URLhaus Database

You are currently viewing the URLhaus database entry for http://armiounaslehto.fi/webstruct/parts_service/YGDTMUOxILOJXwS3n/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:554652
URL: http://armiounaslehto.fi/webstruct/parts_service/YGDTMUOxILOJXwS3n/
URL Status:Offline
Host: armiounaslehto.fi
Date added:2020-09-18 12:32:09 UTC
Last online:2021-08-06 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-18 12:34:35 UTC to abuse{at}ficolo[dot]com)
Takedown time:10 months, 21 days, 20 hours, 10 minutes Bad (down since 2021-08-06 08:45:09 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-19UNTITLED_2020_09_19_545116.docdoc 1f4636599b3de756ee92e6c14346ceabf27b76d2b45abe64d1d9f48f0e4c3bf9Virustotal results 22.03%Heodo
2020-09-1998551710 20200919 3296325.docdoc 614c62ac24ffd787e87c3f0be186188b9c87530dcc81b1559e388c1e06d1e2c7n/aHeodo
2020-09-19DAT 20200919 XCL88238.docdoc e4873536ba7b163dc9a87dd2dc7d447b502e63eaaebf88fcf4635d423772db47Virustotal results 22.03%Heodo
2020-09-19Inf-20200919-90176.docdoc 7da90a568b11f5619217fc3f607646d3fba7a56ef64303b2ab72b8751d9308fcVirustotal results 22.41%Heodo
2020-09-19DAT-330564.docdoc 59ee3757e66be242efc0972dd6c65966fd25efedac6d7183bf2ebb22f73ed835Virustotal results 22.03%Heodo
2020-09-19DAT 20200919 734.docdoc 23c8490e131915effd12a2adf737b6fb74515b1b54759d0bb237eb7392338c08Virustotal results 22.03%Heodo
2020-09-18Arc-20200919-680.docdoc 3eb7679ffcb5eb0cd537545d2e28ad49fdb4bc89366476f731659703b6707ff5Virustotal results 22.41%Heodo
2020-09-18INF_2020_09_19.docdoc 9cfbd2b1385991e74144b32795611bff463960304a0bac67116378ec94caf271Virustotal results 22.03%Heodo
2020-09-18File 20200919 6702735.docdoc c23cc89488404b578a22052d1d946ea0e421961bb77a5c4b002d890506c2aba6Virustotal results 22.41%Heodo
2020-09-18arc 2020_09_19 DF42486.docdoc 33ce6293593a02d1b88213d5e0bd0fcc3667491733ce5009426e8fd5c2e6dc50Virustotal results 22.81%Heodo
2020-09-18List-20200919-7275531.docdoc 9ad2fe8f74ea62256c9ad4c199d69c91b8c76f9a605cb5c038fcbec9d0e85054n/aHeodo
2020-09-18File-702.docdoc 8750d49fc1ba34c16ce392d088b1843101a6669f5407b567c2dff708351b81ccVirustotal results 22.41%Heodo
2020-09-18list_2020_09_19_3953.docdoc 5dcb34b82840165da4c8d3f693522093656d8731ab6ffade09c8f5d2b8376408Virustotal results 23.73%Heodo
2020-09-18INF-20200919-0408.docdoc fd925205136ce3b71945709fdfbbdda52ea8fd455f8e4e410f942ee48f893b76Virustotal results 28.07%Heodo
2020-09-18Inf-2020_09_19.docdoc bccc6031b088f432a5b9d9303eceeb6d9ba9da4ec4f85997f393f67e2d552819n/aHeodo
2020-09-18doc-20200918-14634.docdoc ca8696eb2a7a3679a7ae16ce3c6032ee9f69cba3cfa7aa47d9dabeaaccdb137dVirustotal results 28.07%Heodo
2020-09-18253-539.docdoc 47eda5a9b722f901be7f188137feed9a83fe055f7ed73139af4b680f257a2e1en/aHeodo
