URLhaus Database

You are currently viewing the URLhaus database entry for https://ramlit.com/css/lm/h23jti/wb007514825080832721721yh4gqo1zksknq43ta7/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:521577
URL: https://ramlit.com/css/lm/h23jti/wb007514825080832721721yh4gqo1zksknq43ta7/
URL Status:Offline
Host: ramlit.com
Date added:2020-09-15 23:05:05 UTC
Last online:2020-10-06 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-15 23:06:24 UTC to abuse{at}hivelocity[dot]net)
Takedown time:20 days, 15 hours, 6 minutes Bad (down since 2020-10-06 14:12:24 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-17BAL_91104394.docdoc 794d05a964943c6e59eef584b6bd5ee060dec7907a990ec1a0d71260e641c74dVirustotal results 47.46%Heodo
2020-09-17T_55188668.docdoc c81ad3ff9f4ab6829b4f06308391cea0e98bb5e371462d2bad0bcee9961b99eaVirustotal results 47.46%Heodo
2020-09-17REP_AH1777907982HT.docdoc 42672053a8a7951c0df29a2a4de07128b0577be82c17609a53a93556faffb7abVirustotal results 43.10%Heodo
2020-09-17FILE_65540147.docdoc 46ed6bbe96a97f0da9479591c55394830ccd60524bcfa7b78b035514fb9a8ebaVirustotal results 39.66%Heodo
2020-09-17FILE_DE2208765698GX.docdoc 28e0ec9faec8fb63dd3210568b84e14423b5bfe6e353859a2da0fadc23b3e8ddVirustotal results 36.21%Heodo
2020-09-17FILE_47132453511.docdoc c2ad231436f38c11f24315fc258799ac335c49d266d61ff8a1ddf9a771988d66n/aHeodo
2020-09-17DOC_B19A3ZM11.docdoc 88efabe81db15fabbb8cc9be7263caefef8c4fa0c482c53060ff6c60ea8631d7Virustotal results 37.29%Heodo
2020-09-1767508678614.docdoc ab673a4d98deaf332cd304d7285159dc8a473d8fb207d7746403ecf3e81371d7Virustotal results 32.76%Heodo
2020-09-17DOC_HH9298092958OW.docdoc 7cafe1639aba59d6cb8a36491ccdf02309ae42833e650c7af93059159431366fVirustotal results 34.48%Heodo
2020-09-17Q_11757779543461.docdoc c6dcfa2a31a094225c25a0d53cccd915b76ab34be20b10fc775d740b3e6d9b21Virustotal results 32.20%Heodo
2020-09-17BAL_85495761501.docdoc 1da1190d2c7472ff429ae35611b7120698dca55175d1c298e68f24f33fc4caecVirustotal results 32.76%Heodo
2020-09-17BAL_GVQ_090120_FVU_091720.docdoc 1e7768f22ed163e40214a6e4cc98050525441233f7a49852621606f4eedf937aVirustotal results 32.20%Heodo
2020-09-17BAL_SMWUWFS5XPK.docdoc 7dbf132e16c58a6ffc3e77056da28a5e84a5bab8d4ebc7c1d90057b380d2d5c6Virustotal results 32.76%Heodo
2020-09-17ZRWC_PO_09172020EX.docdoc ad55f28a8afc74e7d12b0862d1efc14cccb40e3ff5a2faff1b30c26d2cba6d17Virustotal results 32.20%Heodo
2020-09-1748746159.docdoc cd7eff89ab25979594648885ed165b0e8cb844bf354d2cd77afb285047573fa3Virustotal results 30.51%Heodo
2020-09-17YW2415974455QA.docdoc ce6399120ee307992b13733489078810f36a8a5dbd5e7eabaf399d95216b7f48Virustotal results 35.59%Heodo
