URLhaus Database

You are currently viewing the URLhaus database entry for http://armiounaslehto.fi/webstruct/balance/79n0m6/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:595823
URL: http://armiounaslehto.fi/webstruct/balance/79n0m6/
URL Status:Offline
Host: armiounaslehto.fi
Date added:2020-09-22 11:09:17 UTC
Last online:2021-08-06 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-22 11:10:19 UTC to abuse{at}ficolo[dot]com)
Takedown time:10 months, 17 days, 22 hours, 40 minutes Bad (down since 2021-08-06 09:51:17 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-2314797242.docdoc a877dd61b25805e938555868388a8543768fb01e9c45ae6072c261f61264d466Virustotal results 34.43%Heodo
2020-09-23INV_DIQ_090120_HMN_092320.docdoc 21c40bfbb721e32e33612b797ea16cf7927dd9df4d355a8ad1509ef924b30428Virustotal results 35.48%Heodo
2020-09-23WL_MGW_090120_VVF_092320.docdoc 50c9d530111fe31904255db5abdbabd939542a19af71c656dcdfd44c9fe2b4b0Virustotal results 36.07%Heodo
2020-09-23Y_ESM9L8FCB7V31MI.docdoc 80345dcdae23c5209ca98dc5266bfd4e989d51223a302e41c5193bde6c6544f9Virustotal results 36.07%Heodo
2020-09-23DOC_QSTOCT0NPB4V6.docdoc 27a9009cd17248d4d19b35988974f0e755e69a439f1025ece6b2ffb357087846n/aHeodo
2020-09-23B_54716380.docdoc 710beefc4939b7fe4e0362f66fd592fc87a04fff8aacf8424eb0bd4858115fb6Virustotal results 34.43%Heodo
2020-09-23TELT_1KDTD4I7DRU6TDF.docdoc f732dff0368dd8ff983021f4786d2c04ecb2f9196327138f25d6ca5272c9b556n/aHeodo
2020-09-23REP_ESG_090120_PES_092320.docdoc 23228721f30ca78a87d92bafd441f784d43b35778a46e3fb21fcca990fdc778dVirustotal results 35.48%Heodo
2020-09-23PO_09232020EX.docdoc 69c8a52193abe2bc88f50c8148f109627cb56b3dae0b2a0ab1ed528d5b4cd559n/aHeodo
2020-09-2348846080.docdoc 33029135b1c5093cf9c743ba3bd14e04bc7e7a2ec9c971b92555dc08bef6d405Virustotal results 35.48%Heodo
2020-09-2307550143.docdoc 6d73594fd12ced84821a81b0917e31c3e1f2881c0cb5168fbab81aab82e12eebVirustotal results 38.71%Heodo
2020-09-23PO_09232020EX.docdoc f06641ee9e6b743cb2edbd1898982be6d7ea50c042b93330a7bb869df86fb945Virustotal results 38.71%Heodo
2020-09-23DOC_9711124709332413800939.docdoc 33a6f42c04954c40c73042c64938ba9035f2881570d0797c83ce59c19b50d767n/aHeodo
2020-09-23X_063401594258972016178.docdoc c4ed4d279282ab289d7a00ba9d05f1f31af4a3dafbe02ae91aba6585d55506ceVirustotal results 31.15%Heodo
2020-09-2319091759.docdoc e757a53e573f1584dd56ed851acc303473be8922e8f879bd1dd8f9b8dbec4eadVirustotal results 31.15%Heodo
2020-09-2394092886.docdoc 10fe3df8f6540696c8eaf649bc752e30d5533b0203869ec0839cf045227620baVirustotal results 32.79%Heodo
2020-09-23FILE_27659882.docdoc 07e10c57641a11b12fa27dd4b62a01b1f1db583eb0f33e25154c1e495d45066eVirustotal results 27.42%Heodo
2020-09-23BAL_YF9198354269AM.docdoc 8f8f1029e9909427e27aa6d225db5eb6d8767560af23836c44a0abff203eae4bVirustotal results 27.42%Heodo
2020-09-23BAL_PO_09232020EX.docdoc e446be795bac5464b1bb80859e2ffd0857fe8d26f1f6973457b491498010f0c1Virustotal results 26.67%Heodo
2020-09-23OI0010735303QI.docdoc 770a13e4b2ad169f027bbdb1dbd5317f83cdd7a7b28e6ac67e30614cdd534a29Virustotal results 27.87%Heodo
2020-09-23REP_AL2829591034AS.docdoc 526a3a875236eb66c2fa9894594c30025d794c8ecbe0dde1fd873dedfab79497Virustotal results 26.23%Heodo
2020-09-22INV_ZJBNN4ZSMX4GFRV.docdoc 0bf81a6e813d1474fb8f3bc1b2071f479aa978b3e536a2c960d60226fd1ebaaeVirustotal results 30.65%Heodo
2020-09-22BAL_8Q7GNYWXMWJNX.docdoc af31068680a432b4d1d2164488f6353795fbb745479373bbafc6a60e9cf25169Virustotal results 30.65%Heodo
