URLhaus Database

You are currently viewing the URLhaus database entry for http://armangroup.co.mz/cgi-bin/qwg1pzboo_82qzv-2025021034/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:200244
URL: http://armangroup.co.mz/cgi-bin/qwg1pzboo_82qzv-2025021034/
URL Status:Offline
Host: armangroup.co.mz
Date added:2019-05-22 21:18:03 UTC
Last online:2019-05-23 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2019-05-22 21:20:03 UTC to abuse{at}pt[dot]clara[dot]net)
Takedown time:19 hours, 4 minutes Good (down since 2019-05-23 16:24:21 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-05-23INC_4592521634US_May_23_2019.docdoc e465c5535172a17096f07f50224ff31fef434f38773aff65249044c4b4601d5aVirustotal results 19.30% Heodo
2019-05-23LLC_2934797470US_May_23_2019.docdoc 969d9d99703b0eb8347dd3e6b85f55f1d8f6be79f7f42064f5904ad1bd2301dbVirustotal results 15.52% 
2019-05-23Document_390885224392US_May_23_2019.docdoc 720d9323f66abad23ddc1a0274f13ada330575fa1566fc87c81faad0983b2a72Virustotal results 16.67% 
2019-05-23Document_3023797273US_May_23_2019.docdoc 9ae9c7d767e36c5317a7a5e1e4d0869756230292955b39491e0071b0d9f679adn/a Heodo
2019-05-23INC_9599360630US_May_23_2019.docdoc 86a50c8e8f5d300f3731ebdce8b98be02696e2ff1d7e979abd873354bfd87006Virustotal results 16.67% 
2019-05-23SCAN_593158664014US_May_23_2019.docdoc edf50e7ab18431bb724fdfefa4695406b6a63fc008b6421a9906d2de3d1a4897n/a Heodo
2019-05-23DOC_997479516028US_May_23_2019.docdoc fb293ec8ed25d255bc74389d655cce1ac0b34cedeeda6b9f75c0a8ddff81a78dVirustotal results 13.56% Heodo
2019-05-23INC_577586547143US_May_23_2019.docdoc b125f728606a734549dfc8145d64725109c9376445845c6ceb5cf2c5d65e77afVirustotal results 13.79% Heodo
2019-05-23Document_828667575095US_May_23_2019.docdoc 5a217e950f27df7da794e729b22980c2aa1417696ffa1ee861ce9e657fd35bbbn/a Heodo
2019-05-23INC_8180773840US_May_23_2019.docdoc e2b58ccf96b976a0f2c1a1ada363532626ce4f15670b7d091c59c90267718624Virustotal results 14.81% 
2019-05-23LLC_870128850680US_May_23_2019.docdoc e3b73fc71fce5c6eb0769674687f1fc666118b06404f2f9578a2818e0cfa38e2Virustotal results 13.56%Heodo
2019-05-23FILE_50302120003US_May_23_2019.docdoc 28398ed10fb49cc49f2cf4559ccbd2b5ce7213c0d62694dd637a5ec8d304352bVirustotal results 16.95% Heodo
2019-05-23Document_64865233319US_May_23_2019.docdoc 86a95894b9f4bb96a1a7c256bc95a3742349d41377b18759cb25293d6d22ce7en/a Heodo
2019-05-23LLC_37901405439US_May_23_2019.docdoc ca1a8569a1532152068e32e0852b97e573e075c2fd8bcc34fb9fa884d67734d0n/a Heodo
2019-05-23DOC_17405571324US_May_23_2019.docdoc e3bc63109b54ad59d61c2456ffdd5c0779b7eb114b4a5f94011657d7de51557cVirustotal results 36.67% Heodo
2019-05-23FILE_279319704797US_May_23_2019.docdoc a4961c971e9b1e255f1a12cf6a635dbb0b4f042a0783cca374f38073b52abaabn/a Heodo
2019-05-23LLC_1841910975US_May_23_2019.docdoc 1dbd7a3e1760453301a48e728acd4d235d74af47640920b0b046de689c66824dVirustotal results 29.51% Heodo
2019-05-23DOC_79189494656US_May_23_2019.docdoc b3de11f2d9a35f0ab55f86928036e4da3c3112e05a0bb7c42e03ad1a670a83cfVirustotal results 27.87% 
2019-05-23DOC_342807076722US_May_23_2019.docdoc 84acef047e3ed4c2e6301ea0a23633c98431262c0d2cc8969c4a9e31ad8c746cVirustotal results 30.00% Heodo
2019-05-23Document_46533243510US_May_23_2019.docdoc dd54251fb8f9186afdc65473e70d39f42bb36aa2f3eb9d1ac74c35f7cd895d78Virustotal results 30.00% Heodo
2019-05-23DOC_468911827421US_May_23_2019.docdoc f1f5d0478731474c23d6a4471484b540243fa3bede2c3f843396844d3061fa3eVirustotal results 30.00% Heodo
2019-05-23FILE_052105817531US_May_23_2019.docdoc 9569dd8beeaa524e03b21f388397fac210001f7ad4723307700f37c2bce6c2d8n/a Heodo
2019-05-22INC_80590329457US_May_23_2019.docdoc 2d14bd85c6fd1feea0d4a0e311a7324a8bf56982e634a308503a2097e0c06c94Virustotal results 25.86% Heodo
2019-05-22FILE_8897132487US_May_23_2019.docdoc 07361938b338966720b62ffd3b02e5a956e6366404284322e59ef2d2bdd5f8a6Virustotal results 20.69% 
2019-05-22FILE_7278385493US_May_23_2019.docdoc 2b5c4129990f703fbf68a173b09445b66ea27ce7fec7cb2e80fb40d0390404aeVirustotal results 25.00% Heodo
2019-05-22FILE_063280483452US_May_23_2019.docdoc 8abe2662dd5b129ea1422b30d1e5f07b656201754d24376af623ac7e72e113e8Virustotal results 25.42% Heodo
2019-05-22INC_96687532618US_May_23_2019.docdoc 9224f643b9c06ebfe97f10297a35066569748217b3ecb131cbdca9e5224857f1Virustotal results 22.03% Heodo
2019-05-22DOC_402599352704US_May_23_2019.docdoc 5d7bd5ab1f0ef9fe49f97b49fc955f64a9878fc341650143d572b24126f1284bVirustotal results 21.43%Heodo