2020-09-17INV_46042333.docdoc 2544f7f03bcb606491b39f0f8cba55899e5e9dd8871128a268329dd6a539f5bfVirustotal results 33.90%Heodo
2020-09-17FILE_52794589800.docdoc 27eba47f653b19797edea37d8dbf75215328081ca3b6abb42719eb226a877a5dVirustotal results 30.51%Heodo
2020-09-17FILE_PDY_090120_IFH_091720.docdoc 9d101c9ae5aad02aab0e581cf566b9cf7e1f0e39db512e79045e651ee42ab9a6Virustotal results 30.51%Heodo
2020-09-17FILE_VH4958893438GD.docdoc 983df755ad1ff2fcd969c936320a9571908168ddbff5caa34b63ea51be406312Virustotal results 35.59%Heodo
2020-09-17INV_SYEMN54TI8.docdoc e82e2f66ed32cd20f0d00ec484e270ab47084cb2fe8f88e1f00b9eb507e30168Virustotal results 33.90%Heodo
2020-09-17BXPL_JOZIUNZJXOELVDKP.docdoc a3efdad2ea2076e2a90cd4c401817a6d4e0dcffca6f825af796416755a6fb7e2Virustotal results 30.51%Heodo
2020-09-17INV_9JL9XE3RI.docdoc e74a5aec9160f939b2e4851b5872f2bf9ff98d4897f282e8033c77b415654e5fn/aHeodo
2020-09-17INV_PO_09172020EX.docdoc fd0f987936c01acfb91bb84e9e9c3e6f425f55d07887f14ee595ec418d252849Virustotal results 40.00%Heodo
2020-09-17DOC_30761989.docdoc 51d460db7db57fd212907c9aed23bba4891c43175f73978da2c791c60a412c43Virustotal results 38.98%Heodo
2020-09-17NEL_090120_YGL_091720.docdoc 595abb95ad8bea9fcd875fee5c21baaf5f829e997eb430384a8fd7f43da2e0cfVirustotal results 38.98%Heodo
2020-09-17INV_11313895.docdoc 55830632b4ab2552e0bd05b69d7e03291c05b89c3f4a37dccb611ec180d70721Virustotal results 38.98%Heodo
2020-09-17INV_0477421927295016558451398.docdoc 9e4278eac329ac03d6c9b60c69594f50d2efb41914b428309216bdfe5ae15904Virustotal results 39.66%Heodo
2020-09-17DOC_03355892.docdoc 0c2e3b86f744311a9e0cfeff0f0a7c22284b08cde0cc7437289d9c416eaf4f69n/aHeodo
2020-09-17V3ZM5R8T89.docdoc 8bed6a4e027b38076c316eb5378c9d60d8fd9305217dba0e315e93974091667cVirustotal results 34.48%Heodo
2020-09-17YHQ_090120_DKC_091720.docdoc 829d47a9b0e4fbfbd6d5d8d7002b078702f776d27e98c62a0d9cd0aa8a42bf91Virustotal results 34.48%Heodo
2020-09-17DOC_61393946.docdoc d9a35783bb245b622048384501eb1c30e098c547b4d3079e0c8d01e06336464cVirustotal results 35.59%Heodo
2020-09-17FILE_23676004.docdoc 7787b958e5df87b1f31bc7382f7b5ff4b6bd764b807e381f75b8b2756623f393Virustotal results 27.59%Heodo
2020-09-17BAL_IRCGONAMSCO.docdoc 430ef6af760d2105f3c14655f66ff5dc191916c938a26256085965a4a536c827Virustotal results 32.20%Heodo
2020-09-17INV_654222117762016874923806.docdoc 524f6d1744c625d4ee827ab1ee1406f5aeef8c8799b8cf6474c2a53014a1dfadVirustotal results 28.81%Heodo
2020-09-17340682893078469.docdoc 32d3ded66cd762a234e91ee002a061e053d98f38a52d0fa5356bbbf1576c7880Virustotal results 34.48%Heodo
