URLhaus Database

You are currently viewing the URLhaus database entry for http://ugira.lt/cli/https:/Scan/zEIK8qID7kVUGHk7O/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:453387
URL: http://ugira.lt/cli/https:/Scan/zEIK8qID7kVUGHk7O/
URL Status:Offline
Host: ugira.lt
Date added:2020-09-04 15:43:33 UTC
Last online:2021-03-01 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-04 15:44:12 UTC to abuse{at}telia[dot]lt)
Takedown time:5 months, 27 days, 21 hours, 52 minutes Bad (down since 2021-03-01 13:37:02 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-05dat 2020_09_05 429.docdoc 4c3f9a91ab8bd67a7de8b61f6d5e49c34a0c3ded123f63205f02d17ff570c204Virustotal results 30.00%Heodo
2020-09-05dat 2020_09_05 S01769.docdoc 8abd1fd956a522b05535b6b9ddb53a6c4353e20235979a9ed05679ac4f2a95caVirustotal results 29.31%Heodo
2020-09-05Arc 20200905 463.docdoc e598cf9a18d4db4fa8174ec8f921eb470f8b844063cec6fa35185f7f8f1d2b4bVirustotal results 30.00%Heodo
2020-09-05list 4691.docdoc 99b355a60a9590d4a7695c3e6dbd12bcc643041c7f98e39ebb7bd29d4300b770Virustotal results 27.87%Heodo
2020-09-05Attachments-JDW97849.docdoc 36db57afc7d4faa57d7bbd559db7ca4ae2bd483caacaa9fba1a3cc6839b240a3n/aHeodo
2020-09-05LIST 7075.docdoc 4160aae4b7d4ee73a7137bbd2d8c5cad6f215282af86bec49526c1b15db1c50eVirustotal results 31.03%Heodo
2020-09-05rep 2020_09_05 6048121.docdoc 178548af9f561e5bf22a2a3bf689025f6219b073e79e56ea0b74f164dc02820eVirustotal results 29.51%Heodo
2020-09-05Attachment 2020_09_05 4561876.docdoc 523e87e4ec97f2222463589b553503e6fd1b248fb7856dc28bb5a67f05709a6an/aHeodo
2020-09-059681 2020_09_05 IJX71429.docdoc 0274b67e43f98e65033f7b7b9c341a6560e515e61187693dfa5b941a2545309fVirustotal results 30.36%Heodo
2020-09-05Dat BI506.docdoc 27ad65edce895a8ac105708b7510859313c9f88cec6a66611b581bc480ad6676Virustotal results 30.51%Heodo
2020-09-05MES_2020_09_05_PZH8419.docdoc ca1ecf3a84713ebe3b95b15bb7e7d4fe779daa81b1a2879feb79423222472ec8Virustotal results 29.51%Heodo
2020-09-05list TNS486.docdoc f71c39920ac9463b4be57b2c9ef5a795184d8adab4c0a8761d0d491ae6b5a140Virustotal results 30.00%Heodo
2020-09-05list_20200905_MQA680151.docdoc 62cc3eedb06b43f8a3e286b0a9f04cbf36fe240a532b217d91950ea20fa0ba9cVirustotal results 28.33%Heodo
2020-09-05DH381_2020_09_05.docdoc eaf88121ded36bd379c812377e329473a1c6e8b9444fa3e2c31410b54883ab0dVirustotal results 28.33%Heodo
2020-09-05DAT 20200905 3687142.docdoc 1fde53646d2021d4bd959bcc2ee2b8c1db5ca4b112b58af96efc114ffd4dc6e6n/aHeodo
2020-09-05ZAN03878-2020_09_05.docdoc 5b82741c8587a1a90e3ce044387a541c69a916330391030a4daa50aa1db6a445Virustotal results 28.81%Heodo
2020-09-05Attachment-R096.docdoc b647104789174776abced7dc5a7abaa47fa349c4b21749ca3b6634e4f039da4dVirustotal results 28.81%Heodo
2020-09-05arc 20200905.docdoc 173c9cfe44cb721e3d1edede6afda3a107dd78b74c1adb41c19fae5ae6a382d7Virustotal results 28.33%Heodo
2020-09-05Untitled.docdoc 206feb1d69aba0e52a7d33975a49cc2a9443deb7bcf9fb4f8a6428ffcd95c97bn/aHeodo
2020-09-05Rep_2020_09_05_65642.docdoc 7b33fe4f09c06251aba09bbc5407ae8fd899bae0a40d3e7d55f3806a8b6a74a6Virustotal results 28.33%Heodo
