URLhaus Database

You are currently viewing the URLhaus database entry for http://www.exodor.com.tr/UfDdYNRLB4/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:22763
URL: http://www.exodor.com.tr/UfDdYNRLB4/
URL Status:Offline
Host: www.exodor.com.tr
Date added:2018-06-22 18:16:12 UTC
Last online:2019-08-01 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-06-22 18:24:20 UTC to noc{at}turkticaret[dot]net)
Tags:emotet link epoch2 heodo link payload

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-07-198314838051.exeexe c3f2df70d5d2c2a519bb563e3ad9ad4b5fd1f2c6ca8053d4c1374e3d4b06e98fn/a 
2019-07-188314838051.exeexe bb1d052e384690f01b2bcbb450e446d80916919999fe663124963094184e1c3an/a 
2019-07-188314838051.exeexe d70c394773092349851db0a3cb81f0792c5e840881d15b9e49f0316a67708203n/a 
2019-07-188314838051.exeexe 2739a5c0470e0e6fdd20737213f643ff9da455ee6c029b3f3d604b1a7187c4a3n/a 
2018-06-2496307289529.exeexe f02574524485e84b6dfbb4f2c51ee6b9c8794c8bbe22798a554dad225526331cVirustotal results 14.71% 
2018-06-2493978609.exeexe 3bc58bf535ac5b065fc08ac751c19e5e4d0d61042201e7f2938eb416e8a58be1Virustotal results 11.94% Heodo
2018-06-235944875161.exeexe a1a6a9070efc72cd197cb8d27342f0cd6ba8f15e706b308f164fcafd6f561258Virustotal results 17.91% 
2018-06-2358714365.exeexe ac85e81dd4f1639758f51cc2e8aa241e1ea9cfa71a79eec0114c649b6bb5fd09n/a 
2018-06-23130175949.exeexe 52b95f756189b9a1757969f5c3d258906fe8f2628423001db5d0033684e0dc71Virustotal results 23.53% Heodo
2018-06-22318704174.exeexe db0b6b2f9131dc45b595e017b083cab634ef286215815e2cc96475bad8adc38dVirustotal results 17.65% 
2018-06-2213485405577.exeexe bb8f3417058b383128829b53fb094ab9ba01e07fdbb5a1916dd6f13b6f9b7b13Virustotal results 22.39% Heodo
2018-06-229172785170.exeexe 48d337f331798f6818b9d1225bf95255f2a355ac4f48d39cec288731ecf5dd80Virustotal results 22.06%