2020-09-17OGJ_090120_NIO_091720.docdoc 3cf8f34ba881699b5932783c60c591a6b88b1523d772b1fa292425764b0aa3f8Virustotal results 28.81%Heodo
2020-09-17INV_EKVEOL9WJTV9.docdoc 665e45861c718dbcda0e3f7473479a62187f5248b4d99ec7d63ff91dd4eed98eVirustotal results 27.12%Heodo
2020-09-17218763203571.docdoc d55ed14cb859a16cddd063eefbcc2fbc78b5e75f2b964eb1f33e1954ce9f0c71Virustotal results 24.14%Heodo
2020-09-17UVH_090120_DOD_091720.docdoc 11edbb83a5be58e02605322f9c28134420f1aafe0e30a23b264ef751657c70daVirustotal results 25.42%Heodo
2020-09-17DOC_I2DS3BWVI3WJTRO.docdoc 409d5db4ee06957895e043e25c81a8d9b2438a172c248bfc3f149c6c947e3ce3Virustotal results 26.67%Heodo
2020-09-16FILE_30794334.docdoc 1ecaceaeb20649c823b3a63accf639925ba8e4c350b2509496c04dbd622d5d4eVirustotal results 25.86% Heodo
2020-09-1648374544.docdoc b2bfefad5d4d6a3dff230f61a9c4b055d5ae4b37b8fecca5550317c89f615504Virustotal results 25.42%Heodo
2020-09-169JK7CJZZ.docdoc e7631c5a69f76fea0835835a14a8e885f2f3b0c0dec2d577278e70d3776eb0a5Virustotal results 26.32% Heodo
2020-09-16FILE_QD8776583157AL.docdoc e247f4f69c1be4c95bdf6687e2ae1adbd1635c126ace3b544ad989024da5fb3cVirustotal results 29.31%Heodo
2020-09-16V_QSW_090120_TSW_091720.docdoc f8be1cb32fdc9776f4b599f4b99eb0315d3fccebbdc850498b96f6a65fe9e02cVirustotal results 27.12%Heodo
2020-09-16UX0664502764XI.docdoc 6ba572ac222372c95a63401ec2b6710af0a9445d6c38efc7cf8397461ab1fd8eVirustotal results 27.12%Heodo
2020-09-16INV_792446785838148994719922.docdoc 1a487a6af75caefff2748862adf7200a692c1e5f6453c1d86ebceab252b5bd66Virustotal results 25.86%Heodo
2020-09-1639556085.docdoc 2bc521550fad4a12b0bb8f34a8958db7b2f5b50e9f8579d30d814cee697ab694n/aHeodo
2020-09-16QS_PO_09172020EX.docdoc 53838205956eab8a004b3f1cd4ecb92e6cfc4eae4cb978b4dafd2a8560c5186cVirustotal results 25.86%Heodo
2020-09-16INV_PO_09172020EX.docdoc d30169f108ec72fbaf16bb8726e798602988e1c42a7b3020b0ef0ad0572f9625Virustotal results 25.42%Heodo
2020-09-16REP_09202045.docdoc 6d27f5af653565630751a1ab0faa64d0c28949cfdceef04b4c543a0b4a7666f3n/aHeodo
2020-09-16BAL_7QVTQA9GCDXA.docdoc c0418ebecc711ff38d29eb29f832c78c462b0c3f55201223702aac43a15f8e1dVirustotal results 25.42%Heodo
2020-09-16BAL_939354577.docdoc 66bd50b4b2f0524aff6b9f64fcad5a686d04778fc56eae470249da88f7c40077Virustotal results 25.42%Heodo
2020-09-16INV_EG1049275073LM.docdoc b88f5009f8b75ec0a35f549fa777d05a819b0ca478eedb65a7b0a9fd01d51e30n/a Heodo
2020-09-16FILE_QJZPQZEVYKW.docdoc d1df096853342d0030f71b7be3c608ee35fd1c81bce971a45e00b001a7d85d3bVirustotal results 25.42%Heodo
2020-09-16BAL_56932659.docdoc 8807b5e5fcc84574f25c3cc1fd79a2b292b7f7037cba0ed308a05190ce462002Virustotal results 42.37% Heodo
