URLhaus Database

You are currently viewing the URLhaus database entry for http://bergama.org.tr/wp-admin/9r6pi-bd-573412/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:416207
URL: http://bergama.org.tr/wp-admin/9r6pi-bd-573412/
URL Status:Offline
Host: bergama.org.tr
Date added:2020-07-21 18:56:08 UTC
Last online:2020-07-30 17:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-21 18:58:21 UTC to abuse{at}alastyr[dot]com)
Takedown time:8 days, 22 hours, 32 minutes Bad (down since 2020-07-30 17:31:02 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-23Inv-K153_6361662.docdoc 548e4293f740ef77ecf074a7e8eb5ee8659eb565fd08db697ca873dc770c11b0Virustotal results 46.67%Heodo
2020-07-23Invoice ZUP51_51164919.docdoc cf2ba9c49c359ebc0d9ce182b928db8e967b6720c8d531c8366b2420ce778d21Virustotal results 42.62% 
2020-07-23invoice BM821_7249408.docdoc fd1b363068e21fa7a3e86cc0aa6134bfa46a640d70bcef686f19f57f54340f6bVirustotal results 44.26%Heodo
2020-07-23Inv-ZOM9_9452155.docdoc df314d2431bc91e51d22c2f55c6b9de5577ac0129f93014698c3e17546ae0867Virustotal results 40.32%Heodo
2020-07-23invoice T749_0115968.docdoc 823bc611785f0ac57c609d89af04775d2555e96de7529cb5c367e4690c08f6eeVirustotal results 41.67% 
2020-07-23Inv-QABD4813_484064614.docdoc c8974949fec3e295b7d7e7844cdb17d5931a697690a6be15b4863e787931d386Virustotal results 40.00% Heodo
2020-07-23INVOICE_VB35_41194576.docdoc affd22130c658e33e153da21dacd828359afe4c1bee7d621def53e3c7fb5a712Virustotal results 42.37% Heodo
2020-07-23Invoice UDKN0394_03643943.docdoc 88cca8fc8a65b95ca50edf7f8f1bc19f7c7d91935a589e7a4a88b42ea443b603Virustotal results 40.32% 
2020-07-23INVOICE-M18_013004.docdoc e96a19dec04fc49f1360224fea7d16ee6c04d29b296500a3b7edc87d31a925fbVirustotal results 41.67% Heodo
2020-07-23invoice COUQ137_801200282.docdoc 5ecb66cb399d319d7c2e24a9ae1e427ee2b10ccd3da9b2a2266dd764ba29cd16Virustotal results 40.98% Heodo
2020-07-23Inv_SY720_9185503.docdoc fc138a4add108557757b357a4de2c8c2b60832c018e4ebabf099a4f63121dff6Virustotal results 40.98% Heodo
2020-07-23INVOICE D59_044973260.docdoc fcdbd1df2994aa81348459cba048cb91f2d0c779911d4abd1ac45bd540eae640Virustotal results 40.98% 
2020-07-23invoice_PGX2092_097153535.docdoc f815f1d2c10f89e966e1637e1d1478a36c5c8c8ceb852eefaa2247c44f10b9fdVirustotal results 41.67%Heodo
2020-07-23INVOICE_KHFT8_24028276.docdoc a3d1d2388010c1c76482dd7e13f9a74e0944e3cc5d4058aeaac35a55ae6226d0Virustotal results 40.00% Heodo
2020-07-23invoice-C0516_082491.docdoc ec08cea8c07370a30ceaf1877b95d6a4e45728f9f915dfe0e5572c632fdf3331Virustotal results 39.34% Heodo
2020-07-23invoice I8533_194484.docdoc 201e851d0a87ce253787d17e5263362eda13f891604567b19154f6edb7a18c00Virustotal results 40.00% 
2020-07-23Inv_KZ1_1375517.docdoc abbc35112edb6b5259ca0c4d807e75f7faf0e59f60b86ba07082acefd30a9f82Virustotal results 40.98% 
2020-07-23invoice-ZSF4608_010151.docdoc c0689da51a6ac61c10510453b058273111d2eb315cf24c9233f055548e838d7fVirustotal results 40.32% Heodo
2020-07-23Invoice ZJP82_464322327.docdoc 5da4ed7ce6e6938d87f5b5d3add5191ebefb861c31ad2d43146c8cba80302610Virustotal results 40.68% 
2020-07-23INVOICE BNWI7_8148111.docdoc f752b3c15c7f8300d70d3d0e9680892e4dc0c6ccc7b5cc1eff59e8568a4288ban/a 
2020-07-23Inv-VTMR4107_416742.docdoc 83d89d7daf246921a8dde2e54e9e1ea505707f24f069a02034e2fe628c586239Virustotal results 44.83% 
2020-07-23Invoice-FWK9_311891.docdoc 8e10c3f0dbd69fb4a1472eb81dc007ed1e172f9906a7fa4b63ee8afd494704e1Virustotal results 40.68% 
