URLhaus Database

You are currently viewing the URLhaus database entry for http://blog.groupama.com.tr/Backup/Document/wzrushwpxqm9/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:703073
URL: http://blog.groupama.com.tr/Backup/Document/wzrushwpxqm9/
URL Status:Offline
Host: blog.groupama.com.tr
Date added:2020-10-16 17:42:16 UTC
Last online:2020-10-16 21:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 17:44:39 UTC to abuse{at}doratelekom[dot]com[dot]tr)
Takedown time:3 hours, 39 minutes Good (down since 2020-10-16 21:24:06 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-16REP_ME9227851859OZ.docdoc 90be4d140e8e68dd1b218a9ebd10ec1271cd234025341115f1cab4e3149e7f90n/aHeodo
2020-10-16REP_V2I4YZ48AK51.docdoc 81142095ca7067d93c133d0df243493b2a602818aa45374296436668bfa14b59n/aHeodo
2020-10-16PO_10162020EX.docdoc 01b41659d4b3ca5ad9f986d2029f5aa621310edb658267e5f478bd784df82874Virustotal results 45.16%Heodo
2020-10-16FILE_MU2071047110ME.docdoc 58d9abbb83b6f4df5a5dc7b782ecfc3a0a400197866d76f14500b97d206a7eabVirustotal results 46.77%Heodo
2020-10-16TGZ_100120_TZE_101620.docdoc 377a8aa05410c72d8d06b12b0bff24a6933b51ef88838ed2aa83cb18b0e2b303n/aHeodo
2020-10-16DOC_PO_10162020EX.docdoc c35986ebc1fadec0bc076c81466e8e87dd82058ca783e03545036dcf9a5d7a46Virustotal results 44.26%Heodo
2020-10-16C_98358279.docdoc 638ad04b135c3d25ab4940edbd53701ba6bbe07b16b789410b5c1d06dc9aeb9eVirustotal results 43.55%Heodo
2020-10-16S_27086031.docdoc cb781c9123caaf90b0aa1ccf875c58492ab61503576a1c169840b6ee881a95a7Virustotal results 46.77%Heodo
2020-10-16SE6848795511QH.docdoc b8031f04cccc6be26a29ea7f8ce5296fcad48e7a2aa335b460b4c62015004cbeVirustotal results 40.32%Heodo
2020-10-16S_56745107.docdoc 89157919f283aad6306a78ae43e54b55c2431a0a64dbfcef22df553bf09ae681Virustotal results 40.98%Heodo