2020-09-16WFH74X4IOUSR0O.docdoc da87185fb8a79bff00dfd7aa5d3a7798054a8b1c882b4a25180cbac2b863f2c3Virustotal results 40.00% Heodo
2020-09-1679236519.docdoc 1e5ed60832baaf0e362870373615cff90279bbbc4e544c76224f7528687276eeVirustotal results 37.29% Heodo
2020-09-16DOC_PO_09162020EX.docdoc 25d1788ec133f048b97e9f205cf6c7b69e50ed0418bd9877553aba8a7bdaefc8Virustotal results 37.29% Heodo
2020-09-163410546774579760763315900.docdoc 89e280d00eba5184867b52270ea583f8bda9161dcb52921411e456747741e571n/a Heodo
2020-09-166683391284194399286791241.docdoc c88d8beb44c5609d538cae9b2bba76ebe5b09aefbb561fd2801356e147f179ebn/a Heodo
2020-09-16DOC_PV4309288690IT.docdoc 234a1653236e959e6329aec64c1de58538db56e66156f95517c05b62487d70ffVirustotal results 38.98% Heodo
2020-09-16BHB_090120_WWX_091620.docdoc ab59f98cab28ac3918fca5754849fc1b16006d6044116ed9d0453f03731894cfVirustotal results 38.98%Heodo
2020-09-16DOC_UBIX0P9F4CU9B8JW.docdoc 06875ecfcdad40771a2a6d4ea795ebf797776a5fb3289a4f4f6207dc2d4ff91fn/aHeodo
2020-09-16BAL_QQB_090120_HZY_091620.docdoc babaf8e764b3bc4f5fef74de7d819fa533ebf675d69174df27c5e0ae20174ecaVirustotal results 38.98%Heodo
2020-09-16NBF_090120_OEJ_091620.docdoc 373849d14e1a5afad2cd1632a3b1a8324d242fcb48c47c2732d9b5c67e538af1Virustotal results 37.29%Heodo
2020-09-16BAL_J16A9KLT.docdoc c676f40df939ef32b19cfcd36138370ce7ed85e33cfa4e744be20734235ef2can/aHeodo
2020-09-16INV_PO_09162020EX.docdoc 361d848b59beb5b40b7839f66735d926f31725d38136435f01499fb0e4a66463Virustotal results 32.20%Heodo
2020-09-16REP_47621908.docdoc 895d3180e6cd0f21d0b56b5061eb6a16f029d010fc833dd6fc2b85ebbbd6b76bVirustotal results 32.20%Heodo
2020-09-16DOC_PAX_090120_WRD_091620.docdoc 39031955d734e86e67664eee812819b699a9bc4f869cfb4d28db7f4c99cbdceeVirustotal results 30.51%Heodo
2020-09-16BAL_NDIFPXUGNL36YJ.docdoc 11fc9d76f9ab6d54ffc389ea4c4b2445ab3d2c00935ea19c38de48d2e29010c6Virustotal results 27.59%Heodo
2020-09-16REP_PO_09162020EX.docdoc 8df40fea0429dee60fdf8fa354db52ddf3cbe643cd5945d226b5eedca75bd659Virustotal results 25.86%Heodo
2020-09-16BAL_PCT_090120_FVB_091620.docdoc ff0be8f9b0efc6b14928e8ea89ffb82ebe82f74db08241df5ec7713c073dfe91Virustotal results 27.59%Heodo
2020-09-16R_92711233.docdoc 4cc531c7241824525205b57dd2b2ab65b3d2d37861becf043ff065f0a091dbdcn/aHeodo
2020-09-16REP_0250695382578.docdoc 0e0913f7c913e70406fdc7b5e47f2455d7152c4e461770cc1b9bee581491fab9n/aHeodo
2020-09-16RA0845462208IE.docdoc ba11cc626e1527c8dec4bf3fe20af2a338030cdb646252a4e170d19512d19d89Virustotal results 27.59%Heodo
