malware_download","DEU|exe|Nymaim","81.177.139.249","81.177.139.249","8342","RU"
"2018-09-26 22:55:19","http://www.gorcomrep.ru/RhmJkk3IuM","offline","malware_download","emotet|exe|Heodo","www.gorcomrep.ru","81.177.6.164","8342","RU"
"2018-09-24 11:55:05","http://777ton.ru/urldefense_proofpoint/billpay_bankofamerica_com/PaymentCenter_Index/092018/","offline","malware_download","doc|Heodo","777ton.ru","195.161.41.160","8342","RU"
"2018-09-14 06:23:25","http://777ton.ru/1114479UQQRR/PAYMENT/US","offline","malware_download","doc|emotet|heodo","777ton.ru","195.161.41.160","8342","RU"
"2018-09-13 05:34:57","http://binar48.ru/1314ZVRVCBWY/BIZ/Smallbusiness/","offline","malware_download","doc|emotet|epoch2|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-09-12 08:36:43","http://binar48.ru/1314ZVRVCBWY/BIZ/Smallbusiness","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-09-11 22:59:46","http://777ton.ru/LLC/US/Past-Due-Invoices/","offline","malware_download","doc|emotet|epoch2|Heodo","777ton.ru","195.161.41.160","8342","RU"
"2018-09-10 07:55:16","http://www.xn--80abghrgkskqdlmb.xn--p1ai/5637741.zip","offline","malware_download","zip","www.xn--80abghrgkskqdlmb.xn--p1ai","195.161.69.18","8342","RU"
"2018-09-10 07:53:57","http://rostokino.myjino.ru/0277150DRV/com/Business","offline","malware_download","doc|emotet","rostokino.myjino.ru","195.161.62.121","8342","RU"
"2018-09-07 03:56:37","http://binar48.ru/Payments-09-2018/","offline","malware_download","doc|emotet|epoch1|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-09-06 16:13:34","http://binar48.ru/Payments-09-2018","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-09-05 04:56:38","http://binar48.ru/w58jiu4o/SEP/PrivateBanking/","offline","malware_download","doc|emotet|epoch2|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-09-04 13:53:18","http://binar48.ru/w58jiu4o/SEP/PrivateBanking","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-09-01 17:04:31","http://binar48.ru/doc/EN_en/Summit-Companies-Invoice-14907922","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-09-01 12:08:15","http://www.xn--80agoglhhailua.xn--p1ai/7s2njcn/7289921-96381165-BILL.zip","offline","malware_download","DEU|Nymaim","www.xn--80agoglhhailua.xn--p1ai","81.177.135.246","8342","RU"
"2018-09-01 12:06:07","http://81.177.139.46/ytpovuie/wtuds/temp_fc863e75818deb61fbdcd36dcd3d1bee/3968902-345316906-ID.zip","offline","malware_download","DEU|Nymaim","81.177.139.46","81.177.139.46","8342","RU"
"2018-09-01 05:36:29","http://binar48.ru/doc/EN_en/Summit-Companies-Invoice-14907922/","offline","malware_download","doc|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-08-28 17:54:37","http://binar48.ru/OtTlVIU5/","offline","malware_download","exe|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-08-28 08:32:00","http://81.177.141.59/302212527.zip","offline","malware_download","DEU|Nymaim","81.177.141.59","81.177.141.59","8342","RU"
"2018-08-27 18:33:13","http://binar48.ru/OtTlVIU5","offline","malware_download","emotet|exe|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-08-23 10:11:13","http://binar48.ru/0DPS/oamo/US/","offline","malware_download","doc|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-08-22 08:49:20","http://binar48.ru/0DPS/oamo/US","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-08-21 14:41:24","http://rostokino.myjino.ru/beizPDcSWgxJ","offline","malware_download","doc|emotet","rostokino.myjino.ru","195.161.62.121","8342","RU"
"2018-08-16 12:31:35","http://ip01reg.myjino.ru/328318FQA/PAY/Smallbusiness","offline","malware_download","doc|emotet","ip01reg.myjino.ru","217.107.34.191","8342","RU"
"2018-08-14 14:48:38","http://ip01reg.myjino.ru/newsletter/En_us/STATUS/Invoice-08-14-18","offline","malware_download","doc|emotet","ip01reg.myjino.ru","217.107.34.191","8342","RU"
