URLhaus Database

You are currently viewing the URLhaus database entry for http://omeryener.com.tr/stylus/NpWCrMKv/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:422361
URL: http://omeryener.com.tr/stylus/NpWCrMKv/
URL Status:Offline
Host: omeryener.com.tr
Date added:2020-07-30 20:06:04 UTC
Last online:2020-11-02 18:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-07-30 20:08:02 UTC to abuse{at}internetsahibi[dot]net)
Takedown time:3 months, 4 days, 22 hours, 46 minutes Bad (down since 2020-11-02 18:54:22 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-08-01invoice EUWT2085 732368.docdoc 56916942bc59a1ae0cc030beaf907b54631390e0a5fa7d75bce1f120df88d843Virustotal results 52.46%Heodo
2020-07-31INVOICEZ9011038815708.docdoc 604d8d4b25d82a9fa60525c21b4f7ff9f0edf0d00aea808ceef6bef8e9e4f4c5Virustotal results 49.18%Heodo
2020-07-31Inv KJ0797 21286431.docdoc d435dd55cb5ac574d2109b9052330650fb4c355ff4cb2533077281558e7d4de9Virustotal results 46.03%Heodo
2020-07-31Invoice-80-3605291.docdoc 56e8a51e917d57655dd5612da8b9618280c29273e601c8628c787029996d1823Virustotal results 48.33% Heodo
2020-07-31INVOICE_NCG28_3869637.docdoc f7188943259ba89e508eeffa4bd48ce022205b06f13e18944c59e419604dd722n/aHeodo
2020-07-31INVOICE-GWC46-08868483.docdoc d4c0573790c2e02c30dc3ef6e219a26840751e18de0537fb023782af9db88116Virustotal results 47.54% Heodo
2020-07-31Invoice OB887 2972557.docdoc 015ea078c5fd0a7e7358750b113536aa28746f179954e4c37e6185b99888c39dVirustotal results 46.77% Heodo
2020-07-31Inv_RA919_536602240.docdoc 8d668df833984a5c527237ca2ab0cafd0d9358925912ce0c64cfb8fb749d09f8Virustotal results 47.54% Heodo
2020-07-31Invoice-972-067164.docdoc ec21525a8852265e8892193f896c9002e6f4a525c42e980120cdfce6e8ab3d9fVirustotal results 49.15%Heodo
2020-07-31Invoice-972-067164.docdoc ec21525a8852265e8892193f896c9002e6f4a525c42e980120cdfce6e8ab3d9fVirustotal results 49.15%Heodo
2020-07-31INVOICE_V6_7722921.docdoc 286e883e3fd7042dd61a284aafd1bb8cf55e274a5a5cae78da6f6c2e8084a24bVirustotal results 45.76% Heodo
2020-07-31invoice-YG9-61008305.docdoc 1f67d01d996fcff5abb353bc5fbb354191d96c315d7341a680029f01573dac3fn/a Heodo
2020-07-31Invoice7339734915.docdoc 80b42f3e3f2aa0e14a13b15336be50853898ab711533f01420be367c69d9911bVirustotal results 47.46%Heodo
2020-07-31invoiceTA61218724.docdoc 6157dbba4f741eefa74c0f002ed410a6117e719c2e626ea9dd8668d7452afa24n/a Heodo
2020-07-31InvXV087608299127.docdoc f38d973c25ff2fc00109ee8ed445e3bdaf3fcaeff6db54b863ad025a9104ae24Virustotal results 49.15% Heodo
2020-07-31Inv 2 3386580.docdoc 99b43c6e14bfddc98c87cb9dc35cd89b59a2797e8893f5005eb0868226027f35Virustotal results 46.55% Heodo
2020-07-31INVOICESHNM72762751594.docdoc bdfb558047f777f0a0fb66e81bab1d2eefe9a0041a72d203b52456717f30a594Virustotal results 44.26% Heodo
