URLhaus Database

You are currently viewing the URLhaus database entry for http://1am.co.nz/images/Documentation/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:435105
URL: http://1am.co.nz/images/Documentation/
URL Status:Offline
Host: 1am.co.nz
Date added:2020-08-17 19:24:08 UTC
Last online:2021-07-16 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-17 19:26:02 UTC to abuse{at}mediatemple[dot]net)
Takedown time:11 months, 2 days, 17 hours, 35 minutes Bad (down since 2021-07-16 13:01:53 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-07-06FILE_PO_08192020EX.docdoc 8db250f122d8b14163e84aa6f1f292b96b3c0215dc2132bccb4e56c489b2771fn/a Heodo
2021-06-12FILE_PO_08192020EX.docdoc d0f7a0cb42a7ced42add194752a000ed95694cd50d9c3500517fa2a4bfba7af9n/a Heodo
2021-06-02FILE_PO_08192020EX.docdoc 30aa709d447105ec773c51391b2e29a57503512a5bf7808e26386987f2ab7f58n/a Heodo
2021-05-27FILE_PO_08192020EX.docdoc 0b99bcc0a150c9f688150bcfdd7034105695300f0d449f3ad121a3101ab70405n/a Heodo
2020-08-21FILE_PO_08192020EX.docdoc 6132d38c562ce3fd2f815bb85f961fe7be3153f058d6b86f366c69a51f65bbf8Virustotal results 58.33%Heodo
2020-08-1897302942.docdoc 805f00873a643dff1edc0ebb808bcc771a6641780897a3d7732b01444b2ec3d8Virustotal results 40.00%Heodo
2020-08-18YTW_3227350184.docdoc 7f32822db30d0d6ab9d5ef5dd261b4629d251e40b69b860a30fa476c0e7b8d0fVirustotal results 40.00%Heodo
2020-08-18FILE_LN1662181242ZN.docdoc 2db327ec6e030d7937f39cdedb6cbdbade5a89c43fbf6ff39f7c4b7299261a0dn/aHeodo
2020-08-18DOC_32898129.docdoc 462b55199b1901a5d737132fa6f604c4b6e8d201ca57b5971ce95294fb74a056Virustotal results 40.00%Heodo
2020-08-18REP_VYS_080120_XLL_081820.docdoc 9813914d1a34ae3c37bd5af41fb8e78b2f04cdfadec86bbbeda28f4cf069b006Virustotal results 40.68%Heodo
2020-08-1835021286.docdoc ba7333c62eaf38c72ba462b0189a0a07f8e6e6ac98bbb7c516ac21648b72ad51Virustotal results 39.66%Heodo
2020-08-18REP_33502265.docdoc 460a8e4f639b96c10e0094ce3aceeb1f60278284a1d7b27e3b16fd4b76744636Virustotal results 40.98%Heodo
2020-08-18REP_41353710.docdoc 0abe25a1015f697d6e8f5657c0b05437419935530321c56d7d76893e138ab8f6Virustotal results 40.00%Heodo
2020-08-18RWG_080120_TIQ_081820.docdoc f13b6d284eb7046fcbacbc7d199359ef96282da973fb4baee25c10fe1f96d9b9n/aHeodo
2020-08-18INV_96551734.docdoc 4b7f1d4444db5d249123e54f4b583946c8c0db484f2c8ce65ef0bb922e96c4c8n/aHeodo
2020-08-18DOC_64029598.docdoc de5408a8f5bdfe07fc7968fb74f88eb396f296bb04e46861cee727b23e040ec2Virustotal results 38.33%Heodo
2020-08-18Y_9590409748.docdoc 4d8e7cfda1c0e9d03775d5858d97345d0a2ebd918a721a33ab2b2225e594711fn/aHeodo
2020-08-18INV_41173779.docdoc 010999a8438ea40d8012240b03d2ced196d695c0e6ddcdb43bca7d28693c16dfVirustotal results 35.59%Heodo
2020-08-18ILWZ_PO_08182020EX.docdoc 59a09a4e193789a268b7d79fc4e5a2f5be16c87cbb04c5fc10e2ec27aaa641d5Virustotal results 30.00%Heodo
2020-08-18REP_44174583.docdoc bf49addf4f772ad58a38abfefd0d5c4ba4d193533c687a048ebd339e512098a3Virustotal results 28.33%Heodo
2020-08-18G_PO_08182020EX.docdoc 754ff57c9f03bc4578bf62ce834db479d379858c30b0e0d120c71970c58feffcn/aHeodo
