URLhaus Database

You are currently viewing the URLhaus database entry for https://legalcrucible.com/jyiwk/swift/6356839s96bius7ys5e60/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:428144
URL: https://legalcrucible.com/jyiwk/swift/6356839s96bius7ys5e60/
URL Status:Offline
Host: legalcrucible.com
Date added:2020-08-10 08:39:06 UTC
Last online:2020-08-14 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2020-08-10 08:40:03 UTC to abuse{at}atlantic[dot]net)
Takedown time:4 days, 5 hours, 58 minutes Bad (down since 2020-08-14 14:38:20 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-12BAL_GOPTJ9OT3K1A2JB.docdoc 7c085fd4e418d0e497e8f7f79ae9060c3462551e2b7d9ad59c240b4c0c7b91e7Virustotal results 28.81%Heodo
2020-08-12REP_QUV_080120_UWE_081220.docdoc 7d5046f3a9a3765884a6c25a9180fc3521778f6307e706c551bf48fec651192dVirustotal results 28.81%Heodo
2020-08-12L_88335875.docdoc 0160fb33a3b7b03284dceff60e218282693ead61eeef4d2f8bd7387b09cf51c6Virustotal results 28.57%Heodo
2020-08-12HEP_080120_WQZ_081220.docdoc 1e1197d27bc4e2c81bf36570d41052b3f74d24df43ce0250b2d53d7b2269c20bVirustotal results 29.31%Heodo
2020-08-12UP_44RB1Z60EG409V.docdoc fe14ae5d76ac1ccafc67f474efe315000dadae344444a44c9200e04e94ebbdadVirustotal results 28.81%Heodo
2020-08-12INV_4404682932858868339.docdoc 0fcac239d6f848bddc4b281c062db31d00ea4922e48056d0d7da6ab2a86195a1Virustotal results 52.54%Heodo
2020-08-12BAL_IND_080120_YYE_081220.docdoc af51abb1270f34af770a98599b8023a55d05885a976e2c898299e78ffe91c943Virustotal results 51.67%Heodo
2020-08-12REP_DVG_080120_JYB_081220.docdoc 45597077ea44b6912767ecc3863c6a7eb9a1acb80e69d92deb7f49b5cf9f476bVirustotal results 50.85%Heodo
2020-08-12BAL_PO_08122020EX.docdoc 6f973501cc2dece992aa2f959f8e352e424e96f06abb300b4bed8bcf2ab4bf34Virustotal results 51.67%Heodo
2020-08-12L_450812704561643868772293.docdoc 1d2096f4adcba717670858b98912615f7bc86bd95ef6b3117901aa4ae6383d4dVirustotal results 53.33%Heodo
2020-08-12O_45109121.docdoc 231cd7bb21fb12e5c0655ee7cd5cab21aff855093e07c19f20bf8fa68c0a831fVirustotal results 54.24%Heodo
2020-08-12460199572761392.docdoc 455f02233220edb99d4f99f02ec20a5ad8b3a157bacaeae2dcac14f707613869Virustotal results 53.33%Heodo
2020-08-12FILE_935717272903604.docdoc 29a8f854081e5f20b6709851863472cd33a1863fbed4867153edf6fcc5e86dc8Virustotal results 51.67%Heodo
2020-08-12BAL_PO_08122020EX.docdoc 7575d9ebd2153fdfbf4c1626ec4769e8cdef40ea8e2990670f1cc5cba71a2e7eVirustotal results 51.67%Heodo
2020-08-12QPLX_EAT_080120_VZM_081220.docdoc b9fef69675e83a2ed499bd55681eaf567c07aea61551e8fc46b7fab0539f5afdVirustotal results 53.45%Heodo
2020-08-12DOC_YUO_080120_VFK_081220.docdoc 358176ae69d49cbdc29ce5f8965efe9952253949970d9de4e8f09f46c488e6ecVirustotal results 50.85%Heodo
2020-08-12I_QKT_080120_IBI_081220.docdoc 5d38e73c8e461773d7bd09fd69760d3e0335e51cd3df39676a4c2af22343c43cVirustotal results 51.67%Heodo