"2018-08-14 04:19:51","http://binar48.ru/doc/En_us/Past-Due-Invoices/New-Invoice-XP64465-TJ-06813/","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-08-10 04:15:40","http://binar48.ru/doc/En_us/Past-Due-Invoices/New-Invoice-XP64465-TJ-06813","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-08-08 05:47:28","http://binar48.ru/ACH/DOU8431793548MAXR/1832307500/DGJ-FWQDV-Aug-07-2018/","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-08-07 00:57:10","http://binar48.ru/ACH/DOU8431793548MAXR/1832307500/DGJ-FWQDV-Aug-07-2018","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-08-03 08:00:20","http://binar48.ru/default/US_us/Receipt-attached","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-08-03 04:24:01","http://binar48.ru/default/US_us/Receipt-attached/","offline","malware_download","doc|emotet|Heodo","binar48.ru","195.161.69.18","8342","RU"
"2018-07-16 16:50:17","http://www.j-skill.ru/Rechnungskorrektur/","offline","malware_download","doc|emotet|epoch1|Heodo","www.j-skill.ru","81.177.139.64","8342","RU"
"2018-07-15 03:47:16","http://j-skill.ru/kLp8gFsh/","offline","malware_download","Heodo","j-skill.ru","81.177.139.64","8342","RU"
"2018-07-14 03:00:41","http://www.autodevices.topterra.ru/newsletter/En_us/STATUS/Invoice-3932852/","offline","malware_download","doc|emotet|epoch2","www.autodevices.topterra.ru","81.177.6.164","8342","RU"
"2018-07-13 13:30:07","http://www.j-skill.ru/kLp8gFsh/","offline","malware_download","emotet|exe|heodo","www.j-skill.ru","81.177.139.64","8342","RU"
"2018-07-13 10:21:14","http://radary.topterra.ru/files/En_us/Statement/Services-07-13-18-New-Customer-NH/","offline","malware_download","Heodo","radary.topterra.ru","81.177.6.164","8342","RU"
"2018-07-13 10:02:23","http://www.radary.topterra.ru/files/En_us/Statement/Services-07-13-18-New-Customer-NH/","offline","malware_download","doc|emotet|Heodo","www.radary.topterra.ru","81.177.6.164","8342","RU"
"2018-07-12 20:50:10","http://www.anzebra.ru/DOQjpU/","offline","malware_download","emotet|epoch2|Heodo|payload","www.anzebra.ru","195.161.68.255","8342","RU"
"2018-07-12 13:10:50","http://www.autodevices.topterra.ru/doc/En_us/INVOICE-STATUS/Order-5326535595/","offline","malware_download","doc|emotet|heodo","www.autodevices.topterra.ru","81.177.6.164","8342","RU"
"2018-07-12 05:50:51","http://www.anzebra.ru/Fyv7/","offline","malware_download","emotet|heodo|payload","www.anzebra.ru","195.161.68.255","8342","RU"
"2018-07-11 15:37:30","http://profhockey.ru/pdf/En_us/ACCOUNT/Account-07797/","offline","malware_download","doc|emotet|heodo","profhockey.ru","195.161.68.151","8342","RU"
"2018-07-11 04:11:55","http://www.autodevices.topterra.ru/pdf/US_us/Purchase/HRI-Monthly-Invoice/","offline","malware_download","doc|emotet|epoch2|Heodo","www.autodevices.topterra.ru","81.177.6.164","8342","RU"
"2018-07-11 04:09:01","http://radary.topterra.ru/newsletter/En_us/Statement/Invoices/","offline","malware_download","doc|emotet|epoch2|Heodo","radary.topterra.ru","81.177.6.164","8342","RU"
"2018-07-11 04:05:20","http://autodevices.topterra.ru/pdf/US_us/Purchase/HRI-Monthly-Invoice/","offline","malware_download","doc|emotet|epoch2|Heodo","autodevices.topterra.ru","81.177.6.164","8342","RU"
"2018-07-10 08:07:03","http://www.anzebra.ru/For-Check-July/","offline","malware_download","doc|Emotet|Heodo","www.anzebra.ru","195.161.68.255","8342","RU"
"2018-07-06 05:16:19","http://www.anzebra.ru/En_us/Statement/82402/","offline","malware_download","doc|emotet|heodo","www.anzebra.ru","195.161.68.255","8342","RU"
"2018-07-06 01:07:08","http://www.mediatrainer.ru/pdf/EN_en/STATUS/Invoices/","offline","malware_download","doc|emotet|epoch2|Heodo","www.mediatrainer.ru","91.226.30.3","8342","RU"
"2018-07-02 16:27:28","http://www.anzebra.ru/Independence-Day-Greetings/","offline","malware_download","doc|emotet|heodo","www.anzebra.ru","195.161.68.255","8342","RU"
"2018-06-30 06:17:03","http://www.bathoff.ru/ACCOUNT/Invoice-085148","offline","malware_download","emotet|heodo","www.bathoff.ru","217.107.34.187","8342","RU"
"2018-06-30 06:16:28","http://www.anzebra.ru/STATUS/Customer-Invoice-KF-5013157","offline","malware_download","emotet|heodo","www.anzebra.ru","195.161.68.255","8342","RU"
"2018-06-30 06:01:55","http://bathoff.ru/ACCOUNT/Invoice-085148","offline","malware_download","emotet|heodo","bathoff.ru","217.107.34.187","8342","RU"
