URLhaus Database

You are currently viewing the URLhaus database entry for http://secondguardian.me/temp/protected_zone/external_forum/631262_vWOwhw7xbNuvU/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:435747
URL: http://secondguardian.me/temp/protected_zone/external_forum/631262_vWOwhw7xbNuvU/
URL Status:Offline
Host: secondguardian.me
Date added:2020-08-18 14:59:13 UTC
Last online:2020-08-24 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?):mail Yes (Ticket DCU002873905 created on 2020-08-18 15:00:07 UTC)
Takedown time:6 days, 0 hours, 39 minutes Bad (down since 2020-08-24 15:39:54 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-20REP-2020_08_20-PBB9727.docdoc 48c065c3c6c626c7fca855686845bf480a74dd0902ae005eeea171dcb5237947Virustotal results 24.14%Heodo
2020-08-20Rep_S984814.docdoc a352582176c8f6ccef9286c97faec72461076b101973783284eecd6d42ea3e4eVirustotal results 25.00%Heodo
2020-08-20arc_20200820_WB730848.docdoc 41e41e5f1f8b2aff80e45e953dd83940e4b3f419f749158861614405f686a5beVirustotal results 21.67%Heodo
2020-08-20file_2020_08_20_CCU459810.docdoc d8a8a0f1dcbf50e189a8b0433e5c62e8ff908e4b29ef93c4d0ecb9efd87402a5Virustotal results 21.67%Heodo
2020-08-20dat-2020_08_20-192355.docdoc c770bba68818296583e90edb1401e456254a70721f9572ed9036d9a4aabd3aa5Virustotal results 22.03%Heodo
2020-08-20doc 20200820 49241.docdoc 03d493414bd57accc237672cf8d9e251bf1e90428f4296a9019dc15f260d8261Virustotal results 20.34%Heodo
2020-08-20REP_ZO23809.docdoc bb5c7cc50314e29b5bec47c7124033a531be632d03166dfce846d84e393148daVirustotal results 21.67%Heodo
2020-08-20ARC 2020_08_20 680123.docdoc 378b412d3de776d01ec9fdec9de5c4af668d37871bd5ef9d2eeb144eb21b5d01Virustotal results 21.67%Heodo
2020-08-20FILE_BZ206381.docdoc 385b99deb4659a9229df342c92919b54428710364712aa73f5de71245a8e4e55Virustotal results 22.03%Heodo
2020-08-20Inf 30642.docdoc 953b662d9aef02326fea06afebcb2c0f499bf6075210cee6bc361cbf62c74c8bVirustotal results 22.03%Heodo
2020-08-20list-2020_08_20-8794.docdoc b3d5549c41a6159ff9e0df4205dc4cc52da484301e854c8b9d34fbc808bb49d0Virustotal results 21.31%Heodo
2020-08-20list-2020_08_20-39399.docdoc 69d6a65b2713b6e8dbb03de13dd93631474f3daeefd5c6ff415e6b16cd9e3affVirustotal results 42.37%Heodo
2020-08-20Inf_2020_08_20.docdoc 8f6788d862d18d0671375430af4c756bc9cdc6b99663b5df0842840a77af44d3Virustotal results 38.33%Heodo
2020-08-20INF-FNH127700.docdoc 89b6ed4e8a0cf8a07e457b0f616f06fc4770fd168802ee6180994858453dc3f3Virustotal results 40.00%Heodo
2020-08-20INF-20200820-C708586.docdoc f6393c7e4e0b8603bbf2de4f4a138e6002e14b472d8d79514ed04a38bb6abd79Virustotal results 40.68%Heodo
