URLhaus Database

You are currently viewing the URLhaus database entry for https://preprod.info-legs.fr/x/IXqJvIJs5I4k7szsGbfAn4XctaEJld6MmLel01geBOL/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:945952
URL: https://preprod.info-legs.fr/x/IXqJvIJs5I4k7szsGbfAn4XctaEJld6MmLel01geBOL/
URL Status:Offline
Host: preprod.info-legs.fr
Date added:2020-12-31 00:28:05 UTC
Last online:2021-01-05 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-31 00:30:05 UTC to abuse{at}ovh[dot]net)
Takedown time:5 days, 1 hours, 21 minutes Bad (down since 2021-01-05 01:52:02 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-12-31X3EQZ335BXHO7.docdoc 43af38ecd27585f00463abfee0ca7f492fb36fa862c8d215447d59be27652589Virustotal results 50.00%Heodo
2020-12-31S6IKK6MH7E.docdoc a19dbfe4090d5809a4e949d13a2812935f981a4f322c8665b6feaa908ebc33cen/aHeodo
2020-12-31O5B2244H.docdoc 430084782bfffde4d024abdba24c672fc4ee9bb8e2aa72d981add7abff16646fVirustotal results 45.76%Heodo
2020-12-319Z74O8C0OLQKN.docdoc 9651a07acbd2f95c8b7d7387cd69c27521ab0254d4b7e47f684dffd6bfc94ddcVirustotal results 50.00%Heodo
2020-12-314NSNL1.docdoc 63ddd736765193e5edee690fc7fd0ba7c4fc8ee601f9cb5ee1427a172868593aVirustotal results 49.21%Heodo
2020-12-31L9ZEKBVH0C65N1N.docdoc 9512958c1e2d4c75ccf1a1da8963bf39ecef83838203ec92036630265afedfa5Virustotal results 50.00%Heodo
2020-12-31KGJTC7.docdoc accd0141dbb5a3924866cfdbbdeca2edfd396cfbb611880588d8cfab0cd986c3Virustotal results 48.39%Heodo
2020-12-31DS2BMY4S6.docdoc 2266ca4b03e9490c3be3c945744ed0bc2ffd8f047ed6dbf1acc02bcc14636424n/aHeodo
2020-12-31XSFQH342EJRS9QN.docdoc c68350e42d1fb6e27f14eea5b6a5994cc3d6f0a4c09880eaf03f6fe1382ece1fn/aHeodo
2020-12-31ONKNT6URARFU.docdoc 8b8ee2d2fa51b5a1c72a0b26ea27569873c8b69955d1ea8aa665ae2ffb1513c6n/aHeodo
2020-12-317BTTP6ZWQJBB2SMN.docdoc f4ba2bce0a0fcc57183c73e46feb6f6fddfcac25d12032d47d93302aa9bb40b4n/aHeodo
2020-12-31WOJMWTN2.docdoc 6c4a7652f59aa03c67961983f167f86eb3a64ba568f0c4629c5adf18c82e2ce8Virustotal results 42.86%Heodo
2020-12-314XEEVS8CU1X4XZPM.docdoc 1486fe920f39107bae3cba0f5fbfee0eeee6a5ff8389360cf26868c9bb692730Virustotal results 46.77%Heodo
2020-12-313YWL54H0UV.docdoc e05aadbe41028646840c187217377776330ff87cf0c0aad82cb1cf15236243cdVirustotal results 51.61%Heodo
2020-12-31F7N6PTCG6Y9.docdoc f9929b5a3d5cb50bece6e6dd8e553d79f36e34bcf71e2f302d709d108582e6d8Virustotal results 51.61%Heodo
2020-12-31RNI6TG34G9EGP.docdoc a60ff35ef82526eb15d040ad870e8c2808dc694bb52b1095ba863c960b40678bVirustotal results 51.61%Heodo
2020-12-31P8BOLSHIDLR8PD.docdoc 9c05cd41d8c7fb3746acbcaad200dc66bdc79609905a06213a787799c9661985Virustotal results 47.62%Heodo
2020-12-31ZIUVA0FQOPR.docdoc 18bb61d704aea3eb9f1d69649f16dad532c1236486dbb9891c0bf5054c63aa16Virustotal results 47.62%Heodo
2020-12-31A19VXKPF9CY.docdoc 9e067dddbde70837fe2f8227c507629d2ccc7735fd8dc9950f9d9b2c6c5ba6a3Virustotal results 46.03%Heodo
2020-12-31MMP4WQ3E4.docdoc 1945af426236644e59e05d740730d942c8b1f318aacf9f983a9f6e4bcbf55f37Virustotal results 44.26%Heodo
2020-12-31VCD047732EKF.docdoc 6aac95dd3f2a6b9cdc5ddfbda6e548ab8d93a61f48640d3a0a98a312fad42e56Virustotal results 42.86%Heodo
2020-12-31OEYGOUXYCW4.docdoc 12648728174c80a68b9992c8759df7e021f27fef6bbee5bed8af71b18a7fadd5Virustotal results 46.03%Heodo
2020-12-31PLKDBUFCF81LUER.docdoc a076dfb0f7e5a9217dd1cde4b003fd8714d6693b990f2ac4fd1b70fdbea38296Virustotal results 42.86%Heodo
2020-12-312AZ13GKPUC0.docdoc 6b85d222fb12df6466d8b1dae31bb6e7706463ec73fd86f85e46ef7867183df1Virustotal results 43.55%Heodo
2020-12-31CVR74XSEKFM1AWYM.docdoc 7a1dddc29a6b87ff807093d52c2c2ea7139641511f39fa0a834c101bd431baaaVirustotal results 42.86%Heodo
2020-12-31SI4SF9VB5RIEB5.docdoc 78e18b5279a9e9e08617037cb17947743cba176c3d815b3e4b01872ba3a6b9bcVirustotal results 41.94%Heodo
2020-12-31GXG5HQGT.docdoc 3bf59384c4c1a24eb5fef4453dd1fc63a75324f4aa6b86a62ba47de3393027a9Virustotal results 42.86%Heodo
2020-12-31MNC6D8W.docdoc c531afa39691d1fec216f1c5c1016c155176f104b4b83189b1f4ca82efcdec60Virustotal results 40.98%Heodo
2020-12-3185CG04.docdoc 9d7889fe83c60f08711f29825a62cc029f17329e4008a7298e7c3ba5cb6ae8ffVirustotal results 38.33%Heodo
2020-12-318HURME.docdoc 712989be681e3a6e8cd47b84ce5feb957d2cfb47367d96bbc7dcd6551bef1f51Virustotal results 38.71%Heodo
2020-12-31WHZ6ABK2YI2.docdoc 62ab4ab746aa32f2fc56a4441eb18d109e5174400f6eec250495e2b513ac63c9Virustotal results 39.34%Heodo
2020-12-312DM155BUPJ0OH.docdoc d6dae3570b800a4a54bbb661e945c2870952058174a0ac704127c7cfe8330bcdVirustotal results 39.34%Heodo
2020-12-31YWQKZH6.docdoc d2178edbfb636aa2baf306d59be6a8c651aa2167f67893e6ee70469cc13de307Virustotal results 36.67%Heodo