2020-08-185453105469.docdoc c6313b13d24c46970563fd973b3b8b40ffd67b9270160ba475ba43994c824d8eVirustotal results 22.41%Heodo
2020-08-18FILE_27879954.docdoc 40adc356165aeb925dcc32c72e98d5d0a548f3f5ca83cd3f932792c081bcc106Virustotal results 23.08%Heodo
2020-08-18INV_84087263.docdoc 5c8ecccdd3152ef12c7449cc2637ddcf40c2e53920f92ccd91885695605d118eVirustotal results 21.67%Heodo
2020-08-18MAD_080120_EQD_081820.docdoc b112d8627b556a0c0ac19e877bdfe439b82cb1a1985603fa5c3a8b3de73a4fe0n/aHeodo
2020-08-18PO_08182020EX.docdoc 85431ac67a721a63e9e100e9176634b535969b4cd7c70c34908ab629a7e80d26n/aHeodo
2020-08-18PO_08182020EX.docdoc b8578fc1800c341816ee50de533d7e77a647bb4005e63d7c5234b983863d9c34n/aHeodo
2020-08-18BAL_PO_08182020EX.docdoc d021a79aebe130ed1440dfc99908def9a8947d245ad9f8c9dec7a339adc06135Virustotal results 22.95%Heodo
2020-08-18DOC_EB1LX2MQ.docdoc 92674d8d935ca49cbe4489ad9f6b55bb98697e74750d26bc138edd3c70f214b4Virustotal results 20.00%Heodo
2020-08-18REP_BD8922267397HV.docdoc 8307b0240a3df3f69ed9390c9d3c041bdce48f9b0454b98140c5e569cdb9c052n/aHeodo
2020-08-18K_UP8377228340BH.docdoc 773759e9dd58c255016495830f0db7486f6a0f27c1c23465045208b8329e95a8n/aHeodo
2020-08-18INV_Q6NOC4D6QU6ZH.docdoc 9c9cf53af694c053c682a3dfdf2c204c75e1a78a18e9bd92fedae2622b83b9abn/aHeodo
2020-08-18REP_ABN_080120_PQX_081820.docdoc 3f5ff54ee1bbd646e9c3b15d2ad35d9bd78c11037dc671bd7d935aaa05438158Virustotal results 21.67%Heodo
2020-08-18D_MRF_080120_TNV_081820.docdoc 4ce7c9c36eea321e4805b6659532b84bd731c6e282a4565e32366fa2176fe340n/aHeodo
2020-08-18PO_08182020EX.docdoc ab6c9909e16fdf41b17881417d7ae3e0caa1a66bff25a443a4e5ce8b338ddb0dn/aHeodo
2020-08-18FILE_PO_08182020EX.docdoc 7976a8188a5d793cdbb85eae76d2bf5dcd550789634815969fd953edefd06been/aHeodo
2020-08-181ULKXM693.docdoc 8265ec213eaa6d222c57d0befde6281f1e53f7cbbc3e23df4b0b151921316accVirustotal results 45.00%Heodo
2020-08-18BAL_YU8986354377IR.docdoc 8e753065e300156e56580de3e895fe3aa55d7ec678c49eb160e2ca68534519c0n/aHeodo
2020-08-18QU0037419899AK.docdoc 1904353690dbe307aaac69ccaaf4f1862c2991b85bc778b4c02a080b10845e1cn/a
2020-08-187BV19HYKGOFIXZ.docdoc a7f9d63388739119575efca17a203780aa3111a89831740d7395769fda081b2bn/aHeodo
2020-08-18BAL_XEK_080120_DCE_081820.docdoc 0b3be7a3505e7e03f2cf5ebb03d0081fec7fea29f6e21515280dd5362cd50b4aVirustotal results 45.00%Heodo
2020-08-18FILE_7W53QJ4YD5BEEJP.docdoc 41f1e702b57bab0ebc27e61570867b5417e34c5aa1b9046382207f7f62fd15adn/a
2020-08-1820149774.docdoc b1021100edd56e9a41eb6661376e44e4066fe511be9fcf5a71538156713fd91fn/aHeodo
2020-08-18N6Y1LWTIUIF3EFW1.docdoc 749a587028fb1f9362ba6a0fc4a256b6c471166c8fc3f5e52a2c22adff147884Virustotal results 45.00%Heodo
2020-08-1859989790.docdoc 36df396c174d0c918c372a25114d8732328ce8658fe2b138d953e0c0ac3ad471n/a
2020-08-18T_CB3324452081HD.docdoc d2b8765df72f5975d4984c9186d5373ea19685fa981b09438eb6600188ce4477Virustotal results 45.00%Heodo
2020-08-18INV_LQV_080120_ZMH_081820.docdoc c373a609023ff4516086d61658057caac275c361b265ca121a75c19af59be615Virustotal results 43.33%Heodo