2020-08-20rep_20200820_MP433.docdoc 67a3761b4abfe902aeefe85f6d92576b90564d706f24a08b54b1e90e5cec0105Virustotal results 40.00%Heodo
2020-08-20file_14832.docdoc 62ec1bd0426af880a8212346e5dd56fa705a031c9b838cba9dc012e37a661ceaVirustotal results 43.10%Heodo
2020-08-20FILE 2020_08_20 BT62990.docdoc 2f13cbd9b3d9704bb02e53765d7e7d2c8a7966a9ced9230815a6903d666352dcVirustotal results 37.29%Heodo
2020-08-20INF-20200820-WLH99021.docdoc 6679ce1f8ad158f0d6b60d0ba53a9320239863e3250674f436ec67091b98ae80Virustotal results 38.33%Heodo
2020-08-20mes-198.docdoc 5ad149456e0772a69b4139cd61954bce1285c24eb8e99a88b9570736e7ddae47Virustotal results 36.84%Heodo
2020-08-20doc-2020_08_20-YA9394.docdoc 3ed76020d61aa516417f737bb0253133123f00212219db1ca4cf1ac0f1ffc95fVirustotal results 38.33%Heodo
2020-08-20LIST_2020_08_20_VTO48952.docdoc 93f9d6bb9716c6966fe42149253438f3efccaa82e2ead12abf9bcaa2ee75164aVirustotal results 38.98%Heodo
2020-08-20rep.docdoc ee9234daf1c51abb50e560523f8b3dcf72911fe6ac98f37e67a8b62f595c7e93Virustotal results 38.98%Heodo
2020-08-20REP-20200820-W00439.docdoc 14837e0fca7286d6b85e13b9a9f1d5498b6a30241cd7cdfc59b5adcb0547be15Virustotal results 38.33%Heodo
2020-08-20List-20200820.docdoc 34df63aaf08820ef807a0992d54df52142bea2fc2135e5f4012ab9f1f89aaac9Virustotal results 38.33%Heodo
2020-08-20File-2020_08_20-X3106.docdoc 81bed19efa97ba8177bda3736a8ab04d1a331974d94e3ccbda0e1c85f0cde5d5Virustotal results 38.33%Heodo
2020-08-20arc-20200820-153.docdoc 9ea89a24c2efb06595aa09d8d9dc8ac79ad4a9df0d0d99a7fd5fe63fe9e1f7f8Virustotal results 38.33%Heodo
2020-08-20Doc_67834.docdoc a07b4b70e44a67ef59e7bffe9f8765f449f5e739d25ad9c49f88d65607e38f42Virustotal results 38.98%Heodo
2020-08-20ARC_20200820.docdoc d328fbbc3e82b9e2db08fbfcc9d4554921637299f82f0cd330253529ba130219Virustotal results 32.76%Heodo
2020-08-19Inf 20200820 Y536591.docdoc 763cc0ddbf92ab735d7975d8e7137950d402f8475ab7f08f1e332940e4dbdd05n/aHeodo
2020-08-19File_2020_08_20.docdoc 3209a90ec70f3c389ad600fad212afe06d4d60c9ebf4535af52b590f95c642d5Virustotal results 27.12%Heodo
2020-08-19Inf 9528057.docdoc 18f2491dcef8d7f0113049e146994fc5a8fc1615ff0fbbd659fa0a5d580ea72dVirustotal results 28.07%Heodo
2020-08-19LIST_20200819_G9805.docdoc c940432dc1875cdb1adfbda4eb2c3a23b3a10fd0a53cf12cc32e79389120b5d8Virustotal results 26.67%Heodo
2020-08-19LIST_20200819_351.docdoc 7b1214f3fa1a87909df1dc2aaf3d66f4ef5ebe9cc2a8040bffa44e44e28ae36bVirustotal results 26.67%Heodo
2020-08-19List_20200819_A6207.docdoc 1a5032c8701a96210fcf5526730ee3db4924b92af58495bcfaed6912b1d48cb8Virustotal results 26.67%Heodo
2020-08-19REP_LA965.docdoc 7dc844f8716dcdfe52e129c179b48139c29cb20831bd719a02b8120135a7ddebVirustotal results 26.67%Heodo
