URLhaus Database

You are currently viewing the URLhaus database entry for http://armgroup101.com/Old1/cpfa/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	267756
URL:	http://armgroup101.com/Old1/cpfa/
URL Status:	Offline
Host:	armgroup101.com
Date added:	2019-12-12 17:42:13 UTC
Last online:	2019-12-14 11:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Not blocked
dns0.eu :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Blocked
DNS4EU :	Blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-12-12 17:44:08 UTC to abuse{at}serverpars[dot]com)
Takedown time:	1 day, 17 hours, 57 minutes (down since 2019-12-14 11:41:42 UTC)
Tags:	emotet epoch2 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-12-14	AWRqvVvJOpVYn.exe	exe	181a79a35af190ce05e5bac09e23d8670c247db0b55f465ff2af8c834e984ed6	19.44%	Heodo
2019-12-14	4IdnaPUjNKa.exe	exe	6cf54601213e918f6f70d5d1a394932ba42bf99415392125f57453f38725d1d4	19.44%	Heodo
2019-12-13	4ju3MDfNXCraZ.exe	exe	2f623751af7cd78659100a3ab30edadd4e3c26039f076e8bba220137f3c0d4c9	18.06%	Heodo
2019-12-13	QiuUV.exe	exe	21556b2d910de92eee35636dd5e5b04935525ddbc544f2f632ac3b1d5acbeeb6	16.67%	Heodo
2019-12-13	v1Np.exe	exe	218a87ca8c818acf90e3e7ee180a7d064d55c10f6c2f172ddaa9941f8c1c9531	9.72%	Heodo
2019-12-13	4gSlln6hVq.exe	exe	a993cb9fa4c615bb7656a88f48e3aabbbab3dc2d851ddccb1b80e987a6e3cfc4	11.11%	Heodo
2019-12-13	lQMkoXXy2gJvCmGFHW.exe	exe	ee27ce622d86fc20b1805c2ad66dd90bd7c235083e17217d38ee292488cb19c5	8.57%	Heodo
2019-12-13	kvvll6vMABUr.exe	exe	6f65c3773b031f0aa512fa527da8e004a3c9694ae5ad3890ca0c6c791b6a61a9	8.45%	Heodo
2019-12-13	z.exe	exe	21d345281902ff2e2f2dd1d335c9f0ce983f0edd7fa6eb03fb5713f736d431a6	12.50%	Heodo
2019-12-13	F6hTyHCNYc8.exe	exe	11c68ed562aae39ce2caa8c3520826595e24c978f4f01ecd25ba2825db21ab66	11.11%
2019-12-13	BZzEMK1YXAHmrbfY4T.exe	exe	14a9a9bfdd17a5e1a7d4ae6564fe8f113d31c020c6590f438e9783826630ca11	9.86%	Heodo
2019-12-13	neGYI.exe	exe	d9a7f0ef3140c6ad0759c1fa89c6b387b482945c4b48341070ff3661fea36d07	23.94%	Heodo
2019-12-13	yODLQX.exe	exe	0be549352e264c4aebca790a05294684f11ba46b3260cb20b67cfae925634b4a	n/a	Heodo
2019-12-13	4GPjY9zaEY0UUX.exe	exe	e01309bf35de5bb3d967004bb003a5a523d97020234abb34eac14878efa0d68c	18.06%	Heodo
2019-12-13	8yoim8CvnXKNNO.exe	exe	38f321e1d7367a1002f53d162279135440272af848efe75a6aab71f299599eb2	11.11%	Heodo
2019-12-13	Rx4UWww0GJ8iw9e.exe	exe	a1fc8e140dfd5d46b9bdf53cb516cb2aa2ec84bdb29290b5cfea4bbccadd6326	9.72%	Heodo
2019-12-13	XlhMKgAACQLplN3cjtW.exe	exe	022c139f821927a8f9180689ce0a0ad1a38763cdf20254eb56b41db0c8bc5b8a	n/a	Heodo
2019-12-13	InHIVFq.exe	exe	e19158e6d8c78cd831df154b5fb36a779a033925be47374d16f59011617aad64	9.86%	Heodo
2019-12-12	lwSna4Um5z8nTG.exe	exe	e4fdad187551a7c662fb384bb6b1688229602f4bfd28f49f5b077261ff45f2f2	n/a
2019-12-12	Z6uRAJ9yX.exe	exe	cbead8b96feb4f51c39055b2857bc3d57055bcc12d75573dd0c7dc1dca1bd204	n/a
2019-12-12	1SzJhuE3M17mBhjjR1l.exe	exe	d84723b06c9490b9bc0281958d5b80fcad7b3e5158d8782a015cdd44174077c5	7.04%
2019-12-12	z9UibwxXa05izkuPyZ.exe	exe	99319bc5ce7af601eea33ead35c373c1f9f120f2b20fbc54ed76b4a9742286fb	n/a	Heodo
2019-12-12	sBCx.exe	exe	bc762aed5c64a3d3d4ddbc3406f36cb8cac182f2b40e873df558f391749a8123	27.78%	Heodo
2019-12-12	kjdLUCl.exe	exe	b3f8e0e34a15d6319aa7e97dc3dcc726aeabc786fb451171083391ba362361c5	n/a	Heodo