URLhaus Database

You are currently viewing the URLhaus database entry for https://oim.doganltd.com.tr/ayarlar/js/tinymce/skins/lightgray/2RlUrxFRGoA5.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	1180498
URL:	https://oim.doganltd.com.tr/ayarlar/js/tinymce/skins/lightgray/2RlUrxFRGoA5.php
URL Status:	Offline
Host:	oim.doganltd.com.tr
Date added:	2021-04-28 18:54:04 UTC
Last online:	2026-08-03 14:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Abused domain (malware)
SURBL :	Blocked
Quad9 :	Blocked
AdGuard :	Blocked
Cloudflare :	Blocked
dns0.eu :	Not blocked
ProtonDNS :	Not blocked
OpenBLD :	Blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2026-08-03 08:01:12 UTC to abuse{at}myloc[dot]de)
Takedown time:	5 years, 4 months, 4 days, 16 hours, 28 minutes (down since 2026-08-05 11:23:46 UTC)
Tags:	Dridex opendir

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2026-08-05	2RlUrxFRGoA5.php	dll	190a41923be75e62aa3fce40912cc50319ce3ddfb4ff0738fea9fbcd6d0472bd	n/a
2026-08-04	2RlUrxFRGoA5.php	dll	73abf632cb347eba28c74586c0d757aa24ad33e02e9ff6660d48e03493bf478d	n/a
2026-08-03	2RlUrxFRGoA5.php	dll	a29f9f38b84a79784962abfbcf15b2a76c11b6f0973b7de8329c8ba0e1ee43a8	n/a
2022-03-12	n/a	dll	ddbcf4cb19a55a6f98a1ba85ba5f180bad6b5ed29a2d29d3aa3693efa8656379	n/a
2022-03-12	n/a	dll	6550e9cfc9f379bd437bd77ff9b99166b9f09a76350b20ca063b6e4e713f5bc5	n/a
2022-03-12	n/a	dll	910dc50c5fe4befaf99e3aa29703b84a3f8d4d89d3b2c06d10265eb2326bb3df	n/a
2022-03-12	n/a	dll	16401904f486046317560e8ff57d25a1e162248951f1ad3e4e6fa904da4f8190	n/a
2022-03-12	n/a	dll	581b11c35d3e173f31fbc43239bacda00e291925e5c14d34069dd9132726b44c	n/a
2022-03-12	n/a	dll	8d62cfeb835136cea97da8ecd801565ef8bd1c295fa3b0d19d6fb391bfb084c8	n/a
2022-03-12	n/a	dll	438575252f8ca539d9e44d423085349b9cb062130f8c143a474f9dd368a0af5e	n/a
2022-03-12	n/a	dll	ee1a5cbfda27a3f0e51ed6199132a3f504705ea3600f5b4dab53993bdb8b2af0	n/a
2022-03-12	n/a	dll	99e33291e1839d1a2630eb47c02e96547f31ae0748d333811f592f1590557a24	n/a
2022-03-12	n/a	dll	492addc66387190a76e396fad77fa46fa21610e28e7d9bc2f4d3b5d0e03dd54b	n/a
2022-03-12	n/a	dll	717ec2096ae0648c5aeecd6de711021328027cfa8ae9224a4a878e7b00e1d304	n/a
2022-03-12	n/a	dll	6e42164105fd4087931305c1f29446d99f89b815783ddb8fb3a1bbbd2899c95b	n/a
2022-03-12	n/a	dll	fc3ad964d2409ba54dc9ee7cd7dd20d119ddd4b1d2682627fb0c1662db1f6ce5	n/a
2022-03-12	n/a	dll	fe1ee014a1dbcb713cdd52861ef6cdfb15bcc8bd2f3d87534d5bb1c98e51132c	n/a
2022-03-12	n/a	dll	d5684b29dd5a95467b0a280c971008a628de2e49281ba82650cb66c6d074d813	n/a
2022-03-12	n/a	dll	ef4cd625bfd53345bd2e28f927af076851a10e724ffda0d8f52869766f6e1180	n/a
2022-03-12	n/a	dll	e8f6fd55a778b59321c7c20ce09385368161fdb8a38331fb7acaa5343d5ec3f5	n/a
2022-03-12	n/a	dll	47a078d4b6e1f2e31fd441b834de922d66932cd258e4634a1947f534df5e79f8	n/a
2022-03-12	n/a	dll	1d422b0df2274a0ad38547d169c834f297637dfed02b6e783952e6159ca8833e	n/a