2020-07-31INVOICE-WHFY2772-29894673.docdoc e8960fed4c714be347182294b90b9fc936d842241905fe3e4376bf7c904b6b1eVirustotal results 45.76% Heodo
2020-07-31invoice NTO0 37599121.docdoc ffcca6f9140c3ff0a3f0e0b888148ebf2d55a3ccfa54636106362ea6f9045f0cVirustotal results 44.07% Heodo
2020-07-31invoice3752-61793316.docdoc 3d8ef147ca84e9943fdc850171e2de9c05b0db3472cd05901e4f109e7fbe07f1Virustotal results 50.85%Heodo
2020-07-31Invoice_ORW608 2382738.docdoc c7ed06b6f4284ba3fd857f03875187654aad78683efa88d3ed984fe057d484abVirustotal results 50.85% Heodo
2020-07-31INVOICE-GO0098_621190.docdoc 0154af8049b8a7ec498151777f31d6e971c61bdfc439fe1a8150ad0f69c0e4f8Virustotal results 50.00% Heodo
2020-07-31invoice-A712-226176549.docdoc 5399417505ae67bdc2253943f273fe2b69fcdb71294530cbfe0cbe731a251b48Virustotal results 50.00% Heodo
2020-07-31INVOICE N5-14057143.docdoc e3b83c00a51a401c88f8ab7d52dbee1d71b7a843fdfe5c2a6f3b76464efd77b2Virustotal results 50.00% Heodo
2020-07-31INVOICE-4_308848.docdoc eae169c0ec808dcf097bfd419bae07e5c001b1157d781d90b037250ea07fd4bcVirustotal results 50.85% Heodo
2020-07-31invoice-UOYR3-8446380.docdoc 09d8024f4904f92b615ceabf3c50d048d8600e410bd728c5ca6a09f15ac8d0aaVirustotal results 51.72% Heodo
2020-07-31INVOICE_I9148-764253.docdoc 48c0326e786deae1ebf50df4773916c79325d15261708cccbc89d2421c639729n/a Heodo
2020-07-31INVOICECTWH468 510800.docdoc dcfb38249b589a264dd4ce2c25853335f1399685fcd68d68c337f308d110a793n/a Heodo
2020-07-31INVOICE_Y5124 665560.docdoc cee085d16cb1dec28ff7ef5bd5399111ba8a5e26623b17902866e886144c228fVirustotal results 50.85% Heodo
2020-07-31invoice535-026719057.docdoc 468c03e5514c45db80f93d359506f99bcdc95812e5e37680b531dd2fd1cba7f2n/a Heodo
2020-07-31INVOICE-5 197171390.docdoc 2ab3a5f443403e9ed1928d27e4e551ab95a6532d540b98d5103f0ed8a45a75cbVirustotal results 50.82% Heodo
2020-07-31INVOICEYM9020{:REGEX:.docdoc 2789d1d3eea1e5dcb760faf9bbf395f267ec901bc7c52a67ae60133050897609Virustotal results 50.00% Heodo
2020-07-30Inv-BD7 12235157.docdoc e42656550ed8d746cb8b453d28e1ca374da03e76bdf6b65633f3b1bedd1e051cVirustotal results 50.82% Heodo
2020-07-30INVOICE-VWMP815-15993573.docdoc 213e581104ed3930497515d2be67c1c61a9ab1060474d3e43986aff52b418099Virustotal results 51.67% Heodo
2020-07-30Invoice_WF8-93888524.docdoc 5ae9df4be21b3400965fc280ee49768b7e00b21fde24a904ece809bfa5c19491Virustotal results 50.00% Heodo
2020-07-30INVOICE_EA18{:REGEX:.docdoc f2bef647cf5f376c3807d6693d2fcf28cd42e71629fb0cd64847604a0e189081Virustotal results 51.67% Heodo
2020-07-30INVOICE JQY80 949085315.docdoc 1c8026d6bd75a1ea091d6a6676d3a7e3bcba3b17717e21607488b9fdb762fba7Virustotal results 49.18%Heodo
2020-07-30INVOICE-XLJ98-1068901.docdoc 43fb81fd0a1e1644705fbac16fbcfa0bc7c8158e25f832bcc7a1961af150b340Virustotal results 50.00% Heodo