2020-08-19ARC 2020_08_19 739.docdoc 7c9a4d56c192bd2e71e2098965b8affdfaf10cc6e3e5ced40ede0fd1c947d50eVirustotal results 27.12%Heodo
2020-08-19arc 20200819 134.docdoc 621f57169211edd6bfa1215035b4b15f300b7356aa6f3c40a716b29b9c2f0db6Virustotal results 27.12%Heodo
2020-08-19DAT PV5221.docdoc 5a69dbe048fbeb2da153621f4cb921772399169f8fc1b021e72ff4650f82f6a6Virustotal results 27.59%Heodo
2020-08-19DAT 2020_08_19 167.docdoc d54b881b142aa3ec2e3b816d4dc326d23176dee31c65f78ff9b9328f61aaedb9Virustotal results 27.12% Heodo
2020-08-19MES-2020_08_19-DMA928705.docdoc 71dc926db655b5b9fef23c85f018c062da873d1138f1175f00af75f8b899f237Virustotal results 23.33%Heodo
2020-08-19FILE 20200819.docdoc 6978a1f2f28f45288d59a7c748fc6500c5cc09186b3d41ce8b7e1be8212c47a0Virustotal results 21.67%Heodo
2020-08-19dat-QJP7669.docdoc 0ce5e53c8098dbfc4fd1e58da405b66f8289522b964544eaa585a1094562edd9Virustotal results 22.03%Heodo
2020-08-19doc-2020_08_19-32308.docdoc 017dedfe5d57e11c86048a8f6470f4d48573fc0bc581b8ef0a6e22c06169770aVirustotal results 20.69%Heodo
2020-08-19mes-FB95189.docdoc b4980748305d9329f376c996a7887e4cb40713c823693998d4360500c510062an/aHeodo
2020-08-19ARC_20200819_RWO2565.docdoc f04dd72e780c21c9e4b8c93008e7c679ba859a9ffbff5a9e997d387659a324c1n/aHeodo
2020-08-19arc-FJ792943.docdoc ff3dae4dba7055a170bde6b5cd1c62c47c680d32b65e19ea32fc4af41f8c3f06Virustotal results 20.00%Heodo
2020-08-19Inf_2020_08_19_PK562.docdoc 1e1bd9b8516ba6602eafeeb65a0fd430014d63b18bb637cc352f7f55ccd80332Virustotal results 20.00%Heodo
2020-08-19list-20200819-GJ6791.docdoc 124ae2447478f4b71404f5f07ea89abe4b985e402955ebcd02fb67b27939de31Virustotal results 19.30%Heodo
2020-08-19list-20200819-UAN031662.docdoc 0438242a3ca04ab173d67a0fcf3cad13a9cfaffc01aac04ffe0050024bc471f3Virustotal results 20.00%Heodo
2020-08-19Arc-20200819.docdoc 5ea25ae96dc619098cb941050217ceafa7413f64b4e57fbe6839c8a4a56f27e9Virustotal results 18.64%Heodo
2020-08-19ARC 2020_08_19 FE910.docdoc 8c8c9a461837ed77d0dcfda29092e08452817660cf5a56a7e9547741960e43dcn/aHeodo
2020-08-19list 20200819 UVM533.docdoc 4f1f186c9993f7a0816cf46d8aaafd5057718ca9b9102e98fb12fe2c2ea1bb24Virustotal results 18.33%Heodo
2020-08-19FILE_2020_08_19_412360.docdoc e9da8132017bc36f1448def9ba8b2ea44184e68bf955c08ba75f2560ade79372Virustotal results 18.33%Heodo
2020-08-19REP-20200819-T632336.docdoc 17904f8a80c29c5ed3d3048aae5f62027b918b756006c67893220e03e7a0d7c8Virustotal results 18.33%Heodo
2020-08-19List_20200819_YP83018.docdoc 4798faf76258c8ed12cd2d43a683e3c56b6fadbcbc5b6e7a797ca73e76ed49dfVirustotal results 18.18%Heodo