2020-07-23Invoice-KXM5191_78852037.docdoc a7eba5ce690c5078cfc8875f5a8a07cdf7b8fe15a427b22b2620462b04c4558cVirustotal results 40.98% Heodo
2020-07-23Inv EEEI062_479281.docdoc 6e8bff5d060f35a5e75bd5b6772e3d5d52f71ec00665d6384beb8f30c8d80a07Virustotal results 40.98% Heodo
2020-07-23Inv_JC131_7389588.docdoc 660c977559837c11b18b4131f3459734a2e160602bbed412b7892829fe0c0fb9Virustotal results 40.00% Heodo
2020-07-23invoice_O75_033480.docdoc 85f78e5396e9bdcf5a8132a8a816093d283c992e100583f4d53dd02e4aeba0e5Virustotal results 39.34% 
2020-07-22Invoice_2004_52725432.docdoc 7e10a0e92fcdcd90d995ee6b0b0059e7a879145f512a34f8f80deb336c83fbcdVirustotal results 39.66% 
2020-07-22invoice RZ4898_760770945.docdoc f7e57a114b25d746fd0b4c14c656eae2c02238130d90124939885bb0b36f3674Virustotal results 40.32% Heodo
2020-07-22Invoice_ONXH08_0502905.docdoc 121ed8988b04cd935a814c1721a9f0d568268c9771e9a54104e9d603bfb63735Virustotal results 40.98% 
2020-07-22invoice 150_57357057.docdoc f18cd894f96fe1947a742b359fcc7bea8f2d2c34bc1080cadf3fcff2d2564946Virustotal results 37.70% Heodo
2020-07-22invoice ZLL6_841206800.docdoc 9906a5bee4b9e562812454fe546581f17dcea82db95ce7b846c50d1537cb8316Virustotal results 37.70%Heodo
2020-07-22Inv-OX2_9465110.docdoc cfc85cd85d337fa57852443be31264f9ca2cb5805099faf22026ca29baeffb12Virustotal results 37.70% 
2020-07-22invoice TQ2_250487206.docdoc a8377439065663a204f302e8b1ae0aa1d880b86780a7a8ddf0c2569a8a78ef0eVirustotal results 37.70% 
2020-07-22INVOICE-Z428_475286579.docdoc abb692721c19ff5f382ccfc5bd6ce5301433d4ff75f8745e73d8fa929b4ab1aeVirustotal results 36.67% 
2020-07-22Invoice_SVNX1151_3607202.docdoc 7757df52299b5b7d7d83f3b72cf1fc8415dd72f90ef93160a30e5270d9528d0cVirustotal results 38.33% 
2020-07-22invoice-OW6_31284936.docdoc a09aab2acea55dc5a41e050de922953dedd0f8177ddf8c60a56af74d25daf577Virustotal results 40.32% Heodo
2020-07-22INVOICE-A73_986464.docdoc 16c6a9dd4a72829040a232b03b8dec183f1b62ba3a8fa829760e83ce534755aaVirustotal results 39.34%Heodo
2020-07-22INVOICE_7_729598.docdoc 73ca49f367f9ccc5d7afeb6979409e1e116a8ff24d143b7cda1482204e8a12c2Virustotal results 41.67% Heodo
2020-07-22Inv_ECR428_515368.docdoc f4d6bd934ef834677a5ce5ec7204eeed8160c5898f51669c234b563c5ea13d7cVirustotal results 36.67% Heodo
2020-07-22INVOICE_748_4858784.docdoc 8d5403870d67fd083d92f1d72328054f16e6dc6d0bb546e03cbd7ae747b219e1Virustotal results 37.10% Heodo
2020-07-22Invoice TT609_165919.docdoc dba1fb0199bb0442107b66f5a8b4b1ce64d7ad603276a129789620d58eb4607cVirustotal results 37.10% Heodo
2020-07-22INVOICE 2668_3110079.docdoc 8dfca61cebea589f6fb698dc042cc4e98c14f5aeebc8ab10c8a8ae02882073a0Virustotal results 37.10% 
2020-07-22INVOICE-GOC77_6195523.docdoc cd51ca27f85c3b99bce83221b135a984e5dc890b9f3080b11e8add5bdb4456f9Virustotal results 37.70% Heodo
2020-07-21INVOICE_LWA818_5211167.docdoc c7f1f379555ef08082a617234440aebf2a68fe7c55bf8280d333518d22adbb4eVirustotal results 31.15% Heodo
2020-07-21INVOICE_LWA818_5211167.docdoc c7f1f379555ef08082a617234440aebf2a68fe7c55bf8280d333518d22adbb4eVirustotal results 31.15% Heodo
2020-07-21Inv ML85_87538549.docdoc 9bd09fd88355a1b20c3268d29be2308057a659c4b96c85a618409ec4b57bd45fVirustotal results 31.67% 
2020-07-21INVOICE-SPXR085_8677369.docdoc 9ed17331261676ac56f81432fd0de1293bdc48863867eac50012dff696d69439Virustotal results 32.76% Heodo
2020-07-21Inv-VVQL544_618815406.docdoc efa78601a195a5d90844411d1e045d9589a8249a71bf35b0132e17b31a412c5dVirustotal results 29.51%