2020-08-18REP_LUU_080120_ZDV_081820.docdoc db593f135aa15cb1d2279c26e034744e979223392fe2ecd2d5e204648bd0ca6dn/aHeodo
2020-08-1807983573.docdoc e284647edaee2ed25f77af25077cf6abe3b9339e1890a0cae20dbfdc5bf1399fn/aHeodo
2020-08-18M_059917341506252932.docdoc aecb14f5fd610dae65d94c788e6451f3f073561c8c00b0b62b4cf9d710c570edn/a
2020-08-18GOI_87533138.docdoc 5d423fc54fea2aab0c905e32a63397c0b39419e98d6b50af5079a73c7052fdc6Virustotal results 40.68%Heodo
2020-08-18F_886195521121.docdoc d455be8bab47cee43ba5e71e1ecb482cddbc0c320d39874a081d23d5d27d7fa8Virustotal results 42.62%Heodo
2020-08-18DOC_PO_08182020EX.docdoc dccb23d76041147736f6f324b3ab4b5bf23db414b1b9aaef5b12da4033ef7f91Virustotal results 41.67%Heodo
2020-08-18372028638984490132.docdoc 27c375a8f3878f06b0f95f14705dbf8400f42c0208bdbffc432c9fe9be231b7aVirustotal results 41.67%Heodo
2020-08-18DOC_PO_08182020EX.docdoc 2a06b2a913102a6c410bfbcb01e2d57a80f0d62a3c32d9a1cae4a1611cc300bdn/aHeodo
2020-08-18J_93879462.docdoc 75323534a680ebae38b785c4c4eaac9dadc66c0757c61eb12c8dfab01e917d3eVirustotal results 42.62%Heodo
2020-08-18IZ7148938862QC.docdoc 5c8b923944c5816b259806159d34a3d379b2c8f347ef3b69cbc5b18f60637d93Virustotal results 41.67%Heodo
2020-08-18U_666JNM80F2M.docdoc a9f2dfb969ec4a5c09edfdcf49a041eed112c8ef64c36610131b1ef17118292an/aHeodo
2020-08-17FILE_3WKLOA3AY55E.docdoc dff1df7c560a8a24caa14cf006d941b7c3d80648923fc99f691cf668706dd683n/a Heodo
2020-08-17DOC_70445638.docdoc c0bd051153ba3fc559191e1a744dafb51332259e42fe8e436dade8cc96fae9een/aHeodo
2020-08-17PO_08182020EX.docdoc 000a79f815b3fec41875c4a836751712c6447fad1a61998108810463c083a669Virustotal results 41.67%Heodo
2020-08-17DOC_13067228.docdoc d4917c2e36254107abd6f1f06201f1cedf4bc6fdf73e569b6ae7827bdf677925Virustotal results 42.37% Heodo
2020-08-17INV_PO_08182020EX.docdoc 7776a0f18e269f643225df332d619771a31094c4f40736c9a03d179c03fbc668n/a Heodo
2020-08-17DOC_632984148.docdoc 18b1585abb668182213b56998ae5ed30758e1649c11469b52af43723c5b0704eVirustotal results 40.00% Heodo
2020-08-17FILE_EL6830260519HJ.docdoc b46dc61d653d60ad6c496660e2145b3fd27354a3c6e1ff594d17394f2cd887f2Virustotal results 40.98% Heodo
2020-08-17PO_08182020EX.docdoc 974cee607e26fc226dc6835c3823f25a77541be94a01be3d3ffdb69afaabcdf4Virustotal results 37.29%Heodo
2020-08-17484XAUF.docdoc ce6e19d4ee2e8590e6c58c39a9f35b9872c2b31d3fba395531f6c44e049566bfn/aHeodo
2020-08-17FILE_16978423046762596698467.docdoc 4ec08e452e7eafcff44c88aecf71b7cd95f8d3a68a7258f9bece3aa3a0caa123n/aHeodo
2020-08-17LR8656397222RC.docdoc bf5aeeb360a35c38eebd0ee0b1e48a839c0e3e7c4f3ecc1e1dbc8f3e8ab6d24en/aHeodo
2020-08-17VJ_PO_08172020EX.docdoc 3ee4af869f74285c3506566a4df827b46129038c38f621349ae70b937ac04b20n/aHeodo
2020-08-17DOC_14679762807563279.docdoc 8c5b8907514829cd3c77fd2dc48359d7a74533ae80fc0451d6ac51a998894584Virustotal results 32.20%Heodo
2020-08-17REP_7668507897157.docdoc 6081a7fd5bc17a551c83adf95e2ce4101e03a1de13cd02668259ea8f16432df0n/aHeodo
2020-08-17QPLJ_MR5036987770NI.docdoc 3187fb91b34ef51e86634e01b3fb765295902fb7d8934d6ff180f47d9e8614c9Virustotal results 30.51%Heodo