2020-08-12FJV_080120_UPR_081220.docdoc e4d1deaefa7f905c5ce7490867ae09ff2d50fdf4162f102e276653c1c46eeab6Virustotal results 50.85%Heodo
2020-08-11DOC_PO_08122020EX.docdoc 5a95e436c4df9dfb41496c96489d1bddf6db2c7d54ccf0761eb61ef1af9c83a0n/aHeodo
2020-08-11B_U506UUAU75S04BKK.docdoc 896db11ae3dd47bbbdaef6de2e44964142461c89f1fd377015b96affcc75cf60Virustotal results 50.85%Heodo
2020-08-11Z_FH8320865340GX.docdoc 854be831ad01f15c5a5cc2f0f253d059b2a9faaac66db5b90fe51b3daa401c57Virustotal results 50.00%Heodo
2020-08-11PO_08122020EX.docdoc 9d0bac325fa1b829f25ab0696d273be2b1eb46da5d94f3837ed30ca9c495b4c7Virustotal results 51.72%Heodo
2020-08-11PO_08122020EX.docdoc 1d09b28a4d454266d52d7d2e5b9aeab2bbf43839ec33c9a7221eafae3c28c067Virustotal results 51.67%Heodo
2020-08-11DOC_35992672.docdoc 6c5380e193b725ec3ea512a3146d8c0925c7c489800dad57d1b4b2f940751d22Virustotal results 52.54%Heodo
2020-08-11R_CXL_080120_KQU_081220.docdoc ca30b2272a56997f03e6470ff7ef67a05a07abaaa5a436b29c936f7fc34e2dfaVirustotal results 50.82%Heodo
2020-08-11QT2RXBI0KSUS8XDB.docdoc 94c28a7e7c13fa9e3b40e7c211578b41258479f78ce82fa4f03c44a3761481d4Virustotal results 48.28%Heodo
2020-08-11GKQ_5982586202750737531272.docdoc 4e1398a541baa1807c7737004b16fa72d75d9e64ad0b772b4d78be698725b753Virustotal results 50.00%Heodo
2020-08-11H_28337441.docdoc 0dc77319f898db1037b996e421c171d0ddbd13166a8b589ab1da97b8bcfc99cdVirustotal results 48.33%Heodo
2020-08-11ZDAA_PO_08112020EX.docdoc 3f9ed468a85787c4bf29a327c525e87f3ac3fed5b4079b2958f3617ef3d3a1dfVirustotal results 39.34%Heodo
2020-08-11S_0VJS3BSBUUR035ZK.docdoc a03e77d6b4faef46a289dc88b0b06b626ad4c4050559791a8b7ed7d3846fac75Virustotal results 40.00%Heodo
2020-08-1152640979.docdoc 16004f742c9d51196b4a45e665c360f8eecec87448f703ca65f1ca9fd2748debn/aHeodo
2020-08-11DOC_1734694848352108450500.docdoc 8979a7dda1fa732d2164c2ef2e8bb59471cbed0bf320309720b8c18ce4a5f673n/aHeodo
2020-08-11Q_NXB5N8NHU5P437A.docdoc f288fc67d607003c58bc277bf9c779e8d206ae43259b9cea64be737d4df22a7dn/aHeodo
2020-08-11KI5014798834TP.docdoc 34d67996b2581cdd647857f3e3e696b014b5439d13108d5cbc713db42e9089cfVirustotal results 37.29%Heodo
2020-08-11X_OJO_080120_BFU_081120.docdoc e1973b8ec4b91daa517547b42f329304ae3fd6b95c20184e1a945e7926f4383cVirustotal results 35.59%Heodo
2020-08-11REP_AHY_080120_YOO_081120.docdoc 844382ffcc75d033e65887de0e4681c633bbd60fa39e82f1d3d836e58a3a239aVirustotal results 31.67%Heodo
2020-08-11A_WZAIS0H1GX4UI51U.docdoc 5ca1aedbc7b3e63e13e3b3263321e12f1d49d668c331db20a1f996b3fd362894Virustotal results 32.20%Heodo
2020-08-11XSG_Y0BMICHWRKZ93TD4.docdoc 3cbbd9298f3b6d77456b687dba10ecf5f45614573ed3be647167c5e96ef16552Virustotal results 30.00%Heodo
2020-08-11FILE_KPX_080120_IEU_081120.docdoc ce20703d88bfe7ebb3959efe8c9aa396e10a20431eed03f6aff303580836af4dVirustotal results 30.00%Heodo
2020-08-11NH_7340692245.docdoc e86b2beb2b36a9530c75a89e078c28b809fca63518cebdcd860f0135e899ae90n/aHeodo
