URLhaus Database

You are currently viewing the URLhaus database entry for https://www.okankoleji.com/wp-content/uploads/2020/6yjxunji5eqi/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:728037
URL: https://www.okankoleji.com/wp-content/uploads/2020/6yjxunji5eqi/
URL Status:Offline
Host: www.okankoleji.com
Date added:2020-10-21 07:52:14 UTC
Last online:2020-12-26 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-21 07:54:51 UTC to abuse{at}ttnet[dot]com[dot]tr)
Takedown time:2 months, 6 days, 14 hours, 25 minutes Bad (down since 2020-12-26 22:20:44 UTC)
Tags:doc emotet link epoch2 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-22DOC_IUP_100120_RQZ_102320.docdoc 838408d31e494e72b257feeec73407a2f778e6ecc47754ae16af0290515dc9fdVirustotal results 42.00%Heodo
2020-10-22K_97771505345800629515.docdoc babd6a080477d8f6f7854fd6b50a264c6e6fd601388dfacb28ef224a8b08b8c4n/aHeodo
2020-10-22FILE_21309607.docdoc 143a635255333363ae3017af09505f23784d4fe518164c2c25d97f8b8ec77e4an/aHeodo
2020-10-22FILE_D9B1QUKHOKAM97.docdoc c5e2ca43cfaf08706098c33d599b0b3290e871331e604cc8ca58dc71794c8183Virustotal results 42.62% Heodo
2020-10-22INV_PO_10222020EX.docdoc 925ed11830fec50e20b4c723d541a1fdb62509d4bae13118c400ed2bc76fca4fVirustotal results 41.94%Heodo
2020-10-22INV_PO_10222020EX.docdoc e3cd7451ef720df2cbc18258725e7d4e5b881f0ab970b5d1f9343c1d9754d2acn/aHeodo
2020-10-22FILE_CLK_100120_NOO_102220.docdoc 1e2ce6f7d21745dfd29a2251a7cfc9aa29962b2aa4283e160c20ca2166e2f973Virustotal results 39.22%Heodo
2020-10-22YDD_100120_ULL_102220.docdoc 28061fbdc60d3031a20e1c8f75d20d703307a03ba696fc87e507c3a356e0ae68Virustotal results 37.74%Heodo
2020-10-22AZP_C5E5OV7QNCCY93.docdoc 9dfb5e6e2134b14b82e9f8ec6fa56919f65c57d95c28d9c2bba1fece5a4e0082Virustotal results 38.46%Heodo
2020-10-22RPVZEQM.docdoc 44be59f199c5d2d4d0dcfef847d9e611abcaab3d8223b63fcbfe9a5d3c6745d5n/aHeodo
2020-10-22BAL_IXI_100120_RWO_102220.docdoc b7fca993ba0280a6ae9d376c6e08462489275971b8d09a4faa7194332be65937Virustotal results 40.00%Heodo
2020-10-22N_NZC_100120_WUF_102220.docdoc 7a2e6cd2e23620e7dd3ac4811e5b79b7532fb6d910e96109e46bd47b0b4b5c2bn/aHeodo
2020-10-22SRF_100120_PMR_102220.docdoc f96bf3a1c2f289447b8d80a94b458e8987c92d191d6fe9880b1f21be1ab78abdVirustotal results 37.74%Heodo
2020-10-22Z_36519027.docdoc 6f64e8f7b58ef57d185a9150be2954a871855e0c33586a9309652e7b16a333b5Virustotal results 56.60%Heodo
2020-10-22XMPB_XHY_100120_VOR_102220.docdoc b4461b5c2c529cceec7d5f7ca41dae1c6f767b6fb54c560269f4ddd7d64878eeVirustotal results 43.33%Heodo
2020-10-22REP_QK2571320816JB.docdoc 864d0a9fffea983ef2c1137ddb09a42b8bb880017d0359af9c5758b250bcca9fVirustotal results 47.54%Heodo
2020-10-227247229112321232670.docdoc 7672ae3ab7ee30ee3ef086ec0b9ced8c85e56d045f12305531d826ba491237b2n/aHeodo
2020-10-22DOC_HG6469112424OY.docdoc 9bb4de39d9e3b645efd9378896791c1cdee73c0c1501b95fde6b2adb1334c0e6Virustotal results 49.09%Heodo
2020-10-22X_TU2784312985XM.docdoc 81212e2cfa49f33852afa0465e2c4c9fd4a245340e8847009dd5d40bbb0f6751Virustotal results 46.15%Heodo
2020-10-22PO_10222020EX.docdoc 7eaf0df9dd2a33ee958384a9472366f58f1c0a204360efea6a7f8b0d298560d0Virustotal results 45.00%Heodo
2020-10-2236823512063.docdoc 3c013d9a4c751ab4a02b2bede92bc17a582567371d7a0707aee20c91cce5012dVirustotal results 43.55%Heodo