2020-09-05rep-20200905-6607885.docdoc ee2869e612b62baacd8f12266c98e851549e6789343a4020cc424755ae55326an/aHeodo
2020-09-05mes 2020_09_05 NRS680.docdoc 2ddd8ba7251afbeee6c41576c377265c1a2a9f5370cd66683c24db0c89a0062dVirustotal results 26.32%Heodo
2020-09-05878_20200905_J09533.docdoc 4f193825cdb87bbefffaa5925f7b422f06f0add25d518ea4f874acc892641968Virustotal results 27.59%Heodo
2020-09-0567042222 2020_09_05.docdoc 0917f0cbca78c19301ba65aa799b29dcf90ee3666fc9f8b83f00c5ea34a0eba6Virustotal results 26.67%Heodo
2020-09-05Inf U4980.docdoc 6914af81ae643d0106a7cb16454991e2b4d29053551e92e659456ad592120f57Virustotal results 26.23%Heodo
2020-09-05mes-20200905.docdoc f3c01505f223d53a856b4cbb5201b5cbad5706145be5e214e266f4570491a8ccVirustotal results 26.67%Heodo
2020-09-05250ND_20200905_WKW094.docdoc 2572ca226200ecc1019e9813f939d7484962a7f90ecc62921f7efb01e5bdefean/aHeodo
2020-09-05Mes_2020_09_05_42718.docdoc f0e8099995f3ce14cd75fb397efda8a5ef10d2360783b3321d55be49eb5a7888Virustotal results 22.03%Heodo
2020-09-05file_2020_09_05_642687.docdoc 92bc3c4ef5b89ad046cb64e9cd6ee2eb8d1053b1b07620f1a0aa6503912b05efVirustotal results 21.67%Heodo
2020-09-05doc_2020_09_05.docdoc de7201ce2995436691a764734f9d6dc4395dba5066dc1c6c469fb2684daa58cbn/aHeodo
2020-09-05list-2020_09_05-7116065.docdoc 2d5d1fe8c77135420414a5cef6384683cfbf59f04e7e9b03c909c2f4c3ec54e9n/aHeodo
2020-09-05Arc 20200905 84398.docdoc fc3e08fd58ba899bf7597bdf599c48d0a7628661213da9a31f112a226748053dn/aHeodo
2020-09-0529828250-20200905-50607.docdoc a0c340e5b8f401a13ec7ea03f405623ed8532d1bdfc9f708d34ad94a2c14ac47Virustotal results 22.03%Heodo
2020-09-05060_2020_09_05_9939247.docdoc e5b5640cb999ccd3a5fa07ef28ecdb37ea16dbe142bd3cec619837a9c0c3baddVirustotal results 21.31%Heodo
2020-09-05list-2020_09_05-QM304350.docdoc 5d1e5bc11522b6d4daf399dbbd1a18561ee98aad33dce8f798e2aad3a2a5c329Virustotal results 22.03%Heodo
2020-09-05Inf-TT021.docdoc ac03cec1ea7e2d4ba254b3225a617ff11bb93247cfd84340907d0533522327e4Virustotal results 21.67%Heodo
2020-09-04UNTITLED-2020_09_05-985140.docdoc 4501204cd406a353ac88516bb9f133148c882ea030d84403dc54bd0297f68b6fVirustotal results 22.03%Heodo
2020-09-04dat_8369743.docdoc d9a9da6db3834089876251db68e72db8a21ff82ee58ca338a43a055110f793c4Virustotal results 22.03%Heodo
2020-09-04Doc_20200905.docdoc 6d8bb4cc926450189c32b7634d2940fba6556c2865096d7ccafec6b4b6e0c396Virustotal results 21.31%Heodo
2020-09-04arc.docdoc a68967c55063a216717a336462d01e74b4dbf73c0e3ad3b56bfe2c4ab10f3b38Virustotal results 23.73%Heodo
2020-09-04rep_20200905_U924711.docdoc 137b5a0cda220100df4caefac31efe6cc85c4bd72580fe2ce1987887901d3ed7Virustotal results 22.03%Heodo
2020-09-04inf 70438.docdoc 0f264ea12ac1b1f96e80c683d7aabce629b15ded57f43e29a4faa7cbf057d673Virustotal results 22.03%Heodo
2020-09-04doc_2020_09_05_6045.docdoc a8e4d449c8018f90196d3de6e14d75cdca5c5f76b989880e012890f87d43f6c9Virustotal results 21.67%Heodo
2020-09-04mes_20200905_OA01873.docdoc 50d0908dff351c8fcdfd307f4c93cad6065d4c10c2614fd4201209f862681cfdVirustotal results 20.34%Heodo
