URLhaus Database

You are currently viewing the URLhaus database entry for http://gediksaglik.com/wp-content/available_box/close_warehouse/7157500993304_IUSSaJSE/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:301060
URL: http://gediksaglik.com/wp-content/available_box/close_warehouse/7157500993304_IUSSaJSE/
URL Status:Offline
Host: gediksaglik.com
Date added:2020-01-29 09:29:04 UTC
Last online:2020-02-01 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-01-29 09:30:03 UTC to abuse{at}as42926[dot]net)
Takedown time:3 days, 7 hours, 42 minutes Bad (down since 2020-02-01 17:12:29 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-01-31doc_2020_01_31_969.docdoc 386a8a40fd948a07e5a229130a88fbd8f2ed8295997044f5a5f9a301c2a6ffa0Virustotal results 20.31%Heodo
2020-01-31Mes-2020_01_31-J52243.docdoc 5e1a30103fd40640c8a5b91d5dadf5564896d808711410002020fa9f136b080eVirustotal results 20.63% Heodo
2020-01-31rep-J1903.docdoc f1f519d5fb3a2bf863324f7dc6f2a6c0d30b5ede2f762711b0710bde9ee994deVirustotal results 20.63% Heodo
2020-01-31Dat_2020_01_31_3839136.docdoc c8bd082a9174038d1dffc9a1fe5595314f3e2cd4a2657033f2e1efd3540a3df4Virustotal results 39.68% Heodo
2020-01-31LIST 20200131.docdoc dd7ae3bc161b941e8ee4831dd583f504907c07c32c1d64d330d1f08e2030707aVirustotal results 39.68% Heodo
2020-01-31MES-20200131-6874.docdoc 994ab85c2ed2004c1ac4b7eb7b3300ed9453ac6f02787c92e226c3cfb19cc939Virustotal results 38.10% Heodo
2020-01-31Dat_20200131_40808.docdoc 6fd53c9b4fa1bcdf1ef2a095d2af6db48d7d4034e1d5c9e32b23c12853ab6c10Virustotal results 35.48% Heodo
2020-01-31Inf-DR811035.docdoc 95e97a58c14852a0f72290721cde5276dd7d9255c97e0bf0c166a85955db30afVirustotal results 34.38% Heodo
2020-01-31File_20200131.docdoc ea51148cdc0467878de5f7617a51eea0063f03f860e86b4d5c5ea04bc37db0dfVirustotal results 33.87% Heodo
2020-01-30INF-20200131-31081.docdoc 1d75ee01f877ad2ad951d51e2396cd0c0c6be72e1b2fc190b59b64b733ddfd5dVirustotal results 34.43% Heodo
2020-01-30list-QNJ3278.docdoc 4a7b3def17806559bddd23f94b5925a3fc9f5c70eee18e5a9bfba37ccbfa0e79Virustotal results 33.33% Heodo
2020-01-30Dat_20200130_3726.docdoc 8c8f7298785538a05550f91ae8595438ec40d6ee1eeca5c8621637837844db13Virustotal results 34.92% 
2020-01-30file 2020_01_30 L301926.docdoc 11078ef33eb1bccdd13fee326af0b5a51e5d9bfb1335c25004cf281c01ccfdc3Virustotal results 37.93% Heodo
2020-01-30arc_2020_01_30_TBO37920.docdoc 33bff75b0b0477fe5ebb1baa53a6e72f2c569227d8ab61eddac59592d02d28faVirustotal results 32.26% Heodo
2020-01-30inf_2020_01_30_33953.docdoc 2d865b1d71a6827ca4eb3b7f884d08cc2acbcea2e862ce53a15cea4128959e8cVirustotal results 30.16% Heodo
2020-01-30Arc 7883.docdoc 8fccb53dc5d9058d11d344f7fbd34609642b1b1d2a9e4699134d165ce6ab21a0Virustotal results 25.40% 
2020-01-30List-2020_01_30-JV53972.docdoc ddf014e6d9e70bc1709c2ccde24524fc72092f929ea37df901ee88f152ae4c43Virustotal results 28.57% Heodo
2020-01-30ARC_20200130_59380.docdoc 6686a87ce4ec03815de4f384705a2a876aee4195ecaabf95d727a6d63030d4e8Virustotal results 29.03% 
2020-01-30ARC 2020_01_30 D100.docdoc 093fe06865cc5cd449e9684d621efaf181505881f5e0e818b0ec9c4459ef1ba9Virustotal results 22.95% Heodo
2020-01-29Arc-2020_01_30-3927133.docdoc 0c899fbd963450fdf0d3d487fd91c0ef00e8c4191115d99d58a6b75476b06254Virustotal results 22.58%Heodo
2020-01-29File OOX08738.docdoc f3e0ea1e9f70b58a16ab7b737be16e81a1868a88fcdd4de0c1fb6c4a3aa6b3b9Virustotal results 40.32% Heodo
2020-01-29List-20200129-77295.docdoc de39c0b0ba341eb6a6c1cc3bff5a3dede93907976a77563396df5165f422ac7fVirustotal results 33.33% Heodo
2020-01-29ARC JN484093.docdoc 49e28f382793143c68d57be83f8e7252dea8674a30f06b9063dd9ccfc4f25e85Virustotal results 33.33% Heodo
2020-01-29rep.docdoc edcbcb15f211dd24abf15ab6fc923528a0836b3e8dfb5bfab6742a5a9ef384adVirustotal results 30.16% 
2020-01-29inf 20200129 6744360.docdoc b7be54905b7c6faa05793dcfbd48dbe4b489f5424a08a31cc09e12ffb7390060n/a 
2020-01-29Mes 20200129 T299.docdoc a6f8d6e5f80b47b55146e82c61a78c5ed8c451bcb68d157dee574d02c768ba30Virustotal results 26.56% Heodo
2020-01-29Arc-2020_01_29-797879.docdoc 717b785246dc9287f784e18696ce1abfbcf2289df5d5fbd124092943be92e779Virustotal results 26.98% Heodo
2020-01-29list_885463.docdoc 41f2df35fe03375e39b939c95142a9c04e1613e60bcdeb4f50ea339349d04243Virustotal results 26.98% Heodo
2020-01-29Inf-20200129-FS14902.docdoc a570252bf1c2fa10675c88c55f9ef2362c2c7d3ac6e6bc1400102a49f2aac861n/a Heodo
2020-01-29File-UU976.docdoc aad9025b37d955a0929dc76185e7b87d374e735e3a30a258bd549dcfc7a1bf27Virustotal results 26.98% Heodo
2020-01-29doc-2764097.docdoc f8a5336b371ee216fc6fb0d0b23eca343a30c1d0ff719e61a847bffaaaf64a21Virustotal results 25.40% Heodo
2020-01-29Arc-2020_01_29.docdoc feefccb5c1a30b84dcaba182157d473bca0a5ca3541e6a9cebc2226651e9b4d8Virustotal results 24.19% Heodo