URLhaus Database

You are currently viewing the URLhaus database entry for http://www.leonardoenergie.it/media/0or-sv7l3gwdgfxs-mjVFbBrpfm-JzgukPI3/special-forum/7439721395388-0u5EN8nQCbqHFuzY/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:300538
URL: http://www.leonardoenergie.it/media/0or-sv7l3gwdgfxs-mjVFbBrpfm-JzgukPI3/special-forum/7439721395388-0u5EN8nQCbqHFuzY/
URL Status:Offline
Host: www.leonardoenergie.it
Date added:2020-01-28 23:32:08 UTC
Last online:2020-02-04 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-28 23:34:04 UTC to abuse{at}oneandone[dot]net)
Takedown time:6 days, 17 hours, 49 minutes Bad (down since 2020-02-04 17:23:57 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-30FILE_20200131_Q5693.docdoc 8b8ac377b125159eb6e1072fdd5f5de37fee27255f9d74a002ea3733d1e26d96Virustotal results 33.33% Heodo
2020-01-29INF-PYI772.docdoc 2c7a2ffff7a4a2fcb7a86235dafda3b02ce67330155e00a22408d6c14b2f5cafVirustotal results 40.32% 
2020-01-29list_272593.docdoc e49d66744b97eaa47dae870c0fdd5f6b3a52e1b2245e8567ffa6b8a344663fe8Virustotal results 34.92% Heodo
2020-01-29LIST-7067.docdoc 49e28f382793143c68d57be83f8e7252dea8674a30f06b9063dd9ccfc4f25e85Virustotal results 33.33% Heodo
2020-01-29inf_2020_01_29_0189.docdoc 49725f6641477d5fcdc1933e66eb652922a1e1264277a6aef8069967eb0084f0Virustotal results 30.16% Heodo
2020-01-29ARC_20200129_16479.docdoc c0ebbfa695c1e2d054d32b340956dfffb4c155a4e420caaf593b0f1bbccbbd18Virustotal results 27.87% 
2020-01-29DAT_4961.docdoc 5ae7e30b55476614975a3dcc125e78cc5e84eb3a8c413ce9a42be9d99ed7150fVirustotal results 24.59% Heodo
2020-01-29REP-20200129-T14573.docdoc 1b2ab9713101a1224f92f7b670acc6debff91071765f456e98552b87fe6c6750Virustotal results 25.81% Heodo
2020-01-29Inf 2020_01_29.docdoc 39a7498cdd0e0e7d2647254250c527ca46b6c7638794d1c1f524f5f5aaafaed4Virustotal results 26.23% Heodo
2020-01-29INF-2020_01_29-NO73108.docdoc 0b0243567f8017cba7be007b4d797731af10a9c7e9971cb09881d0a646bf88a2Virustotal results 30.00% Heodo
2020-01-29arc 20200129 191.docdoc aad9025b37d955a0929dc76185e7b87d374e735e3a30a258bd549dcfc7a1bf27Virustotal results 26.98% Heodo
2020-01-29File 20200129 AL8413.docdoc 8c178af12cf53e214a99e4c9125f73724ad6029bfb2e095b3c6257cb3a25109cVirustotal results 27.12% Heodo
2020-01-29mes-2020_01_29-PUF289248.docdoc 9e66ad03e7885710b534addc2f0c5637987970b3c6185b27cb42a4fcfa06dfc9Virustotal results 24.19% 
2020-01-29Arc_2020_01_29.docdoc a1245dc00abc837e5b912c2aab2cc8eb34eb70db4bad71991edb4854fccadfb9Virustotal results 24.19% Heodo
2020-01-29LIST 20200129.docdoc c2b2cd3b90f72db2fc325fdac1161626765153b7cb874ee42bea9fe3caf0eb6cVirustotal results 25.81% Heodo
2020-01-29Inf_20200129_4998586.docdoc d6548725e281a6fac0ace4af505c15a21b8e1582ab951ad62e29dc42cae45885n/a Heodo
2020-01-29arc 20200129 4515459.docdoc 085777a85dd9b9d62ecf918d0cda586ecae8d0b32af5aa6182d85c77a8a571fdVirustotal results 42.86% Heodo
2020-01-29File 2020_01_29 802.docdoc f5c5c5efd56a06272577f6aa8fde6fe22660095ec9332d7449f3e0769fa11b8eVirustotal results 42.86% Heodo
2020-01-29List-IQW581533.docdoc d0587297f7b5699b364592f59c0d93057b42defb42c714d6381d54a6142953edVirustotal results 44.44% Heodo
2020-01-29ARC 20200129 954.docdoc 623303d6b597c92e43276ac21c6338a64cb078760e9a74bd08050666a3aeca13Virustotal results 43.55% Heodo
2020-01-29Dat_20200129_626.docdoc 85359d87138be58de0c049e5c520f4de37adde9310893971769a0c640ba0a0fdVirustotal results 44.44% Heodo
2020-01-29inf 20200129.docdoc 99f4cbe6a9549c0dd8d99cdbee3c8ffe2c85d61f8a3cc94d1e57a962e4497be1Virustotal results 41.94% Heodo
2020-01-28arc-20200129-KFF24150.docdoc ee9ee620b47e7baf42373e106e240f5cc7d8f6f0aedb45b66b4203abfa81956cVirustotal results 41.27%