2020-08-19doc-20200819-9508591.docdoc 44116755a469545747d98ca4dad33a22c5565d571be3001cb95cb4971c532c3cVirustotal results 18.33%Heodo
2020-08-19mes_2020_08_19_CI439.docdoc 55243fe4d8aaffb5742798883e5ebb342f4cbf5eb2b4ea32c0f3603c658ddc93Virustotal results 18.64%Heodo
2020-08-19doc 2020_08_19 104523.docdoc 06f924f51874c7df81f49a607dddc6e977b700d5ce712232c7e962d77150bb01Virustotal results 18.33%Heodo
2020-08-19dat 20200819 7141374.docdoc 06a4431e2a5467fd8f9c297a6a25e670ee44231c92dd38d8f998a3a93115f0c9Virustotal results 18.33%Heodo
2020-08-19file_X85131.docdoc 2b815dffdace46c2316ebb0febb0efa9a74420d58418169469b0ceb0356abfb5Virustotal results 18.33%Heodo
2020-08-19Inf-20200819-X990448.docdoc 741441215f02f536e57bad81a0cd2549669c22dabf11a9db8076f3e7ec6acf1bVirustotal results 18.33%Heodo
2020-08-19dat 20200819 250139.docdoc 3399e67ca5bc2ba980f608d742babbf889c3a0486bd791934b8f779022b262edn/aHeodo
2020-08-19Inf-011.docdoc 1dd9e898cf2ef400f93bb6759c7453980dc396b70c7c8748055db01b62685f2aVirustotal results 18.64%Heodo
2020-08-19Doc-2020_08_19-04842.docdoc 940d6bfb848f60cd6382fd36316df7c5047db05c107b47fa0be9efe73b41bd2bVirustotal results 20.00%Heodo
2020-08-19File_4097402.docdoc da820b108be2808d9d5d1909a3d8683f33f902abe5ae4e5e319d6aa766aba61dVirustotal results 47.46%Heodo
2020-08-19list-I1350.docdoc f4e30920b70f56cf729fbd18a0d60e33b391f7e5307d39b78d9852f9918b46ceVirustotal results 47.46%Heodo
2020-08-19file.docdoc 1c98753feb43790bf0b2979ae0d73c4760638ab1d9c5d6b6336ce2241ba31aa4Virustotal results 45.76%Heodo
2020-08-19LIST 20200819 792.docdoc 305d205cdb3c030f05543db463c783753137d91a3d8c2721189a94fb36e4f7c6Virustotal results 47.46%Heodo
2020-08-19REP-2020_08_19.docdoc 7065577cfc7f1d2a71a9044c23838d7703f1a1e02b2c222ab507407a778aae24Virustotal results 47.46%Heodo
2020-08-19Dat_2020_08_19_ZPZ44532.docdoc f6feee3a8137cb0cab6667842f06e07f96e54fc2f15ebe079dc30b4060d52452Virustotal results 46.67%Heodo
2020-08-19list_7054.docdoc 00ae8c566e55be2bcbcd11072f67a71e34b8b28b3e3dcb0f949043c17c398ecdVirustotal results 46.67%Heodo
2020-08-19inf_60269.docdoc 755431a997f2e449d6905740f46cd46313b7750c60edd35103c44de838ed18acVirustotal results 46.67%Heodo
2020-08-19Rep_20200819_14582.docdoc 60529051426888b950c39051f1ae3ffd04df199460f8f08ad2fb4ae0d65837f6Virustotal results 46.67%Heodo
2020-08-19list 2020_08_19 8887492.docdoc 7916fa0619bd4a976c48a8b068040591dd8f78f9eb5b2bd3abafc019ec1f0dadn/aHeodo
2020-08-19Arc_2020_08_19.docdoc 5a63ce9de6a721eaabedc5a95a579a3eee404a94034db171f646e24517fed367Virustotal results 46.67%Heodo
2020-08-19File 2020_08_19 TGA575941.docdoc 827570bd1ed9f9f55019ed836ca55734d9d6ff3bd52fe74cb3f652f183d53164Virustotal results 45.76%Heodo