2020-10-2214735404.docdoc 4224abe48af46cd9b10241d21624b0705482576c13400089ddc0e0b9f9ca0714Virustotal results 45.16%Heodo
2020-10-22INV_19382181.docdoc d7d4f0e3118be6b096fce94e099d314a78ff45b33b0c6db9993b71d66b171e6cVirustotal results 45.16%Heodo
2020-10-22REP_80815315.docdoc 17fd95244a412f93eb10c00778ef49fe927af9a1575cef0e9fdc05e81578a6f9Virustotal results 47.17%Heodo
2020-10-22BAL_YHC_100120_PFS_102220.docdoc f3bdfdeda759d384ba2dfe4792bab80ad4aa7354badad324c69e0f4c095cdef2Virustotal results 45.16%Heodo
2020-10-22XO3086808419HM.docdoc e342a83dbf0571e76314698c335781b854f2aa0069942dfe0163c3936b71fc63Virustotal results 44.07%Heodo
2020-10-22FILE_AG4EBU70B7.docdoc c0936a09ea5471f2231fa2a66fff1dbb1c8f42f2a37d63e01ea45b4d40682d4eVirustotal results 45.16%Heodo
2020-10-22H4LRDM4BGM3.docdoc 4b59c4db6b4d14e2dfe7730fe25ed0dc21bb251a5c1b053cdd70e28cfc195867Virustotal results 43.55%Heodo
2020-10-22REP_PL6717825676XH.docdoc 0ed13bfe440f265ced87a03e27334e5bb59ad3d45b345e526577b6d168922975Virustotal results 45.16%Heodo
2020-10-22FILE_YE4419447395CX.docdoc 0183b5d51eda544d62b1cd8c412328d860d3f567131825824900cc45936aa78dn/aHeodo
2020-10-22FILE_TQB_100120_LTZ_102220.docdoc fe51fd4c0a680a852cd8d8b37f3edd5ab6f86cfa69f7ad9df4dc7cd82301a29an/aHeodo
2020-10-22INV_13983290.docdoc d810adecb2a17cc42025465a49799119896605f16af88bb79a6342746b7cd8d8n/aHeodo
2020-10-22INV_OB5969281859PW.docdoc 2eef34160c2eb32badd3a16ec6ca60426491b8c7d8e986350d5646a66074e640Virustotal results 43.55%Heodo
2020-10-22BDSII2W3G89YOW5J.docdoc bad9235b37efab34f7e6cf91e6a80803fdcf8903e2c61d0d6c1f5f9d773da112Virustotal results 48.08%Heodo
2020-10-22PO_10222020EX.docdoc da03a9b55b6989c3afc8a859785e254418322eb601e9fcf2ce58da55d9bc7d0bVirustotal results 49.06%Heodo
2020-10-22DOC_PO_10222020EX.docdoc f4485fe8056305da48ac8453716ea0fa9c6633da1a1f87e01dae3908da1bbbe6Virustotal results 46.55%Heodo
2020-10-22LVKR_PO_10222020EX.docdoc c343246a8b6df26e48dedc87a71762563be3e241ea28994ad1e2d0700b823f8dVirustotal results 51.92%Heodo
2020-10-22O_987521499995.docdoc 775be0a86b7a5d27adf04eb982cbd8f223f06ae88dc5f6a33a26774d707f7bcbVirustotal results 48.21%Heodo
2020-10-22INV_OU2926215722HW.docdoc bfcf012480833949d47a52c43762fccfd26a1785b134d1da9a84a2f91bca0778Virustotal results 49.02%Heodo
2020-10-22REP_DJ5813934564PN.docdoc 2622c411514e2ebeb404ff72a11abb8b36da194d0f09dcc95869802a01cf4a20Virustotal results 45.76%Heodo
2020-10-220823473293002.docdoc 29747a11e9ffbd0668f9b880137f1051a27677c4f3bf0a17ead5299fb5857946Virustotal results 46.15%Heodo
2020-10-22UTFT_0398247808.docdoc 7a9d24e23c3cd1701c2de8826db43aa1dc7d2b73c6c4fd50f491276725a2ad4bVirustotal results 46.77%Heodo
2020-10-2204678392.docdoc 0b25fca35bd60d2257616a1c1adbf89fefba07969c5a0fc3aa22d3f43ad7c2f4Virustotal results 45.00%Heodo
2020-10-22W_PO_10222020EX.docdoc 9c0aa6a67f05f22e0bf2889fef6bb38dbbc89fa9da70a8b6ac6cfe0b45f3b704Virustotal results 43.33%Heodo
2020-10-22REP_X6DU5OSTWKTE.docdoc ac34efa35d04bc35c3bc9eb52c130c25c9841995ed37b75e3f9e04d7c2599bb4Virustotal results 42.31%Heodo
2020-10-22XHS_100120_LSJ_102220.docdoc 2da1ed7b630f4a606c6c65a41dc9c852015d64174113023eff5a63c64f5eac0dn/aHeodo
2020-10-22REP_523633274318.docdoc c4453119ba010924fa6571eee7895d995ccd52dcc8380f3b65aaa2bb6508290dVirustotal results 41.51%Heodo
