URLhaus Database

You are currently viewing the URLhaus database entry for http://legend.nu/personal-disk/individual-area/22160790387-ZoUV9X7ghljip6i/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:431357
URL: http://legend.nu/personal-disk/individual-area/22160790387-ZoUV9X7ghljip6i/
URL Status:Offline
Host: legend.nu
Date added:2020-08-12 23:58:14 UTC
Last online:2022-10-27 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-08-13 00:00:05 UTC to abuse{at}netnation[dot]com)
Takedown time:2 years, 2 months, 25 days, 15 hours, 40 minutes Bad (down since 2022-10-27 15:40:15 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-15List_2020_08_15_7114.docdoc 98d32a982e82317e6e164544ad927cc3cf845e4276795e7ce6e2dc9ebb297724Virustotal results 40.68%Heodo
2020-08-14file_20200815_0836.docdoc d07ec4fc9657ea145484957e5b68242e719e4a327f4f1c7b1fe940ae182fdc84Virustotal results 38.33%Heodo
2020-08-14inf 20200815 613567.docdoc 9517fc7b84b22b3d4f23e53877062e2d46f1491e927b91eea03a9f3fe2dc5571Virustotal results 38.98%Heodo
2020-08-14mes_907615.docdoc e3cfaefd87b2aa287ac22562cc177ec6744c3c9ac27db58b5d2bb7625b694d3dVirustotal results 40.35%Heodo
2020-08-14REP_0236.docdoc 931d0d50761ef1699cfa6dcbfd7f77082e12083b8dce14a80088a003dd862464Virustotal results 41.07%Heodo
2020-08-14MES_20200815.docdoc 47bdaea6a07bb610606749e17a9bab9ef95c161454b2c782d5cf1dc2b3b63a45Virustotal results 37.93%Heodo
2020-08-14doc 20200814 5398619.docdoc 0329d83d9949588804bf1615b60d92ce249db4cf10f1e177992923891e6c3218Virustotal results 37.29%Heodo
2020-08-14LIST 2020_08_14 DE2944.docdoc 04ed96918807cc894be88b0e188b1c773fd228ba01cf4f67434cd1562ff78799Virustotal results 37.29%Heodo
2020-08-14Mes-20200814-EXU3195.docdoc f21ed9b9cd121a9942d00b83ac52827e84b6c7e0dd212b7799875e347129dfe5Virustotal results 38.60%Heodo
2020-08-14rep-2020_08_14-GK0709.docdoc 171778f3f71370ac71991a37d610af0b288786d43479051653130914d8460ba6Virustotal results 38.98%Heodo
2020-08-14MES 2020_08_14 52206.docdoc 301fd0696df4354fea7f502a753193313493b4e003a3978b8d9574f6193b0f5fVirustotal results 37.93%Heodo
2020-08-14REP-2020_08_14-71220.docdoc ca892e2e1fc6ecc27842bda8c95ad80e56f74fa8721ace19c21213c09144492eVirustotal results 40.00%Heodo
2020-08-14rep 20200814.docdoc 6df8558c0950f66047f545eea2121a5791ec751ee9eed445e7e5471ceb63b06bVirustotal results 36.07%Heodo
2020-08-14LIST_2020_08_14_8242679.docdoc 56e8d477ed29d02084826e8cfe03054c8daf20ad6279d3cec7e45e40863ac17fVirustotal results 31.03%Heodo
2020-08-14INF 2020_08_14 TA758.docdoc a36d17c11f3ae318555cf8c32224c07cfdec0a559ad8411becc2b69b175e4915Virustotal results 28.81%Heodo
2020-08-14REP B94456.docdoc e1e418fabcf5e93331dfaed5da28c243e6bfccb63fbf2e2241479fe2d3d1be94Virustotal results 28.33%Heodo
2020-08-14inf-20200814-BL936.docdoc 8a25251c3f94f14cfdd8aa9332f7d61c7f309a5feb4ab79febaef03d5bf136d6Virustotal results 28.33%Heodo