2020-08-11REP_021309584.docdoc 2b773fc9f00dc3faefe05dca9697347ab80fb8224235bd96dec05698ea4139f8n/aHeodo
2020-08-1198940186.docdoc f266dfe6eca386777143d38c655e759b22fba117bcd9138c44354938222c1673Virustotal results 25.00%Heodo
2020-08-11CRLQ5YCKIOPY2E.docdoc 1455b3fed34c9f9524557c1681b4ea63f86ce164113c4c2c15bcf5e70d14b251Virustotal results 24.59%Heodo
2020-08-11B_86479925217437754152293.docdoc 44371483f703d07a492861139471189a8755d6863157b3ace04c1e4ea205987fVirustotal results 24.59%Heodo
2020-08-11BAL_90035714.docdoc 159adf2257291ab010f4ab9a6518eca15f59b22b9dca9f3d52dee5f9fae80c00Virustotal results 24.59%Heodo
2020-08-1180542012.docdoc 2cd6d3c756477ef451f511c6ffae2ae49542fb6a4114f11be3b86cf4bdf57404n/aHeodo
2020-08-1117599045.docdoc 6586b9a385da02c4aebeae103ac96dc6ed5b619393e237517ee299234aeef676Virustotal results 22.95%Heodo
2020-08-11FILE_UK3196372940EP.docdoc 5fd5d52919277328ddc6a266f40c3ad46a8b4196c9fe8f14d7f42252def786a5Virustotal results 22.95%Heodo
2020-08-11DOC_PO_08112020EX.docdoc f525a4c14fe2ed5ebc5a3b09a1a8ce10dac9f2df2449069c3b3f493878b20c03Virustotal results 25.42%Heodo
2020-08-11UYVA_SNZ_080120_FTZ_081120.docdoc f6fa765a0885ee4a0383d1fec754e6051fc90b598eb9c66cc528e9adacce7d5bVirustotal results 23.73%Heodo
2020-08-11REP_3GHN08PH5PJ8MJ.docdoc c767b2934e512dcdfb0c6efd95e7c7ba795fe9a09d27479585cbb066d145ef5bn/aHeodo
2020-08-11EZ2405270837RQ.docdoc ff1106fde0971d8fcc68af9662bbb95aed36e07900ddb0fba6f66cf8bca98fben/aHeodo
2020-08-11DOC_23355048491736588418193.docdoc c79922078efc326b0a7199af4f066d3a8d3f8122bfb9a1d58a2a62bdd508e803Virustotal results 24.14%Heodo
2020-08-11REP_FZK_080120_QCN_081120.docdoc efc80a3910740ed508a126ac5b5399b38c8c22a84e428367917c44dcc5766c73Virustotal results 22.58%Heodo
2020-08-11I_SY3595534639MX.docdoc 68bf86506f97cbba49424cda74e590de3d0ce3b3befcc6f431d545d5e931a608Virustotal results 24.19%Heodo
2020-08-11PO_08112020EX.docdoc a5231ddcc0dd60b8e592e26d19adc81ec13162c2ec100b3df902c514c88bc75cVirustotal results 45.00%Heodo
2020-08-11INV_XY2762055804KM.docdoc 8edf233ddcd24433edb9bf021d9eb73597b9d87e5bb9ee0c3fc936977dfe6f45Virustotal results 45.00%Heodo
2020-08-11XZK_080120_BLQ_081120.docdoc 4d2029f90dd4666820163090c7717ea8b2166605108cf8e5292054e752213b86Virustotal results 45.00% Heodo
2020-08-11NK_8701235150794.docdoc 57d5fc234966fd696f948b9952b125ec464fe2c3b2b0948e151dc74218050cabVirustotal results 40.35% Heodo
2020-08-11DOC_82054397.docdoc 810f85306409a8678b1956aa73bae5e016aa0eaf12cece7d24c3297ba074c56bVirustotal results 44.26% Heodo
2020-08-11K_RF5040154347CW.docdoc b0276a23c508f3b994e893c4a51a5130674d5aebb945c3dbffcbbe22e7d62846Virustotal results 42.62% Heodo
2020-08-11REP_2K1ZBAPEE.docdoc 456af69e338aa9d67ece10771794a069df53f57b268711c18606ef7d54f0feb8Virustotal results 44.83% Heodo
2020-08-11JPU_080120_MWZ_081120.docdoc 106e9a3097680f7a8270ac6a6a5c75fdf983b6e2ce326e7c56403aefa0eff516Virustotal results 43.55% Heodo