2020-09-22FILE_RR3466336902AU.docdoc eec6b346639f5aa9208c2fbc57161a281b1f72b3902a41ffdfe3a3a5b1ae3a3aVirustotal results 30.65%Heodo
2020-09-22REP_ZS1428306047BU.docdoc b84c54a1704a22ceac88f79804b5a23b2a64547cadf21d76291d01f84b0e77d6n/aHeodo
2020-09-22O_05385022307506458.docdoc 53dde3ba3a9c47b693f01a8904d5d1c223cb25c08f0488ff97b08e05dbbc7be6n/aHeodo
2020-09-22GY4068027199QI.docdoc ed8554b439c265332707e99e7be35db1e9e217801ed277161fcf7c6bcf98bea1n/aHeodo
2020-09-22INV_94277493.docdoc 96d1563a935b2b69580ef4ad19410bdb741917fc4d0aa8855e4eba258db0645fn/aHeodo
2020-09-227038402072.docdoc 052552b8940e682ef01c6161f4b074cbcb5dcf412f62b64eafda4e3b304368ccVirustotal results 27.87%Heodo
2020-09-22F_45938368732704485.docdoc 98f1a8a99449cb92a1d946e110ba5decc069079ddd01fe5ded4bc075313f3bd6Virustotal results 27.87%Heodo
2020-09-22FILE_863793536929958590493329.docdoc f94576c2ff082f8f5ac03f20eeb1be3c83b209f14f3c70834719faa2398405can/aHeodo
2020-09-22N_633240625652.docdoc 04648ce7223361494ad5620c674be88a869710007f672d05721b77af59be70fdVirustotal results 27.87% Heodo
2020-09-22KP_UG7562255318FX.docdoc 698748ed65c5d697095b866208160f8b4142e8d3e66a8cf826de1601fb3b080bVirustotal results 27.12%Heodo
2020-09-22BAL_22575070.docdoc cc43bfd0ea39a3afc6283e4734d480bf62fbbb227016a5cb42d288a8f5f3c956Virustotal results 27.87%Heodo
2020-09-22FILE_B0P3T7O9AYDBE4IO.docdoc 9a6b203c12f1d1c246e01f1027af5b250945a7be48670d3a36e23638e53b44a7Virustotal results 32.26%Heodo
2020-09-22DOC_04587514.docdoc d75a00b374e19973a894a4dba2d79f146e8f3745a82478ec933f2fd58471786fVirustotal results 46.77%Heodo
2020-09-22Z8SCCEQ8UWC.docdoc 98ed7b170bb0ed8347e7011169d58c72eb48bb85e312974151833265446a9acdn/aHeodo
2020-09-22DOC_22961197.docdoc 5edac9eba4b9acb19c34761cd2f8631ea31814b300b760c31c1d42569fb7c50aVirustotal results 33.33%Heodo
2020-09-22REP_71155282.docdoc 280a1aaaebe209d8b8f7a652fd2f9f9efbbb3a6731328ee3d5da4caff1bfb02aVirustotal results 23.33%Heodo
2020-09-227654730308.docdoc 50938c1e8bcfd60435f294949bf3b07533f8b5ccf1cf92d08a77f4a222037092Virustotal results 46.77%Heodo
2020-09-22REP_WB2724596150KQ.docdoc 4f13f8e154b6537497a46e1bd9506a4e62bdcedfd0160ff65601669b2a12e280Virustotal results 23.73%Heodo
2020-09-22DOC_OU0329418835BH.docdoc fd679813e3de5262b5b1bb4e046e63a87edeb9c7251d50613f7093bfc93d4989Virustotal results 24.19%Heodo
2020-09-22DOC_RJB_090120_QCO_092220.docdoc 8937064c7ab860bfd3cba7621752a85796caa4092d34225474a42f0f6a5ce234Virustotal results 46.77%Heodo
2020-09-22FILE_PO_09222020EX.docdoc deb600ac1ac3e5230085da737631928e9460610812ddec5ab166f830acd7a411n/aHeodo
2020-09-22BAL_TMH_090120_ZWW_092220.docdoc 5c67a313b984dab65ca85a5fbc4fafa12240ffeb66fd25b980a691a56d98b1f2Virustotal results 24.59%Heodo
2020-09-22BAL_QDE_090120_YGV_092220.docdoc cb99d2925119c09ce6939a5b221b18e51dd3ecc15cb9cae4d15a17b0af74cc3eVirustotal results 25.42%Heodo
2020-09-22SD5369588891PR.docdoc da0548eeda47746d14e3934cf38702cbfd1f17bed1e98db6170fc2194747ecd4Virustotal results 24.59%Heodo
2020-09-22BAL_QJB_090120_SUN_092220.docdoc 0490f225c70972f96003689bd80f008021b6a7fe6e0973bed7e7caa00b972edbVirustotal results 24.14%Heodo
2020-09-22FMO_PO_09222020EX.docdoc 013f49af6f7f5e1e34116aa22e1bc2ba4babbb2c0b0f97bf4da287ce88b16a16Virustotal results 51.67%Heodo
2020-09-22WR_ORC_090120_VIO_092220.docdoc 522a6a9648d423274df8aedbe2908eeb47d0b79b0d0a64387dc0ad6745235bd1n/aHeodo