URLhaus Database

You are currently viewing the URLhaus database entry for http://ozkayalar.com/admin836cnxhpb/8td3bl5/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	192686
URL:	http://ozkayalar.com/admin836cnxhpb/8td3bl5/
URL Status:	Offline
Host:	ozkayalar.com
Date added:	2019-05-08 07:07:19 UTC
Last online:	2020-07-19 17:XX:XX UTC
Threat:	Malware download
URLhaus blocklist:	Not blocked
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
dns0.eu :	Status unknown
ProtonDNS :	Not blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	Cryptolaemus1
Abuse complaint sent (?):	Yes (2019-05-08 07:08:04 UTC to abuse-manager{at}websahibi[dot]com)
Takedown time:	1 year, 2 month, 18 days, 10 hours, 27 minutes (down since 2020-07-19 17:35:06 UTC)
Tags:	emotet epoch1 exe heodo

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2019-08-08	k4b0n14vai.exe	exe	06efa28a02d492a0bf9ec082e381b124b3998c30c7dc7508e839b38711cbfcd2	n/a
2019-05-10	k4b0n14vai.exe	exe	e18863951e17b6c5344229fa8c56461fcd477c1393a62d66a9f176c37c67c6b6	25.35%	Heodo
2019-05-10	6cwdo.exe	exe	943cb233ee53a575f343143e47b6064f224abd1842f4c09510801de5b64d6bfe	30.30%	Heodo
2019-05-10	9lyugh.exe	exe	d53d8975552df9f46b85659099523130410f3ad24c79c99b2df11376f70f84f4	26.39%	Heodo
2019-05-10	xdlhv.exe	exe	a24e9693ad23759af4e0e31c8f81193a82a2f36e0b6cf240ea247a2ed868f148	n/a	Heodo
2019-05-10	zqc21knibv7.exe	exe	ef19900098e94916a2ef8ce6f1af5e6919418eacba3bce57bac86ae9af12ffdf	25.35%	Heodo
2019-05-10	da23pye22cl60y.exe	exe	de4ee4f857c0dc6c3a339c9a8fddf7dfbce8a65c2522a7d636b8b64ee1153595	26.03%	Heodo
2019-05-10	lmtwtv.exe	exe	e03853c9185e540db3630f384720384670ac3f7dbf7e4f460446b15128987e6f	26.76%	Heodo
2019-05-10	9z32ndygx1.exe	exe	f20c16a60ede21f7db94d40e5d73080bd92f89e99334b5c025d79472a11b2e6c	n/a	Heodo
2019-05-10	uw21qru3t1sjzi.exe	exe	42441876b8d0db0a3ea49640bb989b269801ed6d48fa895eb544bb9a56eb24de	25.35%	Heodo
2019-05-10	503vqge.exe	exe	25a65373ed73d1db68ff1e4f547f7c6d886305f38520b909779655475ccf7049	26.76%	Heodo
2019-05-10	2isjj.exe	exe	84f3cd582367e1945f471d97996d2fb0f28e0b8acec72dcdea961b2ddd0d33e3	21.13%	Heodo
2019-05-10	ulxnijb.exe	exe	30cce5b7db8b9516704bd5ae74e857f39512c3025e63ba1cad2b86b2af587c81	22.54%	Heodo
2019-05-10	rpamhi85dfqoyls.exe	exe	c649de592d65792dd0005f457282328ab7a8edff0ce3fb6d2e80d8e1e190e593	21.13%	Heodo
2019-05-10	4og08.exe	exe	04dfcd4ab4212a4a5b9314d9409ea19c643570572b0036a6e42c0b8124f6dacd	n/a	Heodo
2019-05-09	xphv88.exe	exe	db68ce6c26b0f1dead656ca23d8b3596755bc0229d55dc9a46e2a94879fd6913	28.17%	Heodo
2019-05-09	8437necxd3utpc.exe	exe	d2e112a1d9f4f9c5a8e171435c770fce9f0bca559f44c6a480b2f31c01899e97	19.72%	Heodo
2019-05-09	mcq9zdp5sneni.exe	exe	fe7fa17ce51607e9f830bfe81350a551c1bf7c2a13dfcb8bb34a25b00b1bbd4d	21.74%	Heodo
2019-05-09	9ojpw85mqrob.exe	exe	ca221e91bfd2d2e7e93196c11ff4db0713f1e41675cc1f1b13b7b742c94612d0	20.00%	Heodo
2019-05-09	5963mo2d65h9nd.exe	exe	55805ce5fb76da618bdabac972c59390d15b872e9a401a0dd4e2b3f1b61bc458	22.86%	Heodo
2019-05-09	xoue16qqml9fs.exe	exe	3dcfdf41f8a42f11201c56a44873b9c1b8fcb676b48d69ea0178ea66fc9cd7fa	30.56%