2020-08-11FILE_83262149.docdoc 77d07ebb9067728855c77e0d2486102c7710c99f4d2f952cde12dd1aff24ae2dVirustotal results 45.00% Heodo
2020-08-11PO_08112020EX.docdoc 7a21ceea16e5ac47afe5072b7863649cccdc31540f9e90634bef272b619a9d65Virustotal results 44.26% Heodo
2020-08-11HM5322354179CO.docdoc 37f50253f8018bae34e45657de8074c1a59a940ae12792fc8a5cdc8c700bc5eeVirustotal results 44.26% Heodo
2020-08-11QSM_080120_KTX_081120.docdoc 064158a46bd13da41d1381dd3e447f528af4e5fe9b2f287407f9ccdba0700b4eVirustotal results 45.00% Heodo
2020-08-11BAL_WMG_080120_FLF_081120.docdoc d4a66391f1e9376d9307ceb8a27f4346683ccd80ce892593d01eb65514ccc9dbVirustotal results 44.26% Heodo
2020-08-10FILE_NZU_080120_MKQ_081120.docdoc 0aac84e792a3fda908009cbfdfbfa1f1e9e8f024bc759b760ec6a4a62e6958c1Virustotal results 40.00% Heodo
2020-08-10DOC_7148667578921.docdoc a09d06d100d5eba226f9edb3218e903fa13d1068e2dced8b4479d7d961f3c892Virustotal results 40.32% Heodo
2020-08-10SYR_080120_EKH_081120.docdoc 9f69dab80ed88c105f65738e34f9f97c34813c839c1e78395167bdf09090f89eVirustotal results 40.98% Heodo
2020-08-10LD_52667626040175799892410.docdoc aadddb049f89ec5e5d1e40e88efb782963c3f82c032024f3d3e0529e097d3e12n/a Heodo
2020-08-10EX_PO_08112020EX.docdoc 517c239c322e6fd41f4a19a9ccf94409d986910c42f7e9bd8bb3cd33ff83a920Virustotal results 42.37% Heodo
2020-08-10DOC_103226995320873.docdoc 1701cece68d9611b07097a1e331039dc38649b44d3ea02351e0b494b6bca4fe9n/aHeodo
2020-08-10INV_PB6491197947TW.docdoc b5e1229c49f51eba4bb306aece6c81e4190cbecee9196e2f46b4076a3c563cccn/a Heodo
2020-08-10FILE_PO_08112020EX.docdoc d04235ea57172d8e82ab7ceea5c85b7a847adbc9d6e6b2fc5bbaeaeaf96d8661n/a Heodo
2020-08-10ZHA_080120_JTP_081120.docdoc 53185bdfd244573e26be311cc6a1ca4a638ee6956f3521605c10735b0f4200cbn/aHeodo
2020-08-10BAL_14761169.docdoc bb9c6274ff65ac8ee339d712ae7f3d2b010cb74f04603840cc6017db29aaa3caVirustotal results 40.68%Heodo
2020-08-10PO_08112020EX.docdoc 33d40d4480617fb77d5d793051a847a5f4d09e1bd9845507308637ddf454e47aVirustotal results 40.98%Heodo
2020-08-10BAL_93711200.docdoc 05fdfb096bfe54f0bd2abd84e8143b8378f289838c61d7d1ec4efa141b2045f4Virustotal results 40.68%Heodo
2020-08-10FILE_2ZILVNUB0ZX2QLH3.docdoc fa0282385f733053712a3554624957b09fe274dea4427b8e7111e5bef7e1f64en/a Heodo
2020-08-10PO_08102020EX.docdoc ad90d0071b25f19345c41da1ac91d96258866c8048ddbe085d4c33dfe445e5b1Virustotal results 40.00% Heodo
2020-08-10BH4407550852GC.docdoc fe21493280e923306b2814e03a02fe978f4d0179c15049984f9205344b9015d1n/a Heodo
2020-08-10SCTB_5128413388292793369.docdoc 93357c56d286a0a7242cb12171bea974c33f8b608067dd4a737324bd6baf0737n/a Heodo
2020-08-10FILE_16829368.docdoc 868e9c0b8d6d8e39b8bd61634f444b5afeb0d108336d68b28332735796526736Virustotal results 42.37% Heodo
2020-08-10B_KQ0093272807TU.docdoc ca8ac34961520d6352cab5d25104db26250b07c9d405709bfd553a45b00743e4Virustotal results 41.67% Heodo
2020-08-10ZE_JO1141686698SY.docdoc ded2bb2f3302de6713d69aaadfa7950d2c50ec001ec7722de92f596fc1ba3782Virustotal results 40.32% Heodo