2020-08-14rep-2020_08_14-303.docdoc 6e679288085db07da2e862c6fb064a2e55217e160f6659bb094c39355f86ff2aVirustotal results 22.95%Heodo
2020-08-14File_409.docdoc b8b90fd5558b725027b14645be547cb15a3cfc4014d3a93bc36000bc3ab50b31Virustotal results 22.03%Heodo
2020-08-14FILE_20200814_3152.docdoc 51516f9d3bab184705725b99a9de6f489639a125c5e9defb6d0f1c7e9ebcb080Virustotal results 21.67%Heodo
2020-08-14Dat-20200814-O956049.docdoc 96cc7696696c8387532a6e6d5875dea4633d193b06eb9e588fd96375fd45c519Virustotal results 21.67%Heodo
2020-08-14Inf.docdoc 3d1486ce24783f11fafd7742a4be89b506a618c8d25c948fbf3de40868e22d71Virustotal results 22.03%Heodo
2020-08-14dat 2020_08_14.docdoc 9e9393a35165f1fb3e86284539bb3a40c4018511f933e8187c34af00790e5a35Virustotal results 23.33%Heodo
2020-08-14list-2020_08_14.docdoc 217b1b088b612b18927f4686ab3a7caca750c59d6544744d8ee4733ced95d6c2Virustotal results 23.33%Heodo
2020-08-14DAT.docdoc e4cbde8feb6610a41b2cc0d01559e7e22640769a0bfd305d097e4a966ce4b504Virustotal results 23.21%Heodo
2020-08-14inf_612431.docdoc f5b6e7cab4e6364d573ec7c97730ca0e84746b0fcd0b27dc2ecefa2615e8aae4Virustotal results 23.33%Heodo
2020-08-14LIST_2020_08_14_725.docdoc f3c5012d1e34317327c27a31d0455e2313369e0be8ed7e4c84fae2eb8fde931dVirustotal results 23.33%Heodo
2020-08-14FILE-2020_08_14.docdoc 206574491387efd9c04c688f5cb21867f1dc246db16fed9e158eff7a6f8d519cVirustotal results 25.00%Heodo
2020-08-14FILE-2020_08_14-539771.docdoc 5b893ad0bb28ffb9c0e56be94c04c05ccd0d26b7abd8bf9b4a01a228df3b5677Virustotal results 24.59%Heodo
2020-08-14MES-P2885.docdoc 712d238bdafd17da6ef3d8d794b1c3522059c8bde0c374002e4bda59dd136e49Virustotal results 23.21%Heodo
2020-08-14DAT 2020_08_14 SF804847.docdoc 29f30041d344456afe3000415acdb3e4aed233e0053aa4f0cc929fc74fb8304cVirustotal results 24.59%Heodo
2020-08-14FILE_2020_08_14_598143.docdoc 20bd12d932d277bc86b33997ca39241fff4bf36d043e27e7ba0488fdbdd50839Virustotal results 40.00%Heodo
2020-08-14doc 2020_08_14 779382.docdoc e9a7ed9454586695461708ba06d9f5bbec2187901ea765bd4cc00b809b215f3cVirustotal results 38.33%Heodo
2020-08-14INF_20200814_609.docdoc 29489efeb7ae7bd57c8cbca798da5a97deae5630ec298d8c5c71dfcea1eac7c0Virustotal results 38.33%Heodo
2020-08-14Inf.docdoc 750f4237628ffd460893c6534883f476f6d461970961beb9c1222b05b59d2c2cVirustotal results 37.70%Heodo
2020-08-14rep-001.docdoc d878e7902f6d8430f7d19f1f9f548c280c1e3789ec3857a5d0c81c9ef2e6edb8Virustotal results 37.29%Heodo
2020-08-14dat_T5047.docdoc 36f73076b47e2e70a100cb483c78e186e5fb990095c92a6e22d7a0cbd99c8829Virustotal results 37.93%Heodo
2020-08-14arc-EP325037.docdoc 2465fb97adc0bcfd2852bc97bf6a929405c2b0c8abb85b57d294befdefbac099Virustotal results 35.59%Heodo
2020-08-14ARC 20200814 B461.docdoc 553b01cbb5adeea086cef71eea63ab8cfa4cdee6a75389a35d4be08a0c2a209cn/aHeodo
2020-08-14MES 20200814 3495143.docdoc a5aaa7a63b5ec81fdfe4916e720a21e4df252c2d3823d6558f0593cb1f4f65a3Virustotal results 34.48%Heodo
2020-08-14list 2020_08_14.docdoc 13089378e3c266b290b1016c60c829a4c0ecf6f7941777d28e2954b18e229607Virustotal results 35.00%Heodo