2019-05-09	xm86z.exe	exe	18c788edd309a5c15d9163cf016cd9651bf2db15622dcf3c21286b6b7f22f891	28.99%	Heodo
2019-05-09	q70u12fvk.exe	exe	2db51ad624239421ceffb9dd45c898ed1f64f0316e6ddd43e276c7c1ba7f97a2	26.15%
2019-05-09	cp1zxjrgicu7.exe	exe	bf6f9f8f38399302917fd8d4b2db61ac34fc61bb72c049506c602ac3542db636	27.78%	Heodo
2019-05-09	9tvcabygs2m.exe	exe	dc1f72dfdc516379ba2d1cee97f30d5625b11ac8d506515418f21516e369165f	27.94%	Heodo
2019-05-09	32oc1zs5jrix.exe	exe	4344b71e75aa89b2eb269c20f97a7bf91a527a3b2a3d7fe6f5aea0164b36a454	27.78%	Heodo
2019-05-09	yx7x58ax8he60.exe	exe	5a95643eff566e655c27cb7f8e37d4e4c3608fff711a4987033b2fe25bca5f8f	n/a	Heodo
2019-05-09	jrr5tnr.exe	exe	7ed0f2dd345574c60835da6dd0312823fc3e86851006211f6a9203614ee93907	n/a	Heodo
2019-05-09	pfk439s7xzoo.exe	exe	738563252e06801fa79207d33f6d431f16c341f8519d1b850130628f7b80d974	n/a	Heodo
2019-05-09	zflsuktft.exe	exe	f47aa9597beaef527cd5ba9d00a9dcb9fb0d2633ab46fd345136469772c9c6d0	25.00%	Heodo
2019-05-09	zdapp9dyb.exe	exe	c9c9bc27f596eb25d234491aeb394d85bbba1a640bcf72f39e4b3c373fbe8eb9	n/a	Heodo
2019-05-09	1lqa3atw3iiw8g.exe	exe	a05c2e598f4a32c8a38699ed5c4be8921c1664841365a0f2e1cb580cb124ec00	20.00%	Heodo
2019-05-09	w3hdkb63y.exe	exe	3478eb7d70c27498d0c4bd842f41313c3223fcb9a572a6b57460fb556cf4a866	21.92%	Heodo
2019-05-08	yx57dl0j5sbft.exe	exe	af50c77e63620eccb3be78fce0ed3de6bf9aa6812fbd7e503e6488abddf31a4b	n/a	Heodo
2019-05-08	4ycu37ny.exe	exe	1e722699d523d755b7c51342db5daf947f64638d3cdc2be41c8e0e85fc227771	21.92%
2019-05-08	z9inw4kc.exe	exe	5d12c17afc1f063befa9c8ab90506541fc16669e089cae72ddf81bcfac442419	21.92%	Heodo
2019-05-08	flqdir2y3jih.exe	exe	33083b984dd10f3d7f938e7468fa6f9a083db32643f0526bef01fd3c04204fce	n/a	Heodo
2019-05-08	2pekgkd.exe	exe	16ac9a68fee924638174657ad7ab005030b026cc7bc9e0ee2270e378640b08ea	16.67%	Heodo
2019-05-08	y03j0va5.exe	exe	1d6458fe846c15db8207de992b6d921735c94ca7f690935df33dac708c86098a	n/a	Heodo
2019-05-08	we7hw4g3g3.exe	exe	112397204a7a02d203165df3e229695e6ff76fa0dfeab7bb839cbb26f64837e3	22.22%	Heodo
2019-05-08	9h3z3d4m.exe	exe	44f84630dee351deee8db77603cd2f9b317086e00d84a7b7d708b2bf883ed904	19.44%	Heodo
2019-05-08	3b0qsmjxh15304.exe	exe	78e0f20db01b27e9a4bc5bc62a018bfbd970a3ccc739edf8fd3e3542b5eaa7e3	19.18%	Heodo
2019-05-08	xt97qeb.exe	exe	88f6a13d839840843f82e0bf65a036ab107d134c6c63a06a80c0724780ff5f0c	20.83%	Heodo
2019-05-08	y8mlg18jrjbpj.exe	exe	b3575c7a95a2d0811e785ec4e4321e9c8f8b344c5195b7f82328815b3959c39f	26.03%	Heodo
2019-05-08	te2oheggrh7ll0.exe	exe	9e1b5c16cfad4919489e562d2d2c4d29634fe08dc58db81f90c47082c5d85091	15.49%	Heodo
2019-05-08	hvocp1wv0fmrdxk.exe	exe	286a32016dbe0cb7eef1c0a0bc4439e013da1ae84237dee5315280052db36786	16.90%	Heodo
2019-05-08	dusfdcxnaz.exe	exe	c3e0530a6b190927531c5e1d35bb983d82914d4035dd3d9e7a1671e051710300	21.13%	Heodo
2019-05-08	yg01qw0kk8.exe	exe	5493f7935a9ccade975afd856c5e1b39b23ef892931bd7176a585fae5212efbf	31.51%	Heodo
2019-05-08	bh4pzdgigf0e0zn.exe	exe	a827731f3da0eff519b4e96e2d5e633e4fa0f2e8e82cb5b7e5a64d20c407496b	47.95%	Heodo