2022-03-12	n/a	dll	eeb01758bbf97ef12f2e65445396b54b9d685477fe035bd3fa173819c58987d3	n/a
2022-03-12	n/a	dll	cb5e8cec677218e48155b50d9d896e35c43f62b31b06ea0de05d8db0246aef49	n/a
2022-03-12	n/a	dll	529d4e181fd464d1d45881627661e29bffd77b971ffb6c574872acc4feacef97	n/a
2022-03-12	n/a	dll	07438bebf3b053c3e6878bda8993890906a1c82adcc456efa844894be7f341d3	n/a
2022-03-12	n/a	dll	6e7c1579056731a20e447a20bc1b5a02e72bd2aa26a85dcdff687e577f574306	n/a
2022-03-12	n/a	dll	04a5eb103c041bc03b58a0aa84d8d664c64032a8dae5aa90b63ee59266c27162	n/a	Dridex
2022-03-12	n/a	dll	02f645da42f1ba375c639a2337dcc9b704dbb6eba73e21a9e66290189964daa3	n/a	Dridex
2022-03-12	n/a	dll	b47232a47905c0972d00b389d89ab0f20b69cebcce297d357f518b7685d2221d	n/a	Dridex
2022-03-12	n/a	dll	25b9ddd9258413d1417cb85a6467009cfa9f42ed458ab83a6b17f9cfb0abe55d	n/a	Dridex
2022-03-12	n/a	dll	a0859d5323343ccd01567eb062a16503775c4af0c4fda199873eb1df759983d2	n/a	Dridex
2022-03-12	n/a	dll	8d66a40771a9474a26be173ba01991d89dd9c63c5ab00c9ba9dded80864d1bb8	n/a	Dridex
2022-03-12	n/a	dll	0cba4708850cc0389f2d16f215cce96696bbab7c6df62044fdaf9089c9ebeebd	n/a
2022-03-11	n/a	dll	4db628760ffbf4bf8ff549288b587c59013f1aa63747a6cfee43a15c0ed9f8b1	n/a
2022-03-11	n/a	dll	bdc58cc0369f8de6afdcf4f92ec6f86e4a7a29c5120889b59ebacbbacb9f9b32	n/a
2022-03-11	n/a	dll	9cbdf548d847b7e51f826adf6992f29c645c7dec529e8f7509994ab997f98619	n/a
2022-03-11	n/a	dll	ce3c1ff768f0b46426aae172bb29ac50e0aa89ba1a25c8af60362d105df614bc	n/a
2022-03-11	n/a	dll	7b921e5c29a887343689c94c15f8596dd15fd379b8135f4bafcc76d4460983a1	n/a
2021-06-03	n/a	dll	9cd08d3eae73ebac2a7d988cc9ec3e8a244537fbe5e6d6f826d7beab901651ab	n/a	Dridex
2021-06-01	n/a	dll	8a861b69d22bef3c1438ef06f2d26228be266f56ecfa03da3b7fb30c4f118d87	n/a	Dridex
2021-05-06	n/a	dll	3dd0191be33f9b85b147f823bed7d7b0108865c5557aedf14d377ec99c6ca524	n/a
2021-05-06	n/a	dll	7d83326e4c1287b4b33b859b30654ab90d7c97d45010298da24fbb2585b821a0	n/a
2021-05-06	n/a	dll	e2f714a88916c42632146b0fdae6404be66c960f7b477dae2ae7b45155a342a9	n/a
2021-05-06	n/a	dll	06688c6612ae313a5daf62a101734197082b74836ade450bb0aa1467d1916c75	n/a
2021-05-06	n/a	dll	149cd93c355782d4a23d2fa9ed6058029b4631955ea6cfe5180a10f9c37afd98	n/a
2021-05-06	n/a	dll	9f7b57616afce1842e142f05353bbce4fa9efe5a2ff847d6ca5e150d0422cd48	n/a
2021-05-06	n/a	dll	59848db84c64a7be05e05901936ace81aa4b6ee3e6a2a68e5d28f6402d11e495	n/a
2021-04-28	n/a	dll	1a3b333f37a9623d1eb759cce0e055844afdf68182a32e24c048d7bff94f6012	n/a	Dridex
2021-04-28	n/a	dll	dde7eb716a0bc02e922ba486fa56ec5e742a9b3d6b0ae458940d68d88b8e257b	n/a	Dridex
2021-04-28	n/a	dll	306c45025d70b27b53a0c6d1eec67de5caaac9b3c662fbc9c774c02cecdc149d	n/a	Dridex
2021-04-28	n/a	dll	857957484c71b25bf8eb8ebf437bd993dc49444b6ff677cb280a68852648e483	n/a	Dridex
2021-04-28	n/a	dll	006ecbd76809820553cc72ffd42aae9d3146593e9401cb13258709b3327a3cb4	n/a	Dridex