URLhaus Database

You are currently viewing the URLhaus database entry for http://archives-program.com/lbx2/VMYQY_3/?i=1 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1976048
URL: http://archives-program.com/lbx2/VMYQY_3/?i=1
URL Status:Offline
Host: archives-program.com
Date added:2022-01-14 07:43:04 UTC
Last online:2023-06-19 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-01-14 07:44:06 UTC to abuse{at}contabo[dot]de)
Takedown time:1 year, 5 month, 11 days, 2 hours, 31 minutes Bad (down since 2023-06-19 10:15:38 UTC)
Tags:doc emotet link epoch5 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-13n/aunknown e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855Virustotal results 0.00% 
2022-01-30n/aunknown 121787592ff5adcbf208f1b21c9fce6382a5e036fa9a8c3ae91348100acc5685Virustotal results 0.00% 
2022-01-14G1527359.xlsmxlsm b0a265b0d24252c4692de5729a76f1258a03a12694e20a49e306a0f83709270an/a Heodo
2022-01-146063_398.xlsmxlsm c51b53b80e46faa2609fc03aa38720a82a939a25e4999abdd30b94a915ddc24cn/a Heodo
2022-01-14w-993068.xlsmxlsm 6cff3d5e3c5707635db1923840914536dc835efa272d105bf3e5011fbdde5e8en/a Heodo
2022-01-14590685BBPB_060105.xlsmxlsm 1d5a664f5ee71027f50ea0456755bd1285f2d04b4bbfbdb59389b49e9aa3f06dn/a 
2022-01-14EBLD_51466923.xlsmxlsm 60373a2b7942416a3047d1724d055f1383105920170390683cf2e74aea7d632dVirustotal results 31.75% 
2022-01-14QMUI-266079.xlsmxlsm 1e42138c4309e5be0268be8f2e1b3a5831f56b26749146dbfa02a7ccf863b3fcn/a Heodo
2022-01-14KKG-82.xlsmxlsm d5410b70cb30784d5cb00821826ddbbcb7aebec8f3cef9658c6dca679e86aff0n/a 
2022-01-14744014480652149.xlsmxlsm ca10d23a4990ebac124b1dda44768d00c6592d955ed3ed5814954a99c9f8f5d8n/a Heodo
2022-01-14JWMHF_980582.xlsmxlsm ffac8ef5da7f040ec7af96609d62c0596273659b04794ddca91ab138992d0620n/a 
2022-01-14mkwq9758654.xlsmxlsm 91d755374725859f64dc3160258cc1f6a2f04cb768b0da56e86e04511d57aca7n/a Heodo
2022-01-14KCK-99.xlsmxlsm dd6f67bc6417791f565e1ddd1c550b3888a6673f3bc8d689ba259d955f373430n/a 
2022-01-14SZ_34.xlsmxlsm 684179a59ccb9a4240a2cb91d8dcc96b15c6aa79eb8a928080a253684d3c2b2cn/a Heodo
2022-01-14042-84587.xlsmxlsm f36635fc524dee008c90bd6556c998119d281be4995e4a5fd140a69fbbfea36dn/aHeodo
2022-01-1418967503_77961.xlsmxlsm 1c297a6ab065acb1152f13e630509d68b98eedaca18dd4ab43062f8f95ea9a16n/a Heodo
2022-01-14PAVI267.xlsmxlsm 240d9c912338f39fde436264a56a9b48ded82608f23ae5f4a8f732110c2b30a2Virustotal results 33.87% Heodo
2022-01-144271678922084.xlsmxlsm ccaa6507919076a28b38c5b5e30d2091705e482d54aedc76bec5163d31e21fe1Virustotal results 33.33% Heodo
2022-01-1406346635.xlsmxlsm c10d40fd29ee12ca187becbe26e5d7f132695ffca909bf6013247c9146b71b81Virustotal results 31.75% 
2022-01-14o_48960.xlsmxlsm 4ff2f64198d5fd1797397a1ecba30671d30b6f434b435d292a5814e780bb0ab6Virustotal results 28.57% Heodo
2022-01-149192834755109868.xlsmxlsm 558a12c36fe643eed7b84461909486d24aadb653c730a99fa333aee3d4c6caedn/a Heodo
2022-01-14593911842222.xlsmxlsm c6d25e85c9b94f389f35a0dcf68e58dd96c1b1dd4269ef4b5b8aac454b2efcban/a 
2022-01-1475155194EJKCMG-542.xlsmxlsm 3ed54e7edbfda5e8c76a389606e9626d5cdab72b4ed9b940465970e322d47ebcn/a Heodo
2022-01-14417023_7.xlsmxlsm c61a845dce588b9b0389e0e28bbac0fe5354aa18b59e4da83a08bc658c805ed2n/a