2020-08-14Dat_2020_08_14_8480.docdoc 1c09a7e4afcf582fb0ae2170a0375571dcc9ae463e6c9f29770a590039704a44Virustotal results 36.07%Heodo
2020-08-14dat_20200814_L572.docdoc b29c0c11f05d014a8c9ce4b5c638c87a3a0d91dbf83185604794d28a51b66bcfVirustotal results 35.59%Heodo
2020-08-13Arc 97699.docdoc c660380b581ba0b1e12f563b83f542961d51fcb0b0e7d052a1b5dafe83718eceVirustotal results 35.00%Heodo
2020-08-13Rep-53107.docdoc 081c01d015d17984a1e038faef3bdb986ceeb520e856be497bef96b90ad00aa3Virustotal results 36.67%Heodo
2020-08-13ARC-20200814-7550.docdoc 5b68cacd505c48c0bd694945dcefea1cb936cf62b9e0528cf88b4c7c63d8ae30Virustotal results 37.29%Heodo
2020-08-13ARC-2020_08_14.docdoc 912e3454c7766f89cfd9efb21206f76e1289cd1146d606a1fefad9082721434cVirustotal results 35.00%Heodo
2020-08-13Arc_20200814_T574.docdoc a9f31f864a6aac450ff2fd5887783360d6bb87da12d94b456119e218f2b99e9bVirustotal results 36.07%Heodo
2020-08-13Dat_TWE985360.docdoc 3cfb59dba8f521746b10428aac0d14c54bc21e8e3998893d0a2637f0b0abfd48Virustotal results 36.07% Heodo
2020-08-13MES_20200813_9792.docdoc eb22f6c5bfe1c7137baed590d6ed41fa8a0f4218636ba18a88ae4b4beb8bd271Virustotal results 35.00%Heodo
2020-08-13inf 20200813 387.docdoc 5bb4b84296ec60184ea017e657bcea6f6d3acaa986abdfd64cecbbd4ee027731Virustotal results 37.29%Heodo
2020-08-13LIST 396.docdoc 147c789ee92535626bf97593edc4cba8eb038bbe791b789dcd5b3bd764422ab3Virustotal results 36.07%Heodo
2020-08-13LIST 2020_08_13 2843469.docdoc 46927454721c5e3fd90b2fee4870ce3ed1164f837680278f19478136a5480023Virustotal results 33.33%Heodo
2020-08-13DAT 2020_08_13 116.docdoc 658b81e912c908e06150b1351a244262cf277f4c99003a8f7599354d478a4657Virustotal results 33.33%Heodo
2020-08-13Doc_2020_08_13_G191247.docdoc f4ec266b14464dadad86630e4f028e4e59dd7e7b806925e1ea65fa9e277abf11Virustotal results 35.00%Heodo
2020-08-13doc-20200813-564.docdoc 502df3593c8baaf12f4fe79b927203836c872f0b7d6f11b7084cca840dc05255Virustotal results 32.20%Heodo
2020-08-13FILE 2020_08_13 V8961.docdoc fdf01790e32780da83434ba20976bbb51b54fadee6bb76b399dac783936926a2n/aHeodo
2020-08-13Doc-6741.docdoc 6a429f70198a9efc77444f176afd5bf1cd97f794e2020e32ffc020c481e42b4aVirustotal results 30.00%Heodo
2020-08-13Rep-2020_08_13-8521515.docdoc f3a8e7b9b6078f48976580a7ae7ea2e3ffb077b9d68285f6ec7de8e3972a9d92n/aHeodo
2020-08-13Rep W338.docdoc f9f58bee7fe1eb1016a9fbdb3431d2155eb16adb41874649650ecf4e151742a4Virustotal results 28.33%Heodo
2020-08-13REP 2020_08_13 JKA992922.docdoc f67568f08758378dc851f5550899115ef41b18c6a7e92facb84fd0a33a2af287Virustotal results 28.33%Heodo
2020-08-13File_2020_08_13_JT8990.docdoc 5a3a976d0bcfa77a2062c3cb8209c49850ed86d7af095efae956cce532ad9535Virustotal results 28.33%Heodo
2020-08-13Doc-20200813-2811.docdoc a29171156f8613e2fb07ecaddce758a942371a5df390af684dd26d9eb8c58629Virustotal results 28.33%Heodo