2020-09-16DOC_RT2586286861HO.docdoc f03cb295ce892d3a5376e3dca50e8d59e04c023ca4bbecf921022b94432763f6Virustotal results 25.86%Heodo
2020-09-16REP_RQS_090120_BOW_091620.docdoc 1baca6df5405b1382432d42c2e064da832f47d748a7e69ce461a438d1e9eeb76Virustotal results 24.14%Heodo
2020-09-16REP_089EUQF3KXGG7G.docdoc f0749e49548ed365eabff1c6369218f385c6265fb99cd738210128d73b3232d6Virustotal results 23.33%Heodo
2020-09-161OAWMK34D9B.docdoc bdf14c66a5a4843014c1fef6f147f6a7454f8f34223c51a2cd78f684c80e010aVirustotal results 20.00%Heodo
2020-09-16REP_PO_09162020EX.docdoc 8cb0c890547d5517a0d6a06caec30b9b2480920b6c23bc5129f3a2e991bf647bVirustotal results 20.34%Heodo
2020-09-16REP_UB1235701727NR.docdoc b7d7c443145be4e2543b2786517f68cfef114f06e7c276368a6046c98963b766Virustotal results 22.03%Heodo
2020-09-16II6447802472TV.docdoc 654a30f8d9039f328a9143a75b54433c3a6c7acc12019d3bd26364e54e091e65Virustotal results 20.34%Heodo
2020-09-1606048671.docdoc 85e8c954fc64556cac2d3c01b725c69f7b2640b92ee156c1875c02f923db643aVirustotal results 20.34%Heodo
2020-09-16NS6394280951AW.docdoc 733150afe58d633a7748c6b98f7f64f72685083f5b0535ee970260073452bc1dn/aHeodo
2020-09-16REP_YYY_090120_OFM_091620.docdoc b0a0b8c0689039bcb63108626720aa99a3bf7a6b09f92dba5ac5243bdc3e61deVirustotal results 20.34%Heodo
2020-09-16FILE_JA3631644760YG.docdoc 3e62fb780c0ad60d1b4e8a1cf6e61782262a3376a1b6552c72c17df57d5375eeVirustotal results 20.34%Heodo
2020-09-16RV0YTECIQXOD9W.docdoc a7f50bf321bf73c7af879ec128a67f16868adbb11239f8c21520fb3ba193eff8Virustotal results 20.69%Heodo
2020-09-16JLLP_7166349538494657147132546.docdoc dcfdf9a342db69a880c3acc43b01f2e3f04938ed129c9b3597ee7aad3377f25dVirustotal results 20.34%Heodo
2020-09-16I_03147328038265063248490.docdoc a6706614d0da8c58be5ac61af02a29dd4542a4fd130464ee3bec6b26be18416fVirustotal results 20.34%Heodo
2020-09-16INV_53259847.docdoc 1bb4012e89aef09b80eda22d99a564f0d3e923f96cbf25dc4a78ff6de6dbb31fVirustotal results 33.90%Heodo
2020-09-16P4FFZQN71WS4.docdoc aa77119b93a22eb88f6ca54e820ebcb3c8df83ce1fc35435eb00f52ff88c26b4Virustotal results 33.33%Heodo
2020-09-16PVN_090120_DXH_091620.docdoc fa8627da107f5b8e635cab97b056ed7a22bbe8dec6b3f2343fe001138ea2680bn/aHeodo
2020-09-16AZWOM4B8BXAFNX3A.docdoc 357de09bd2572ca949d4409cad4cd61b57666b750ce0caaf51241eb4725a473bVirustotal results 32.76%Heodo
2020-09-16FILE_5031943574472647631.docdoc 63179447814d11c06c79d802adbf84daa1d758ac37a1591e280194ac6db52e16Virustotal results 34.48%Heodo
2020-09-16NKB_090120_SOZ_091620.docdoc 62fd09a1ff4be50f0ef342f12c9551165d6f9743f510cadc096752e52e0b296eVirustotal results 33.90%Heodo
2020-09-1613083365.docdoc 5a7087081eb26bcb32ed31747d75c75ffb62a1ed796fb4f08ebb3a2f9e32e09aVirustotal results 32.20%Heodo
