URLhaus Database

You are currently viewing the URLhaus database entry for http://www.leapmom.com/ukeol/Reporting/JhG4LtkT5pjo/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:626957
URL: http://www.leapmom.com/ukeol/Reporting/JhG4LtkT5pjo/
URL Status:Offline
Host: www.leapmom.com
Date added:2020-09-30 05:36:17 UTC
Last online:2020-10-22 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-09-30 05:38:43 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com,abuse{at}12321[dot]cn,abuse{at}alibaba-inc[dot]com)
Takedown time:22 days, 4 hours, 48 minutes Bad (down since 2020-10-22 10:27:29 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-09-3092292Z 20200930 D996704.docdoc 0dc8b5cefd0791007bbc51f60516c87fd6d938fe4d44c7f7249e47f38cc3c73an/aHeodo
2020-09-30ARC HIM2009.docdoc 5bb4b47b32c4da4a925928fd9d28b353c54af487820fb5910745b82430f247afVirustotal results 22.58%Heodo
2020-09-305299 2020_09_30 845.docdoc 5014e341b5f0cbc13a4b2b338a5530103a957b9739c0723880ed2c098f2842cbn/aHeodo
2020-09-30Mes.docdoc 8c67e7a016e372b821f4aea4a703745804cf03b446fd74070da604dfd6fa8709n/aHeodo
2020-09-30File-824.docdoc 14f2d1d18d19afe92e1aaf65fcc49f7798d6d9c1c150d1d840895741bdd527bfn/aHeodo
2020-09-30FILE 20200930 MHG215945.docdoc 4c25015ae6e259e42564c6b03066111433ae12f8488364a45ab1e6680d708350n/aHeodo
2020-09-30INF_20200930.docdoc 11d48758db4b97fe1625c9d80fadcb112fc27ad3fc1bf4028fd1e8ff5a3eb9d1n/aHeodo
2020-09-30ARC_2020_09_30_LOF23583.docdoc c2edb2ad04c0e8b248b53ba0f3cc0abd7942c1ff70d3f3b697af056d6dda904fn/aHeodo
2020-09-30REP 2020_09_30 883.docdoc 848472a593e725755e8a0b52a61189cab28bedfa9f8d62a7a528790838e7d9acn/aHeodo
2020-09-3090592-20200930-941.docdoc 665096dfe25e4e636f41d66df9cc4cfb35a0a347a0a1424b191c7b5834179dbfn/aHeodo
2020-09-3003410960 2020_09_30 9927.docdoc e72c9a13411ec37399045d05cf6bd73136713d8b946b442f3c760a57b492bb62n/aHeodo
2020-09-30ARC 2020_09_30 0141904.docdoc a145c68d6733bdbef62c6d009986cf4ac6100b25b6e44571b92f9e5257fd3a2cn/aHeodo
2020-09-30arc_0214.docdoc ab29dfeede441ff65801a3bd6e00e12eb35038b0142cfdb133fd029ed7ec4ee9Virustotal results 47.54%Heodo
2020-09-30Rep_H910207.docdoc 6203971a2e4b246318cba558f864664aacc3cc5dae07aa3b8ce1fa6fb17d590dn/aHeodo
2020-09-30List MW49523.docdoc 283272050a0c0d994dacc605e1d7009688c58c1f0998f8007647a9b92e8604e1Virustotal results 46.77%Heodo