"2018-06-30 06:00:55","http://anzebra.ru/STATUS/Customer-Invoice-KF-5013157","offline","malware_download","emotet|heodo","anzebra.ru","195.161.68.255","8342","RU"
"2018-06-28 23:05:12","http://www.bathoff.ru/ACCOUNT/Invoice-085148/","offline","malware_download","doc|emotet|heodo","www.bathoff.ru","217.107.34.187","8342","RU"
"2018-06-28 21:01:02","http://www.anzebra.ru/STATUS/Customer-Invoice-KF-5013157/","offline","malware_download","doc|emotet|epoch2|Heodo","www.anzebra.ru","195.161.68.255","8342","RU"
"2018-06-28 20:54:03","http://anzebra.ru/STATUS/Customer-Invoice-KF-5013157/","offline","malware_download","Heodo","anzebra.ru","195.161.68.255","8342","RU"
"2018-06-28 14:10:08","http://bathoff.ru/Xfj9H/","offline","malware_download","Emotet|Heodo","bathoff.ru","217.107.34.187","8342","RU"
"2018-06-28 07:14:02","http://www.bathoff.ru/Xfj9H/","offline","malware_download","emotet|exe|heodo","www.bathoff.ru","217.107.34.187","8342","RU"
"2018-06-26 04:47:38","http://j-skill.ru/Fakturierung/Bezahlen-Sie-die-Rechnung-Nr06377/","offline","malware_download","emotet|heodo","j-skill.ru","81.177.139.64","8342","RU"
"2018-06-25 16:11:31","http://www.j-skill.ru/Fakturierung/Bezahlen-Sie-die-Rechnung-Nr06377/","offline","malware_download","doc|emotet|heodo","www.j-skill.ru","81.177.139.64","8342","RU"
"2018-06-25 07:02:12","http://www.bathoff.ru/OPnArr/","offline","malware_download","emotet|exe|heodo|Loki","www.bathoff.ru","217.107.34.187","8342","RU"
"2018-06-22 21:34:01","http://www.j-skill.ru/recordatorio/","offline","malware_download","doc|emotet|epoch2|Heodo","www.j-skill.ru","81.177.139.64","8342","RU"
"2018-06-22 07:27:34","http://yk-centr.ru/Rechnungszahlung/Rechnungsanschrift-korrigiert-087252/","offline","malware_download","","yk-centr.ru","81.177.49.5","8342","RU"
"2018-06-20 18:35:27","http://www.j-skill.ru/Rechnung/","offline","malware_download","emotet|Heodo","www.j-skill.ru","81.177.139.64","8342","RU"
"2018-06-20 14:26:14","http://j-skill.ru/Rechnung/","offline","malware_download","Heodo","j-skill.ru","81.177.139.64","8342","RU"
"2018-06-20 05:44:02","http://bathoff.ru/Rechnungsanschrift/Rechnung-0952-158","offline","malware_download","doc|emotet|Heodo","bathoff.ru","217.107.34.187","8342","RU"
"2018-06-18 13:59:26","http://www.bathoff.ru/Rechnungsanschrift/Rechnung-0952-158/","offline","malware_download","doc|emotet|heodo","www.bathoff.ru","217.107.34.187","8342","RU"
"2018-06-15 00:12:57","http://miranom.ru/UPS-Ship-Notification/Mar-05-18-05-36-13/","offline","malware_download","Heodo","miranom.ru","217.107.34.198","8342","RU"
"2018-06-13 14:49:08","http://gudovich.ru/Client/Payment/","offline","malware_download","doc|emotet|epoch1|Heodo","gudovich.ru","195.161.114.206","8342","RU"
"2018-06-13 14:41:11","http://www.gudovich.ru/Client/Payment/","offline","malware_download","doc|emotet|epoch1|Heodo","www.gudovich.ru","195.161.114.206","8342","RU"
"2018-06-13 13:51:14","http://www.asia-siam.ru/Invoices_US-039/5/","offline","malware_download","doc|emotet|epoch2","www.asia-siam.ru","91.226.30.3","8342","RU"
"2018-06-13 10:54:07","http://www.j-skill.ru/IRS-TRANSCRIPTS-202/","offline","malware_download","doc|emotet|epoch1|Heodo","www.j-skill.ru","81.177.139.64","8342","RU"
"2018-06-12 17:11:10","http://www.anapa-novosel.ru/IRS-TRANSCRIPTS-062018-052M/50/","offline","malware_download","doc|emotet|epoch1|Heodo","www.anapa-novosel.ru","81.177.135.51","8342","RU"
"2018-06-11 15:33:11","http://topterra.ru/JLskQ9/","offline","malware_download","emotet|epoch1|Heodo|payload","topterra.ru","81.177.6.164","8342","RU"
"2018-06-06 12:33:09","http://arned.ru/nJtwP0/","offline","malware_download","emotet|exe|Heodo","arned.ru","91.226.30.3","8342","RU"
"2018-05-24 13:53:55","https://max.bazovskiy.ru/misc/ui/images/Facturas052018.zip","offline","malware_download","","max.bazovskiy.ru","81.177.174.185","8342","RU"
"2018-04-06 05:50:45","http://record-studio.ru/Download/Invoice/","offline","malware_download","doc|emotet|heodo","record-studio.ru","81.177.6.164","8342","RU"
# of entries: 294