URLhaus Database

You are currently viewing the URLhaus database entry for http://legend.nu/wordpress/parts_service/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:422353
URL: http://legend.nu/wordpress/parts_service/
URL Status:Offline
Host: legend.nu
Date added:2020-07-30 19:53:04 UTC
Last online:2020-07-31 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-07-30 19:54:02 UTC to abuse{at}netnation[dot]com)
Takedown time:22 hours, 46 minutes Good (down since 2020-07-31 18:40:27 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-3146197204.docdoc 70924fc6c621c4d89c01cf966e0759c7efafb358fdfb087b76ac091cc5cef356n/a Heodo
2020-07-31TCP_070120_UYP_073120.docdoc 4f8d2a942c244360b6b8c311d59352dad83f77899cc7d4094efd99c2e324af8fVirustotal results 49.15% Heodo
2020-07-31BAL_3KPSGOVCP.docdoc 5f3764a42ab9cc52fdd195dbb18957316d72bf382a89b998df3186f4635aa55cVirustotal results 46.77% Heodo
2020-07-31BAL_3KPSGOVCP.docdoc 5f3764a42ab9cc52fdd195dbb18957316d72bf382a89b998df3186f4635aa55cVirustotal results 46.77% Heodo
2020-07-31C_WTI_070120_WFQ_073120.docdoc 53b0406efd3043bb9a82034aad1061ca92952b9d1a9111ba31afbc95d47076c6n/a Heodo
2020-07-31FILE_YWI_070120_ZXJ_073120.docdoc a4793238143f28a12c3574808fca946d088dacc4570bbb1fd33df193b2185bb3Virustotal results 47.54%Heodo
2020-07-31DOC_14917697.docdoc 8174f855fde235a5c33778a867d83daef055075f49b6ddcddedeecf8a466172fn/a Heodo
2020-07-3129056489.docdoc 5730c4c8436965355b6f87bb9ddd7c86a1a11e75775c732c12fe03fa142d0757n/a Heodo
2020-07-31DOC_PO_07312020EX.docdoc ab0044f2f254b4928a9ce9ae9a0d1cb2217f5f4b23c1d6378286dcf834db631aVirustotal results 44.26%Heodo
2020-07-31AQWZ_57733651.docdoc 1a4bdb64a47146d10bf8594404bcf28b53acfdb7242c989eb3d1c6673a270f86n/a Heodo
2020-07-31XP8601172158GL.docdoc 87a3224fa89663f53a2114b2db0c6140013d1f5ea825037d85290190c0081e44Virustotal results 45.76% Heodo
2020-07-3127502848661360172.docdoc 912cfde07319c14a61233144c7f079d0aedc495c068e5927e1cde8edec091442n/a Heodo
2020-07-31DOC_JON_070120_XBN_073120.docdoc 3879446e688314a2f6bb2b908df0a76083c6375f64469c3987bed043df329fb0Virustotal results 43.33% Heodo
2020-07-31REP_PO_07312020EX.docdoc 66e9380acc03aa90e855320b6090e72cc9e0fd7c72f1fd005f08a0b3e5aeda0cn/a Heodo
2020-07-3166681700.docdoc 16671e21f71303d0a1d46b0dc51d497225d35009e28cf1daa6cb1ac55d9959a0n/a Heodo
2020-07-31W_OAS_070120_UXR_073120.docdoc f8c08709b04ec9e95d8f36c1b99b4ad75eb823d513d3f7dc020c3fc96ebfd770n/a Heodo
2020-07-31FILE_LV6978692630SX.docdoc be25a159797aeb8dd13c31aa586f331f8c98cd83b54dd4ba5ec2fff63b5ff246Virustotal results 43.33%Heodo
2020-07-3173367631.docdoc 33cc5ac87a9b8a4bceb717df74b6cf6b1162ff33a67dac529744e3f81c55636cn/a Heodo
2020-07-31DDA_96476741.docdoc 98ee1381f134eaedefa2baef746295a547b2a4b7468ffbf5a9834e65a71c7c8eVirustotal results 43.33% Heodo
2020-07-31D_TY8Q56T1U7K5A9.docdoc 3dc5ec3fc47a3d3cc7a39aa7b36f0d5edc36aabb1c459f26ea6cb221cf78d461n/a Heodo