2020-08-13doc 20200813 51859.docdoc 56700454c24541743b48ffbc93ef4b0f3a6d1a59d461c082c06e8c83f839978aVirustotal results 26.67%Heodo
2020-08-13INF_2020_08_13_MGQ742.docdoc a9e97cd44d571b602a1a710895d7a187c895248302aa3f6d52eef243709d9b13Virustotal results 30.51%Heodo
2020-08-13file 2020_08_13 VFY776.docdoc c4d5504614a89515e076eb3766121b4c161bd5c5f3eba280505f77b7f7a69629Virustotal results 31.03%Heodo
2020-08-13Dat_2020_08_13_U2400.docdoc d111f7e51281671a4be10bc8809880ae95ecd11d99abd63fc1ad6f85395ee191Virustotal results 30.00%Heodo
2020-08-13Inf_20200813_6037.docdoc ed9b538ccde9fa35497f0d75bc42390e77699f3ec515a3ef5b226c091dcc8c1bn/aHeodo
2020-08-13Inf-AOH340194.docdoc 9e9a52ca98075b97e6e8b5d017693c2e76fbd6fd5c698e357980c9b2e3467e78Virustotal results 28.33%Heodo
2020-08-13Arc_20200813_W9798.docdoc 7c1ec9b4be7e6c0c420ed6c2788fe96b85289280dc2a9631f084f6223d03a440Virustotal results 30.00%Heodo
2020-08-13Doc_EV053.docdoc 6937a384f975f55d5848a93ccfd5e9c2d51126c7db1c3654f990c2c752871a67Virustotal results 28.33%Heodo
2020-08-13Inf_2020_08_13_FTC738415.docdoc e6dc6e50ffc9a797059e2694751f99b03d4952479b2b4d8afb40b5b1b809cba4Virustotal results 26.67%Heodo
2020-08-13ARC_2020_08_13_YMX504.docdoc 8e34aac321039ce22c7bbb89b61257a397013e7b62607102bea64b2fb1f61960Virustotal results 26.67%Heodo
2020-08-13rep QVA95251.docdoc 76bb490090bed7074824b7b620db247726602318c7acfb9e1c16861b79bfdf3dVirustotal results 27.87%Heodo
2020-08-13LIST 2020_08_13 L454880.docdoc 48fbb5d57c3837b61bd9326f28dd064e51928b1038fa735a0c28a99342bad063Virustotal results 26.67%Heodo
2020-08-13mes_QQQ13979.docdoc 21c04e61b8204b3b63d3420fcf570b5d7d063338639fac037a6748df5386e1a8Virustotal results 27.12%Heodo
2020-08-13Dat-2020_08_13-492504.docdoc 5c70b1d9be2e62d3cb581708789ffcafdc47ae8733f09039db0c3c7bfe9041d9Virustotal results 51.67%Heodo
2020-08-13ARC-2020_08_13-H197733.docdoc 57fcedf7b710607daf3ff9d1d3f81b02e5597d6a760e10c3af3805702f2e2ec5Virustotal results 51.67%Heodo
2020-08-13FILE 2020_08_13 XH052.docdoc 059d90ba2fdda046ef59121b28ea19e6e7d5b9560b0ce0dab9234e0b0c93e56bVirustotal results 53.33%Heodo
2020-08-13LIST_20200813_5145664.docdoc 1dd5d7a44f9459e8c6b9aedd3201e616a357788e0008f048f110c382e7411b54Virustotal results 52.46%Heodo
2020-08-13list-2020_08_13.docdoc 79c7463e43d45b9b6f904dac346635421e52e2f126f22b855b533a85715ae3c4Virustotal results 53.33%Heodo
2020-08-13INF_20200813_DB445.docdoc 5f4d7b7460ead4d31cd6e5a3e5f24402e018eb4c443cc4473c57d222f60409d6Virustotal results 51.67%Heodo
2020-08-13mes SB653.docdoc 34b90b804ac07f37b48a7437f520d80dd3efe9bc79c96c722240c63d9e457164Virustotal results 51.67%Heodo
2020-08-13ARC-75183.docdoc 7efe325d3dd462aa685894527836d96928d50d1fe594ceab5af597a3df8c258aVirustotal results 52.46%Heodo
2020-08-13FILE-AU555819.docdoc ccef51f2aac08b771675329e49226ef621176b8408f1e7f7b72aa4359c3d137dVirustotal results 50.00%Heodo
2020-08-12ARC 2020_08_13 Y138020.docdoc f52c4d8916fbf3ca6c78ed22669713e542910b8c1797b7159af73c5e559b24d2Virustotal results 50.82%Heodo