2020-08-1026874154670824018040.docdoc ad46a6a36ef9b8772c7c5b500492c34e25252e779d35d4b3aa5d54fcb1170e3cVirustotal results 40.98% Heodo
2020-08-100023335359162144672990005.docdoc 5bda6a8a7a7265b29e8db19103395da39b962063d9cadaa193a0a1bcfda16fc5Virustotal results 40.98% Heodo
2020-08-10P_PO_08102020EX.docdoc 722ed869e6d0e77b2dd1f33a633d66af3bf400a01989bb3ee4e6ff70d7b2ee53Virustotal results 40.98% Heodo
2020-08-10VS_7PRTSQ71U8LZO.docdoc 61cadcc29ae12860c7578786904175024456e8d744d146f0e4a395a74250461aVirustotal results 40.32% Heodo
2020-08-10REP_PO_08102020EX.docdoc c21b7cfd3f55a901e8212e17069a59665137c71594899653a26f0b418c4ded97Virustotal results 40.32% Heodo
2020-08-10FILE_16I4WIUKGWPWRAV.docdoc 3a6d2b0e5b190a5fea50684eabbee0a85819344e19159bf26ac8e1b93ea4140an/a Heodo
2020-08-10DOC_27992361296130.docdoc 5eea5c7cf7e3d325938ee78f8782ef16a30e61d440f859dae71a3893da21ecf4n/aHeodo
2020-08-10DOC_PO_08102020EX.docdoc f8f7b8382a2b523434f8826e74bd13ac94a03c98be63a7ae9154bbe3a3295c69Virustotal results 36.07%Heodo
2020-08-10REP_F4085T69VL.docdoc 4ce94f29979a4a4a4c9bc4f2bf228fb0be213bf34298fea52bf3bb82fe03118cn/a Heodo
2020-08-10DZ6685187934FJ.docdoc 9e9dcc63032c40001dbddb5bd18a2b6fe5605bb069cc340d150b9a779f2ae273Virustotal results 34.43%Heodo
2020-08-10FILE_9184700418743.docdoc 8bfc9f0131ca6f43abc2eac3a5e2345362e5c80a1d7f5ecf729811990863a1c4Virustotal results 30.00%Heodo
2020-08-10DOC_KIW_080120_LVF_081020.docdoc a9037fe87ed3a03f60771c046496bbf16e1d5646f87a7f4f59a58471050a272an/a Heodo
2020-08-10FILE_JR0996491575MW.docdoc c5a9dbb440705a6a2b8b1b672176e61075d8b4b8261b9a395920e2cafd206b65n/a Heodo
2020-08-10REP_4HQIPBULBF7T.docdoc 38aec6035b9dc07a41f0b344d8a84b416a54ac964178c2a9a23e139287ffceb8n/a Heodo
2020-08-10BAL_PJ25RQ8KPJD.docdoc f0f54c085e6d5988f5a9e875aacabe15841b6de0f70e4cdfd5ae1ae23ff46bedVirustotal results 26.79% Heodo
2020-08-10REP_807823434.docdoc 5358ef29b9e1c832a55bd66f19aa10501a806e97c4967f7eb9843c5f7c524c06Virustotal results 27.87% Heodo
2020-08-10FILE_QR1067601172PJ.docdoc d46f43e38bebdbe21110ad2795afe0205af99046bbdafee4a60652848124c826Virustotal results 27.87% Heodo
2020-08-10DOC_45725672.docdoc b6ff1abf41548c6b0d2f7edca8a8a7994c11e2b749cbf71190e4b94072b162f1Virustotal results 27.87% Heodo
2020-08-10REP_10381387.docdoc e7f4e7d8fc9a8aee85f81c21ba28897ffbff7c9d3fcee5db8cd808b6583b57c3Virustotal results 26.67% Heodo
2020-08-10GE9211544828LI.docdoc 6c50779a11ed7e4b24da12f97a3044f7a397161ec76d2d7a5f3a2a2848525386n/a Heodo
2020-08-10UA_PO_08102020EX.docdoc dc5077277cfc327ea738f49f77b8ccc791a515634d299c2c0467c065eeca0d6bVirustotal results 26.23% Heodo
2020-08-10FILE_37611010.docdoc ccad7d8f297ecf97b8a2c961ea884e9fd3acde7d74213ba337f42bc8213f2965Virustotal results 27.87% Heodo
2020-08-10VX1694155734AD.docdoc e7805dd0e788b0673a884d16bf9876b4bde5204a1e02ed8938000c63b8c24ac2Virustotal results 27.87% Heodo