2020-08-19rep-2020_08_19-268.docdoc 45a1dbdb6b372ed28b9806469cbe031baa76035067cb69b5e936960e53988a80Virustotal results 44.83%Heodo
2020-08-19arc_402015.docdoc 7833c0d39d11142241550af1fa9cb743026dc00c841f79a52d695fd8e9bfdd43Virustotal results 46.67%Heodo
2020-08-19dat 20200819 00481.docdoc eb36ddd9edb9f64c1d10743135f87875826990fee2cde8abfcc653b1045c9061Virustotal results 46.67%Heodo
2020-08-19DAT 2020_08_19 39078.docdoc 5df568ab274842e91a3f5717af61fdbe6827249fc71e135fdc493f5177ccac7aVirustotal results 46.67%Heodo
2020-08-18doc_2020_08_19_8379.docdoc 5644494f53e0f58e39e8c623b06d33e093d920e7728632366beaa74ce3ce75a2Virustotal results 43.33%Heodo
2020-08-18REP-2020_08_19-7800957.docdoc 276103362e47f26f80bc04fff0f98df32d19fb0693919ac618f3c6f3c8350aabVirustotal results 45.00%Heodo
2020-08-18DAT-8144.docdoc f7f2b55cdbf9f24f6e1850b32aa87b859717f840d46caff776674a973d28d51cVirustotal results 43.33%Heodo
2020-08-18List 2020_08_19 58948.docdoc 5fe3b8e6945f1fd2e0c85c1b8cf1c0969965447dcb9d72deb04c28e05c9116b4Virustotal results 44.07%Heodo
2020-08-18INF 20200819 TN39324.docdoc 942ccd6baa3b3eea249f01497d82b6835ddf27ab79c9db9561a3f473e05eceaaVirustotal results 43.33%Heodo
2020-08-18REP-20200818-I271733.docdoc 17300227be521550f2f2047dc5be4dcad326b59b87378c8a1372dbc867fb29c8n/aHeodo
2020-08-18List 20200818 9190.docdoc 2df5b20d8f749d1edb14c16c6c1c1ce78165354f3d038a23ac8d4d99188391bfVirustotal results 44.26%Heodo
2020-08-18mes_20200818_VF4568.docdoc 8eff0446f444542435bf1ea66d34ac5b2339a87d7702ba744f403dc5ec5d4795Virustotal results 44.07%Heodo
2020-08-18REP-20200818-U00083.docdoc 2665e27cc12b9a111b35b73a7afd85da8a5d1877d6270f6d8ea48edd2acc0718Virustotal results 42.62%Heodo
2020-08-18inf-20200818-767806.docdoc 52386a3f4ed721abc491a22e4d08ba4497e8392249b04e5fbcdcff39502cb314n/aHeodo
2020-08-18list-20200818-01748.docdoc 28810939674484b940c1b242c2defba24f6fa84ca59b37ed3196792e22adc284Virustotal results 40.00%Heodo
2020-08-18Arc-T079606.docdoc c2c31857eddef908bb15ebce07f54e91a068ffff5b92014fd70c1d5ce8f34cd6Virustotal results 40.00%Heodo
2020-08-18FILE_2020_08_18_7007643.docdoc cae4e9249f1219782d6c234dc44eab63930830f75ab90f4d533f0ddd3bacb745n/aHeodo
2020-08-18inf-2020_08_18.docdoc 93114977eaae46aa265bdd2918d70cdbaf292177875098c8e3f52bb992f719a1Virustotal results 37.29%Heodo
2020-08-18LIST 20200818 2577.docdoc b8ceb76e216625929c1a81fd2260e8b3ed97b6dda3a18f3054ef2fd575f7b15fn/aHeodo
2020-08-18Arc_2020_08_18_PUP7621.docdoc c2ddfddccb101d4e986562ca370e4c29e0ec7f510f7a657f32d61ae37a173c8dVirustotal results 31.15%Heodo
2020-08-18Arc_20200818_D618134.docdoc b16cf643ead18e0404ebc5b07f70bd5c5d99d057d346e2bb3ac34ea7a1c3e28dVirustotal results 28.81%Heodo