URLhaus Database

You are currently viewing the URLhaus database entry for http://avcilarilaclama.com/wp-content/OCT/CRC8CsVjuL63BQ/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:703447
URL: http://avcilarilaclama.com/wp-content/OCT/CRC8CsVjuL63BQ/
URL Status:Offline
Host: avcilarilaclama.com
Date added:2020-10-16 19:06:04 UTC
Last online:2020-10-19 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-16 19:08:06 UTC to abuse{at}labina[dot]com[dot]tr)
Takedown time:2 days, 17 hours, 27 minutes Poor (down since 2020-10-19 12:35:27 UTC)
Tags:doc emotet link epoch1 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-1732048F 20201017 737.docdoc 294c6f87d8514072c30988bd55dd643c5c018b9f9ae05b9db1a97d034b31e092Virustotal results 55.00%Heodo
2020-10-17Doc_QIX8900.docdoc fd4a45974318a540bf249d7aa768f6d4ec1bb268bb05e5028935db34aff711f4n/aHeodo
2020-10-17mes-2020_10_17-66455.docdoc 73c8e321733773d7413efd1447245567bceaac2f4f85447e1196884a898cbea2Virustotal results 53.23%Heodo
2020-10-17INF-788770.docdoc 8763a9868e952dfb5be76162ed10b0d62fa00e1ba5baebe53f7cca486cb89542Virustotal results 53.23%Heodo
2020-10-17ARC_20201017_U34367.docdoc 1cee91ca2689e165e0a72614f98d0dc71da6671ecd0e7f32bb3d6d2710e8dd0dn/aHeodo
2020-10-1751675099_2020_10_17_9677.docdoc 90e7a0a9f215c30d103034801a89e4b61554c48bff10a98df0d09257cfc716cen/aHeodo
2020-10-17Attachments_20201017_HR8166.docdoc 308b5a0affafedcef7431861d7785ddf4db3314cf5e18d5fdbc4c0168cc63ea7n/aHeodo
2020-10-171887982-2020_10_17-FG64485.docdoc 203a54f8692f6554ad685a3d9e94ec1f3482366c3c455312540f744cbda4f479n/aHeodo
2020-10-17DAT_20201017_K402297.docdoc 6820620122b2210629007eaae85c11949f1d113edfa9e10c0a0678069bcefa83Virustotal results 53.23%Heodo
2020-10-17rep_20201017.docdoc 674b59aa10f963845214c91833225375d26e69ccece07609e8a5425a8d952346n/aHeodo
2020-10-17LIST-2020_10_17-V118971.docdoc 49bfab81e7c83836e13d24a1c3e607ce00aa745e850f110ef848cf96ab0b5b30n/aHeodo
2020-10-17Arc 20201017 OZT7590.docdoc c64264c7336d7e9f516999fa287be55be63b634b63f5ebbf1bab24e38ada5e8eVirustotal results 51.61%Heodo
2020-10-17inf 20201017 FFX251.docdoc b5ea62943f3b8f07f8fc66e4e35a1d4d12022eae32ee901b016f48bf66fec06fVirustotal results 51.61%Heodo
2020-10-1681665HQS 20201017.docdoc a9d9b8357ff803bd36d7bd0c12c770487fe774ccd22e81318606bad0f6ddaf90Virustotal results 52.46%Heodo
2020-10-16dat_2020_10_17_H25422.docdoc e6c583d968049b133209f01abf2a46bfb3fdb4abd68b5f0ef3e74881c438d1c5Virustotal results 52.46%Heodo
2020-10-16ARC_01058.docdoc d546749eeff6828f731a5f79a2352276696d9ce6d5614dc6e9779fa2dbbe6799Virustotal results 50.00%Heodo
2020-10-166298_8042.docdoc 8959ae20797df624723d7bba61da21cc88ef3750df52dd083d9eefbc5d90c4dfVirustotal results 50.82%Heodo
2020-10-1696320_FI073760.docdoc ea0d3c6f16a0b6c751479d44c06e9fc4ee4f7e47803b008c8ac0ea1ae93f5171Virustotal results 52.46%Heodo
2020-10-16rep_2020_10_17_23580.docdoc ee2a584f20b8fae9caa25baa3476b1dae0aac0d511a2a2584dde95eeb42c4d06Virustotal results 52.46%Heodo
2020-10-16UNTITLED_H311939.docdoc 10b0ede6060dd0c9b69d6519e93f211c940959e36b1e98a6dcc1ad9a4093c4acVirustotal results 51.61%Heodo
2020-10-16DAT_2020_10_17.docdoc 4c125553bd2edbf5672acedb290d618c67fab2f3b02f055bf22af25030b3cb34Virustotal results 51.61%Heodo
2020-10-16doc_AE957671.docdoc b015413e8bcf3517a1c413b7e32d1c689a414890a8158ac80e9d53b759cb488dVirustotal results 53.33%Heodo
2020-10-16DAT-2020_10_16-84534.docdoc ec0b8068eb55934e5173fd8006c8cff634922830e46673abcd0c0a2e2e6d3b4fn/aHeodo
2020-10-16Rep-20201016-391.docdoc de085b2aa71406dd284396b50a4931dc24c0648c58b6b5f8dc22b9d7b2d491d7n/aHeodo
2020-10-16273399 20201016 4793779.docdoc 946f2932db99a282d3ebdec264e3de1b8c260b12f95769381d8bc99433b66b93n/aHeodo
2020-10-16doc_2020_10_16.docdoc 0ec477654d5520def268531ea738a0d3bd64694440a9185716a92c79625e408cVirustotal results 51.67%Heodo