URLhaus Database

You are currently viewing the URLhaus database entry for http://zagnet.pl/nexity/Overview/loew56q32o/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:426062
URL: http://zagnet.pl/nexity/Overview/loew56q32o/
URL Status:Offline
Host: zagnet.pl
Date added:2020-08-06 06:10:06 UTC
Last online:2020-08-18 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-06 06:10:10 UTC to abuse{at}nazwa[dot]pl)
Takedown time:12 days, 8 hours, 48 minutes Bad (down since 2020-08-18 14:58:53 UTC)
Tags:doc emotet link epoch2 heodo link Quakbot link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-08REP_4958369182322929090193571.docdoc 5c7aae6105a9fc732d1df596c303f4a3bfcc574fcbb55615bffe074f5ec34179Virustotal results 38.71% QuakBot
2020-08-08PMQ229PR.docdoc 99c91d2f1ecbee44baa8f5c9f3bfc0e2d7d11b63cac8d777f6dc1dd3b1c2aaa8Virustotal results 37.70% QuakBot
2020-08-07INV_55412722.docdoc 41ef6b4c13a98f92f61c7a14e9619f68f166ea699a7ea6eee9a1bf0165512f81Virustotal results 36.67% Heodo
2020-08-07BAL_70308821.docdoc 71966324e0563adb2395fa41631df268d23b2d20fcd6e4ca70f94e3444f5d980Virustotal results 36.07% QuakBot
2020-08-07FILE_LXK_080120_EGO_080720.docdoc 6db606248d43c819a2ab538c317686648dcd10422fb5a903bd82de9335961828Virustotal results 34.43% Heodo
2020-08-070535246932878795803.docdoc 3f4c381531d4604385f763850e0e32cd72c1b21b78330327c64b2da16e62e9f8n/a Heodo
2020-08-07FB5935756803IW.docdoc ceddfbaca020f738159a9f23ff626356400ce8a3dcccb86e056e207a1580543aVirustotal results 30.65% Heodo
2020-08-07PO_08072020EX.docdoc 60582057db0b8b7677173d87d87d3855d5f189ebf39995e2d7ff0e138007a75fVirustotal results 31.15% QuakBot
2020-08-07BAL_99358991.docdoc 268e2665f9d43c891185ecba8417dc09662221c10d272438aa890998da163022Virustotal results 24.59% Heodo
2020-08-07O_12517019.docdoc 39f54a264c6f06a36935cc3416dff1e8e83f2c0dc205680966c8510c9dac7fcdn/a Heodo
2020-08-07DOC_HQ3695704172KH.docdoc 83acfc01aed8937375c8bc98733684caaa595766301ca229d41af7b2c3966921n/a Heodo
2020-08-07INV_CG4429741639KJ.docdoc 22c64ac7a89ab8a195cf01ac7fe65b95cfb560eb85d98fe16f7b5b0e5db27538Virustotal results 24.59% Heodo
2020-08-07INV_40899871982552756.docdoc ee027ba8eb249165a6b4ced43776c362fe3378870deab870556aa490a411eac0Virustotal results 23.33%Heodo
2020-08-0753762036.docdoc d331a02f4ac530a9f04bef05653972b8e6232c0ca3109ad40c4cab9f31022a5eVirustotal results 24.19%Heodo
2020-08-07AZO_080120_BHX_080720.docdoc 14df5a4c49d31640d9608852d16eb2683e5d89fae28185fb7faf8eaf9c1eed54Virustotal results 29.51% Heodo
2020-08-07DOC_PO_08072020EX.docdoc 4b4574331de7a4583c2a0d5eed8d114453c864e40643f51ed2a5f0547bb936a9Virustotal results 43.33% Heodo
2020-08-06RU2807148286PX.docdoc 69e97ffa2c32c65819d33bb9d39068edc04d1eb9ec9e153427d12655f12f6b65Virustotal results 26.23% Heodo
2020-08-06FILE_KNE5HMNAQ70G.docdoc 2ee0a294d681306e15289470a69d09210966baba4b985463131eaec15ea3cbcaVirustotal results 26.23% Heodo
2020-08-06FILE_XGH_080120_NPL_080720.docdoc 1ef7cadcf3f3ab9942c605b804971dc175c8cd97b08b3d01445ad36f4ec08463n/a Heodo
2020-08-0667403895476173138039.docdoc 029bf73542d9022cd3f392bd4d73755c89742f31fd24a4d3207fa960a4839bd5Virustotal results 26.23% Heodo
2020-08-0639951304.docdoc 93c870008317b819f86d45c0c3e0075eae202d632a8c5a15afafda0e60ba9551n/a Heodo
2020-08-06INV_PO_08062020EX.docdoc 05c72e97f5d458c6490496c4ac646b9555bc470d63b6bbea42875e5adb1a1549Virustotal results 20.97% Heodo
2020-08-06FILE_ECF_080120_JEQ_080620.docdoc dcf13e777cc81ba6dbf2ebaf5747e5de599a4de2aefffe544b7f52c9e0188827Virustotal results 21.31% Heodo
2020-08-06HC7637798189BK.docdoc 7ad8da2e16050ac99876c607d526a1e87a5e6baa070130972c4d03f6297de18cVirustotal results 18.33% Heodo
2020-08-06INV_PO_08062020EX.docdoc b950762e3781fadcb8bb93a6ffeeae1b4bb4186165d0a76132937672853b2e53Virustotal results 18.33%Heodo
2020-08-06PO_08062020EX.docdoc 995be23dc0d3ee7c4f282548b4755e02e5ec5a8a8b303aa746005cc1e787261cn/a Heodo
2020-08-06INV_WA8879214469BU.docdoc 760332e0cc50301ec3479486479a525dab98e541c7400d07d8158dbf76135b4cVirustotal results 19.67% Heodo
2020-08-06FILE_YI2Y9QS2UIX385.docdoc e6a45f7c1be03604263bb5d5368c322f9085a5d98a7a9c23c073e8a7e8a07b30Virustotal results 18.03% Heodo
2020-08-06EMV_SA2331034500PB.docdoc b05b7a5b7251a3088a61d778b36b9806d3c57425a15891696e1f447a258f08ffVirustotal results 27.87% Heodo