URLhaus Database

You are currently viewing the URLhaus database entry for http://besttasimacilik.com.tr/wp-content/uploads/34866325758700/eXcmhPRBCu/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:232609
URL: http://besttasimacilik.com.tr/wp-content/uploads/34866325758700/eXcmhPRBCu/
URL Status:Offline
Host: besttasimacilik.com.tr
Date added:2019-09-17 21:51:16 UTC
Last online:2020-06-04 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2019-09-17 21:52:10 UTC to abuse{at}ni[dot]net[dot]tr)
Takedown time:8 months, 20 days, 15 hours, 0 minutes Bad (down since 2020-06-04 12:52:35 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-09-19942665508034_09192019.docdoc 9d35d0d394f6f6a45b6e14fbfc06c870c6387d1340cf29ee4bbfe7876ae30e3an/aHeodo
2019-09-19SCI_8188529475945937.docdoc 5f1d9413e25914d450a291cb6fac4d190d90a8b0338cc5b89a03eea3161d82fbn/a Heodo
2019-09-19BL_3138960529446_C.docdoc 53207f71693f0d164de409951d7d092c03ec170bcf7cc22000ebe42ff0bb92a7Virustotal results 33.90% Heodo
2019-09-19INC_32290417821_EQ.docdoc b4039280d422b5967b0bd65d0e6c6e14779a96107db95f743e6ed22bb3431e1an/a Heodo
2019-09-19WZLD43QM32IA.docdoc f6c68a96fb0c631b24f43bb3dff8f078fc21b82acb93e6dc09bc96a0ab3220e1Virustotal results 33.33% Heodo
2019-09-19FILE_5823GIU5M1Q2NG.docdoc d7db938ad87a941db1ae116587e8e4c6cb54efc048e3a0691cd5fc83718e8258Virustotal results 38.98% 
2019-09-19RE_921093497850_09192019.docdoc da386b79881e96de9d106c20db74326767723d944ca2d0cf39a07262b6936277Virustotal results 25.86% 
2019-09-19FILE_49344977364467761.docdoc bfa6d60215ee3a2d405dac8113821270edb2c9f905606be6619212f2e3d6a9baVirustotal results 24.14% Heodo
2019-09-192446795007_O.docdoc f7cf183fb50dd7e683937f2d19b7fc9bf421e0e994fbe22a996b8da2f0821535Virustotal results 25.42% Heodo
2019-09-19INC_704083027232351.docdoc 7966a29a6ce29618612b8f0b33fdc1ff135591856d0d3e18b551beb7abab28b8Virustotal results 25.42% Heodo
2019-09-19SCAN_184255613033.docdoc 95418e88bc860ab85be2e8142c07f108030a01c684a6a4d10809d2d0aeb73de9Virustotal results 29.82% Heodo
2019-09-19PO7QXRK8E33EIKD_09192019.docdoc 06c0ec716991d480b71433ccacea9eae43f03e334a7efdc709e68ebd8b19956fVirustotal results 23.73% Heodo
2019-09-19FA_8DD8TE39H7TQ_IWO.docdoc 4c696a748f8cf0b944d8491fdea838b8a360caf80254529b3e5dc906a0b855a0Virustotal results 25.86% Heodo
2019-09-19PBU_531PGI3UK75SC8_V.docdoc 3ee6cf4d3719b5b15219e606cb5c2541c0596d2d385cd95aa871311b7089bb2dVirustotal results 30.51% 
2019-09-19LLC_5647578446.docdoc 781115675dc2a8a55517dbc1259f8d2da0cf2f5c26337b546ca992c98a789684Virustotal results 29.31% Heodo
2019-09-199626038772893.docdoc aae4026b7af28b799a2ea4fd6db48c0aa2dec136e3b1f5a6103535d227968db4Virustotal results 28.07% 
2019-09-1970934784450094817_BW_09192019.docdoc f7adc55aefc419ecd17e66583ae04a075c290d5e1ea9de1e5915ecaa67759a5bn/a 
2019-09-191733HDMPTYXBYZ.docdoc 777cebe53a886256738fcbf461e8a640086e10f808daa7cba78d134ee91f2882Virustotal results 25.86% 
2019-09-19FILE_84285028479699075_MU_09192019.docdoc 0b78d373dfc45563910974a47cfc39cd41d3729b80483638e056e9d99fea71d4Virustotal results 22.41% 
2019-09-19FT_EVVV1ZS9S.docdoc edb8127348f482a5e0c4bab5d6e9df90a15742fcdfe0d847238bc74f7373b952n/a Heodo
2019-09-19FA_036653786111836.docdoc b6f9a2ce267311c1f197215fc9fcd791b0cd53d5d82a5f9ab4c167b427e3079bn/a Heodo
2019-09-19B0IRU6HLCB.docdoc 7072c9e45facf56b99407af7b5bd125273dd64ad7315cd186e57afb1a70c2500Virustotal results 23.73% Heodo
2019-09-19LLC_OY4G4D8LML.docdoc 60af3a70b94843c82bf30f09807e168c273bf16f283a5b62b66f004ded127342Virustotal results 24.56% Heodo
2019-09-19INC_AM06GZFK0U9.docdoc 6901f010e00319c23fd57e7040f3a215cc0f7dbbd663062f25e40dd22e9f278fVirustotal results 25.00% Heodo
2019-09-17FT_319541372863032_M.rtfdocx 9fe890f4a1393ef301e24b02ab3c173f230ad7a982808ce6daf130c861422208Virustotal results 41.67%