2020-07-31PO_07312020EX.docdoc 18d9ef695345eb4c97d2ac385a33550e01a3760dd3e3edeea1507af436451b0fVirustotal results 43.33%Heodo
2020-07-31INV_JY3AA265Z.docdoc 921fbeab5d9cd5e7b8a6e13ddff72271c9d0ec192dbfed4d4b8ce79db99858c8n/a Heodo
2020-07-31DOC_FDJ_070120_DKJ_073120.docdoc 522b63a0d190f96b3d7e635d7431958b68f94c8f95a44594318d0e382b17bad5Virustotal results 41.67%Heodo
2020-07-31BAL_09738275.docdoc 5e55aa28613770be2ebdf584ad12081c21c3029122a4d016325fe4c933a1fb68n/a Heodo
2020-07-31INV_04990777714295501987170.docdoc 20265e7b88ee06f8d6c99269ac1bc743eb01af3e679b55558ab32d0e0177d22an/a Heodo
2020-07-31D_TE8214395108KF.docdoc 45f338e21c884dd94bbc275513fcf958b2a679e54907690a1920e230f78e0d9cn/a Heodo
2020-07-31BAL_36644713.docdoc 7689cf53f260808946f1b53dd444210423a975b7fc7754c1fe6b04960286f9a3n/aHeodo
2020-07-31BAL_PO_07312020EX.docdoc 6409ce9b870ddc65977b0934cd67f2d6791fb9b551452b83d767d93322cfa001n/a Heodo
2020-07-31DOC_PO_07312020EX.docdoc 0ab86823b70ea0debb9b67bf3947e1f5f751101476cf11859c2630521854ebddVirustotal results 49.18% Heodo
2020-07-31C_16230339.docdoc 69549e15d0480107f2a5ca43102978b553f7770cfa252455a1e34be53f8bb6f9Virustotal results 48.33% Heodo
2020-07-31FILE_56323728.docdoc ba5038cd1699fcd67a0053b79048fff5b473165426cecff97e8b2f0a60057522n/a Heodo
2020-07-31PO_07312020EX.docdoc c433371e8083d2992d2b56e8c6e0ec027e6096daea3729e250cd30c75ec68052n/a Heodo
2020-07-3158461094.docdoc 4c7ecb99c3763636a148a4f3acc34885807261432a6d9a30a46f362d75b01578n/a Heodo
2020-07-31INV_HC2653507464QD.docdoc ef621fdd3d3121ae84099bdfc6c83795cf25b42d57b6b02b0c64c99609fe621fn/a Heodo
2020-07-31FILE_1AY5RJS0RXKHFXE.docdoc c3ee2087183e8fc4fa6ad487d597d161b3bf5d8c3fa9b042f081d0c218d87931n/a Heodo
2020-07-31REP_UU6402100856XH.docdoc 2aa439841e9bb37a7aa0d8a030e05431405dbddbe11c2b3d148e79097e66dc17Virustotal results 49.15% Heodo
2020-07-31GW_KVR_070120_GMY_073120.docdoc 582a1cef0fa903d6e306172892c6ec7fc72bed9ac3fa49364da864273c260db1n/a Heodo
2020-07-30BAL_PO_07312020EX.docdoc 29bb463a499d45a2b27d4f278b883361ed66aacd2f6184c93f79f9ba5df2fc53Virustotal results 50.00%Heodo
2020-07-3007930714547635943900.docdoc 785da8b434141923c6196ff5c06b283e08a9ad63ed5454278a6826312061bb0fn/a Heodo
2020-07-30INV_65599379477363480.docdoc 7c27fc12153685ebfa853201b4b71b6183b994f0bee705daf6d52db0f1062747Virustotal results 50.00% Heodo
2020-07-304FYBV8BE.docdoc 2479f0c202e0b1e1af6e349625250c5e8433d8c2971ba1cb5325402e1ca70e54n/a Heodo
2020-07-30FILE_HL6917972580RS.docdoc fa9ebbddf93bf0bde73a7e62692c9a2ba07478ad334b60810862fe795384032en/aHeodo
2020-07-30P62TZKSDC.docdoc 2f335817434e148eb3306ec99d29a3947f89ff9e3aee56f76f227d5894334abdn/a Heodo
2020-07-30FILE_GS2137445235YX.docdoc b920bae96043cfc55017d7a67bb6c5caac098cfce2620c6348e63cf4f7842378Virustotal results 50.00%Heodo
2020-07-30OC3530864611UM.docdoc 294520a166faa7311a9bb92201a90c886a78c0a499072f3771dfef49baeee7e7Virustotal results 48.33%Heodo