URLhaus Database

You are currently viewing the URLhaus database entry for http://dmgkagit.com.tr/LLC/TDG9437392338FTZDPQ/1195419045/QP-KHK-Aug-08-2018/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:40202
URL: http://dmgkagit.com.tr/LLC/TDG9437392338FTZDPQ/1195419045/QP-KHK-Aug-08-2018/
URL Status:Offline
Host: dmgkagit.com.tr
Date added:2018-08-09 05:14:59 UTC
Last online:2018-09-08 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2018-08-09 05:17:54 UTC to abuse{at}cizgi[dot]net[dot]tr)
Tags:doc emotet link heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-08-09WIRE 1O Aug-09-2018.docdoc 0fc3c15b02aa3178c2039774ab9f759d53d14c9ace5785662614bc7fb1330871Virustotal results 32.76% Heodo
2018-08-09PAY 82079OCG.docdoc cfa7724adc8ed5123e38607f34fbbd7bbdeb531ff1456b0733070f15c2ab1217n/a Heodo
2018-08-09PAYMENT 396GOSXGIW Aug-09-2018.docdoc 432e420e92ea7d24bd6ce29a64e707bb01de7fc178abbe4a1563be91acbce3c9Virustotal results 31.03% Heodo
2018-08-09WIRE 6RKKHA Aug-09-2018.docdoc f9074f28aaa45903dad08e615cd836241f83bf7a43bf500c8a09785eb774e547Virustotal results 31.67% Heodo
2018-08-09PAY 0526733ROUGJIT.docdoc 4e1b752854a3087ac35addcde982f4f9b4b254a3601642fb0142ebb3803dfa34Virustotal results 29.51% Heodo
2018-08-09PAY 702848MBDLWNC.docdoc 4234d1c86ec274f439ff4948c531fc4ba9f1e78a0bade4ead82da90bd3272fa1Virustotal results 39.34% Heodo
2018-08-09ACH 6907A Aug-09-2018.docdoc 9c45f42b5e6c88fc0d80708c11a9931be80e44aaea9a895379b8c8e2d92e1d19Virustotal results 39.34% Heodo
2018-08-09ACH 0848421XHKUC Aug-09-2018.docdoc 16c52af73c5ae5f2b52196cc111f1b3c924b0dc4514765728826d8c20331e36dVirustotal results 40.00% Heodo
2018-08-09WIRE 764QW Aug-09-2018.docdoc bbf29576a9e6c27d0a9d3fb3db156cf40fd0e36b540f12dfd63eea99e41f6defVirustotal results 37.70% Heodo