2020-09-16LAH_090120_YLN_091620.docdoc b2a10928dc3d7419e3b9ec74228185d8a4d57a7dbec48722c9fef2178b7baa68Virustotal results 32.20%Heodo
2020-09-16ZS8728996205UO.docdoc b408d1437535aab5eb52b147d59272e8056375f2e90e2ccef71c062980e36b2fVirustotal results 30.51%Heodo
2020-09-16GBA_GOP_090120_KNT_091620.docdoc 5e96a02fb1ec1284bbdd4f122425a6f635312ee541211269b39acd5addd3dd5aVirustotal results 30.51%Heodo
2020-09-1685732315214961433324337.docdoc 350cf5c830bdf242f41ea336e2803b83af81ba91751cb13c418e5cff3674d95fVirustotal results 30.51%Heodo
2020-09-16INV_79009966.docdoc c5be1178786e06c4c3265db8da35fbe4f74a96000fe5eb06874abeb6b85fbd74Virustotal results 28.81%Heodo
2020-09-16X_JJ7583293371PD.docdoc eb6bbcf1755a8438e950e632c5e1330ff4c78dc8849914d2126abeb732ec4360Virustotal results 27.59%Heodo
2020-09-1610220285.docdoc 6f04f539195c899715c54e7cc3db85949143180e021314c0e670e09722d2afacVirustotal results 27.12%Heodo
2020-09-16UXULN504D5WJ8W.docdoc 233f0708bd18c6dcfda50809ba5b1d71184f0743d6a9903de9d06dbb5fdcfdd3Virustotal results 25.86%Heodo
2020-09-16INV_11987326.docdoc c22a92c3f9f72a3ac154573621c47a61ea04bc8df6fbd72a14f55b0ac858f385Virustotal results 37.84%Heodo
2020-09-16FILE_QNS9PAZY.docdoc c8c52e1ff627d998a9a7ab47afecc546bab7e768dddab4862fb9f2d0b25fc070Virustotal results 25.00%Heodo
2020-09-16DOC_999910599239044954710.docdoc 4d6b056c7bab909b0af3f0a3a24f5b7fbc4453e31746d29c0c3d60122def5705Virustotal results 25.42%Heodo
2020-09-16DOC_PO_09162020EX.docdoc 8c88e1e8081c3c1795039fb19de72e17b4e0a72076d49470327bd62bf090909dVirustotal results 25.42%Heodo
2020-09-16INV_PO_09162020EX.docdoc 231d8f32ef0ff8e1a2b69db9bf1bf6c665c0cdff42bb4e3407cf7fe579304994Virustotal results 25.86%Heodo
2020-09-16BGX_39063070641636712109609.docdoc f8b89f97feff5649f70d133e5a998bb941c042aa450267dafba9ed28a95b7f59Virustotal results 25.42%Heodo
2020-09-16DT3483436306ZX.docdoc d4b79b30c6abd6633d513bd08d8b3b9b3de6f0705245b72b3e2ee09e0d03746fVirustotal results 25.86%Heodo
2020-09-16BAL_97078732.docdoc 1e8efc4f5bc3f4c1233e6072bba8d608c2c37a722e84f3a69a5776225d962922Virustotal results 25.42%Heodo
2020-09-15INV_ZXBJ1AT7DN8R8JC.docdoc d2939ee7042da0a88a76cc4e60e5a8cfbc83e5b4fad03c547ffb13bb006a2c5fVirustotal results 24.14%Heodo
2020-09-15FILE_96863251.docdoc f875df5ff3a0ae34e7f9c96c6d419326c5411a29964693ced9a875ab952484d2Virustotal results 31.03%Heodo
2020-09-15HP9765542831QQ.docdoc 1b3feab547c227fce46787527a728a57b05f236dc7f3be77bade5b9e661017b4n/aHeodo
2020-09-15INV_825308833522823253566104.docdoc 67cb2e599dc74d3e6f8048e4f19b08bb8852579326ae869f8c39fa818ef144bcn/aHeodo