2020-09-18REP_2020_09_18_8952.docdoc 923692821eb7f6837085e7bef93e95d87c7d841697e21fa1730ee5d217312f14Virustotal results 28.07%Heodo
2020-09-18mes_20200918_A863702.docdoc f8a679c8dd6ae3c69e27a43a59ad55018d6e6ea9d4a7107431420e91747e0be0Virustotal results 31.03%Heodo
2020-09-18UNTITLED_NQN23713.docdoc 0993a8e2a1ede660ab29dac20d8b95443ba1577a1247c423d7c7fce39820fb51Virustotal results 31.03%Heodo
2020-09-1852211387-2020_09_18-DL68224.docdoc 25c51061c2d3618e6fe43b51487ff7abad46d648b8d3b9661d757ab481a3a4f4Virustotal results 25.86%Heodo
2020-09-18INF_ZAY063605.docdoc 902d3ce3d266b665931673e3a33ca290f991ebc092aff43dfaff09a74701b5c0Virustotal results 27.12%Heodo
2020-09-186779KGO 2020_09_18 48428.docdoc 29ac650dff5b8f0112208661787f71aee27ef4057505b5cbf826c939915a7843Virustotal results 25.42%Heodo
2020-09-187352JS_20200918_GXG835.docdoc 59be634c99d32cc1d2bdfc3663c81ef4a20e38bfb841fb02cf3152233aa9f7b2n/aHeodo
2020-09-18arc 20200918 8137806.docdoc 07b5c8867dfd8461d140a439bce35285a61af1eab432f8a79a9880a37bc63d85Virustotal results 25.86%Heodo
2020-09-18Untitled.docdoc 77dfe2eeed80414b4e3a1702fd0d7443e23a4b8ea93460bef56458aac2b2983dVirustotal results 25.86%Heodo
2020-09-18Mes.docdoc c6f91ca4de4035eea0cee737bcea230c3a1fc1b9bc3e0b8e59e1b0cb2c212dc8Virustotal results 26.32%Heodo
2020-09-18UNTITLED-20200918-N155.docdoc a5ce864f2c3bca89c24abc1fa1068e590b7df70133a6f8d4ddbfb26f3f72a85bn/aHeodo
2020-09-1806796_P651.docdoc a3243652b05c45b85ffbebf961ed8563c4fc164a71e7abf56feb805974745343n/aHeodo
2020-09-18file.docdoc 7f9a58c15ccb78968557ce3d1a009c37718ab6739a1b09484c91e624c4dfd939n/aHeodo
2020-09-18Untitled 2020_09_18 63452.docdoc 8324d40ef076e8e466b29e34e3a2698d09d6f2010995094954cd4fe65e6a5e96Virustotal results 22.41%Heodo
2020-09-18Inf 20200918 VSW9471.docdoc f4996a12b80380877e3731ec895564a9b29f8bc236affcca4edfec6ac84b0eddVirustotal results 24.14%Heodo
2020-09-18mes 20200918 Y7276.docdoc 15516d337875587c5b3c679d8c166d4e00d5da295727956ddb935e5972ab2aa1n/aHeodo
2020-09-18Attachments.docdoc 0258529b89cb288a228b0791ffc721de998c886e2622408ef37389d0796cb038n/aHeodo
2020-09-18INF-2020_09_18-5078951.docdoc 34641ff2a1fcb443dd5ea8990accecd6e3888c6054c887697c1bc99581c794ccn/aHeodo
2020-09-18UNTITLED.docdoc 40e780a1ef8d24319cf688a464ac76bac97d18b08f62c0eddf8ead0c8507d9a5n/aHeodo
2020-09-18Mes_DI4508.docdoc 44fc387cc55c1a2b5fc409d86cef0344a9015e93f8bf7ec6f4095485281bbf88Virustotal results 18.97%Heodo
2020-09-18LIST-20200918-XNZ018.docdoc 19147bf00c478f62beea73090f1790a35aac1d8769bd6eea4c9e69488a4f283eVirustotal results 20.34%Heodo
2020-09-18LIST.docdoc 926646a1836f587ca813319f3add693a168a273ba2e60e58283cb000d9ac3b6dn/aHeodo
2020-09-18UNTITLED_2020_09_18_UFO770121.docdoc 8e4b5c75dfd8ad1acefed08603f4a69c435e29f076db8183c17703d238ea71e1Virustotal results 20.69%Heodo