2020-10-21UBR_100120_BCF_102220.docdoc c54cc066f4ec58fa457a0f6134fb83321e303ee18aa2e2f9e0e46187e2fb3a95Virustotal results 41.94%Heodo
2020-10-21REP_24388230485016.docdoc 890535144da2084ee8e9431e6521be9719100cc5bec7679a4d7bdce3763a692cVirustotal results 41.51%Heodo
2020-10-21REP_68349619.docdoc 00121862d5519145af1bd9333cebd569ac5843527b581dedcb4505cbd9488c0cVirustotal results 39.62%Heodo
2020-10-21B_50485075419039.docdoc 2b7d9ef7d6b56a86f2a182683da404a4f463386f1fca26f49d9a930f72d298a6Virustotal results 39.34%Heodo
2020-10-21FILE_ZPY_100120_XBU_102120.docdoc 707a2acd195f4e2ac6ab0bdd8c10bb19a6d95938a957ff75aab954aba3526fbfn/aHeodo
2020-10-21QZG_100120_YXV_102120.docdoc a28398627e5a0e0869aa7177f328559dcae1253a785594871a5f33792172413aVirustotal results 32.26%Heodo
2020-10-21INV_34124121061.docdoc 6c52ba615fd75e8a7738fdd98fe8ff427af4329304aa95229333232c92d814f0n/a Heodo
2020-10-21DOC_OFR_100120_PBB_102120.docdoc c92778df4ae556cc2ad66979e6fafa9256ce4c9c7d0457c6525711429def55fen/aHeodo
2020-10-21L_GTB_100120_ZYJ_102120.docdoc c0308a4a6567ed36df7165b3cffbe26f676322783de09900dd7b7e6b7d642b97n/aHeodo
2020-10-21OXY5916ZWHPC08VU.docdoc 801d055e1eedecef11caac3bb1c618c0699c6f601404d03fcb2d2b1421c3b03cn/aHeodo
2020-10-21ON_MRT_100120_PBS_102120.docdoc a8e0958e9f5cc471c0d6f5e23d002544d61929844383b17429c383146a68911cVirustotal results 19.67%Heodo
2020-10-21798642611096129.docdoc c5a24c44676321aaf9dbcd1eba6df9c5ca6433f79184f914f8516a94077eb5cfn/aHeodo
2020-10-21E_288259101849102055855620.docdoc 9bac5aea4e602665d813c11648cf1da3f9fe143d1e41aadbd68a146a050eb52aVirustotal results 33.87%Heodo
2020-10-21Q5ZMGHUW5RPXO.docdoc df23f7673bff775b6e684f5ba9d205d51e926537e185534fb4726ce87e541f04n/aHeodo
2020-10-21REP_UGS_100120_IYS_102120.docdoc 3870c4b69f68d86fe116181343d8d6d97a22d191a028b02f300f0e5d1e33eb60Virustotal results 32.69%Heodo
2020-10-21DY9484796254SA.docdoc 0ee34b08635cebc909a2b1768d921c645fb1cf94ddf18ada0c4a5bf5f9481bf2n/aHeodo
2020-10-21FILE_WXJ_100120_FFD_102120.docdoc ce72abdb386adab53d71d068388c21107144e7d9c1acfa2f898d0ce6d7b2acefVirustotal results 32.26%Heodo
2020-10-21FR7573573112YW.docdoc b97f1b7383623d24cfb725d25a28d8878a36f857a4f4e06cb475b1ce3538d343n/aHeodo
2020-10-21DOC_PO_10212020EX.docdoc c9005b11db864adc5c5393451fc9bb77fc67fab38c00ad806790a4ac7245c80aVirustotal results 27.42%Heodo
2020-10-21BP7800287584ZQ.docdoc 0564c8bd86a30a6d5f73adf8e176a2b82925865e9ab188708c901e865405bc34n/aHeodo
2020-10-21DOC_BVE_100120_KVX_102120.docdoc eecb224f52b8de54b58ba589efb3044d6c88f70246ec6dd1c134b186d1d8c388n/aHeodo
2020-10-21DOC_QSG_100120_CXZ_102120.docdoc a2ff9d64e27e7cf089d0bfa4d9bae935db0cc9881bf6767dd311ccf653fe64b6Virustotal results 28.33%Heodo
2020-10-21DOC_QE0LW1D6FR3WD.docdoc 345865d30681e3e80a301984ee82920018dba62cbbade4673c33cc2a0aa9555fn/aHeodo
2020-10-2163655367.docdoc 71c25e3712abdd3d405b0a43f2819fb51d16dd9bf3c5fd5c9ecd04b028240533Virustotal results 47.54%Heodo
2020-10-21RD0253296233NK.docdoc e7863e06fdf3830b0b5b4c8f97dac6420a04c0fae7f728aca4ebe046534b9b0dVirustotal results 50.00%Heodo
2020-10-21IFM_7380249965840730786573.docdoc aef69b034379dfae45642c5c2271b27f04298dab56a9de3b608ab2d3cb00fa72Virustotal results 45.90%Heodo
2020-10-21REP_2630743489393.docdoc 7afb38a81dfd3bd90de1507b16ccc5ca62644ae6420c8701cb9fefad55f4309dn/aHeodo