2020-09-04List-20200905-093.docdoc 44f213e9ff99dece96ea33d94a4e46bb3e508480002c5e255d46ca711b44a9e3Virustotal results 20.00%Heodo
2020-09-04Dat-2020_09_05-6947638.docdoc 17387deff7e3725fb0ae1aacebcb5e9be101e9ad64a337ce858202ef07458f1cVirustotal results 20.00%Heodo
2020-09-045306DW 20200905 DA63705.docdoc 4833c57c4ff48c2720247aa3bc9c8d62222f9fe3d095924030c344bfa8673847Virustotal results 20.00%Heodo
2020-09-04Mes OU217.docdoc b177d6304e1239837128c14fc3423ded464e3877b918bdf27db3d2f40375c398Virustotal results 20.00%Heodo
2020-09-04Arc-20200904-B823106.docdoc 9f003b20287110dbbea8826454c0666aee189fbf57cb907e8cf072dfe3829b18Virustotal results 19.67%Heodo
2020-09-04MES.docdoc bd6fabb51f037d2253220c55129be8125a21f63b579dd69ca9d82604f0208b60Virustotal results 20.34%Heodo
2020-09-04inf 20200904 WN952166.docdoc aa3db031e17cd90af00951bc4d86c18c8e42328f47e9014b552993ff1b29c557Virustotal results 20.34%Heodo
2020-09-04MES-IG860395.docdoc 623ee20c1b2e5a53a0bbf6eb21f4b87cb0e6392e023f1e08267abc08c26e5bbfVirustotal results 20.34%Heodo
2020-09-04doc-0848.docdoc 44d3865f9ac7efa31a3e9882aa38bad74bdd7e66627f48cf5f915a664ad329cfVirustotal results 38.33%Heodo
2020-09-04Arc 879967.docdoc 0cfb4e12de240822e52fa2d66698bdcfea13a994ccf47b7fa45634e0dfff294aVirustotal results 35.59%Heodo
2020-09-0460815692_F897992.docdoc 112b31f94d0408209223b109553273ff732fcd2f05b532c53d7ef7e4658bec80Virustotal results 35.59%Heodo
2020-09-04List-YRR5541.docdoc 6679f5b0900d978a3f0c3c6e101bb18ef6a043de0a83d202f80c4cd6c77a2378Virustotal results 35.59%Heodo
2020-09-04mes 2020_09_04 1565442.docdoc c567ea1fcaf384bfd2ad39165ea9b07fc04bfcbd325f7b3ecbe8c7329e65611cVirustotal results 35.59%Heodo
2020-09-04Doc-2020_09_04-G11014.docdoc 380c46aa7a6ebfb32b4e005930aa368ca90386ecf02e2587a0c6f035569df404Virustotal results 35.00%Heodo
2020-09-04LIST 2020_09_04 2920199.docdoc 6f0b6b0222cea2d8ba538112fd54ca8a8bdff5682be620babe330264cca0858an/aHeodo
2020-09-04Attachments HG908.docdoc c9af36ca0fb3bda5fbb9b2b047989fe8f0464034fef0f22352c26edb9f8f050aVirustotal results 35.00%Heodo
2020-09-04list 20200904.docdoc c9b3d60eb5016eb7958189110cbe77208b4099ca5f9f4b71d6170a263905e07bVirustotal results 35.00%Heodo
2020-09-0456446.docdoc 5da16c9f1af8807ac20e6adce0424c7e8fb78d5a4187584a3587876c2affb1e7n/aHeodo
2020-09-04REP_20200904.docdoc 74f31456977a691fa6c56243890fd997e0ed0e2793ec4b6e1df8e8a0c93a22cfVirustotal results 35.00%Heodo
2020-09-04Untitled 20200904 T476092.docdoc d21d369a575521b056524693121464f2aa51cbbc0790a6b01069bae6bb4dbb32n/aHeodo
2020-09-04inf 20200904 500447.docdoc 791553d28205023fcec3eb1d7b8e89736e5f99b90e7e8a1ddfa4452f1897a74dVirustotal results 35.00%Heodo
2020-09-04LIST-2020_09_04-UJ10348.docdoc 0d5e301807f834486dc3a5e55e4e04056e56cb6b8a2f2136c64f55a0ba12f1f3n/aHeodo
2020-09-04Attachments_2020_09_04_E033140.docdoc d4416a6ff0dbbf8a60d1df15030c7eeaf6be3883b9f4df72bd6312eb84caa672n/aHeodo
2020-09-0487904262_2020_09_04_OZJ1919.docdoc 372bcdfc09a2f41eb9dff01047e6a63434a940526a08cc40100a82046d9c6fbaVirustotal results 33.90%Heodo