URLhaus Database

You are currently viewing the URLhaus database entry for https://www.okankoleji.com/wp-content/uploads/2020/form/JLau/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry



Add tag Remove tag Perform URL rescan Delete this URL Report a False Positive
ID:759877
URL: https://www.okankoleji.com/wp-content/uploads/2020/form/JLau/
URL Status:Offline
Host: www.okankoleji.com
Date added:2020-10-28 07:33:04 UTC
Last online:2020-12-26 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-10-28 07:34:34 UTC to abuse{at}ttnet[dot]com[dot]tr)
Takedown time:1 month, 29 days, 14 hours, 48 minutes Bad (down since 2020-12-26 22:23:27 UTC)
Tags:doc emotet link epoch3 heodo link

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-10-295558405632TU.docdoc 2efeab91d822ab76173df70e491b2cd6881d1435186ad6659da73c4e5c5214bfVirustotal results 34.38% Heodo
2020-10-29Inv. 3402531.docdoc 2176a02ebbadceedea35c2a83fcce17fd40120ff2cc4390a9f210fc26b40a310Virustotal results 34.38% Heodo
2020-10-29INV #001742112 FOR PO #0019106845.docdoc 7e173c2910c46914628671824ef22427cbcb254a69f4c6bcd99d243a6ddf42dbVirustotal results 34.38% Heodo
2020-10-29INV #0299686 FOR PO #00328682547.docdoc afc85b56b85dac897bde5ec6ba2471b1464001d0fed7be03f90041f07a622ff4Virustotal results 34.92% Heodo
2020-10-29October Invoice.docdoc fa96cb9099caa46a364275cd11e702555162613e7d055d4319ed4a6138b40fdbVirustotal results 33.33% Heodo
2020-10-29YRD-100120 IDWM-102920.docdoc 12a1ded61ef91e5e79c4009234b54a7f4c391d254585bd931987c8289841abb8Virustotal results 34.38% Heodo
2020-10-29invoice #4980.docdoc acbe2412c4aff06ae0a1c4b17bf4acab3d67874fa57aa0a31578e524d063f715Virustotal results 33.87% Heodo
2020-10-2967278399.docdoc 64176cb24145e182cb8783aecc0c2b5ceca0e851c932775b5a44431abee2a611Virustotal results 34.38% Heodo
2020-10-29INV_2835.docdoc 407011017107dd82209d02b6714d52efaf3270f55a81de711db2f20d9b918d23Virustotal results 34.38% Heodo
2020-10-29INV_2130.docdoc 8912ed633b4518995c5cf68b1037b5f3755e2573d19b35873884074daab8e1f0Virustotal results 32.81% Heodo
2020-10-29October invoice.docdoc 8e2894731109ed42fa23af531d8d86c1ee45431edf43f96a34f71f8294100e3dVirustotal results 33.33% Heodo
2020-10-29Copy invoice #28193.docdoc b21cdfd6c2639dcbf952b105db8bcc4566643560d411abd27354cdafbb65f8a0Virustotal results 32.81% Heodo
2020-10-29Invoice 0507622.docdoc 2a132f8eb55b91975634807a5dab592f5c50ac116fe5914adcf1cdf16f9a6fc6Virustotal results 33.33% Heodo
2020-10-29invoice #9684.docdoc 62da1d16914ee7b918b84c1bfd2714584b9f6a979558c8e3c09c779b4b30deeaVirustotal results 31.75% Heodo
2020-10-29PO# 10292020.docdoc 1c6a68700c5a829d8c421561d670c1f86cb25027af4b54be19724b1b7a979ef5Virustotal results 28.12% Heodo
2020-10-29invoice #253229.docdoc b50a2289ce6842be2773eea454559c2f2295dcbfc9331beb1fb66cc5d09f6828Virustotal results 28.57% Heodo
2020-10-29Y-100120 SKSZ-102920.docdoc f96f687fe6450306d4a9a26020bd2ff7e563d75f4eafb3732b34b816eae39fb0Virustotal results 26.67% Heodo
2020-10-29Invoice.docdoc 4d17de9f2c51a0a0370ec0e01f44ca529a0fafdcd59476ccb7ec423524c52305Virustotal results 29.03% Heodo
2020-10-29Form - Oct 29, 2020.docdoc 1c8f2dfb55495914bb8f8167e616d296fd5e0b1d9e0904b65020ce536eb8562dVirustotal results 27.42% Heodo
2020-10-29INV_4355.docdoc ed51269c3602786ff6ddef3a808d8178d26e4e5960f4ac7af765e4bd642128ddVirustotal results 27.42%Heodo
2020-10-29Payment.docdoc 7ae576917499bdb77da8f95dbec37ae4f819b800e62b5f467f0900d1dd716d1dVirustotal results 30.16% Heodo
2020-10-29PO# 10292020.docdoc 154471acb1707b19c1efb5b7bc06211dd35e28a69e0db7f663b983d8712d8727Virustotal results 26.98% Heodo
2020-10-29invoice.docdoc 918c89cb1f615bbe015743c772926158f3005c4316f7436e31b5a948ad79d064Virustotal results 23.81% Heodo
2020-10-29INV_487003.docdoc 9ee04def912bfe9d3a92492ff4f8aa8170dca54f97fb376a5c42bf5f3f2cda60Virustotal results 21.88% Heodo
2020-10-29INV_020842.docdoc 7d41847fb131218d629e6bb8132dc6b2b1ce714b4090c01c3f531fa66ad7274aVirustotal results 21.88% Heodo
2020-10-29PO# 10292020.docdoc f55e4dc1405e6f36ed1bce409f373ae6aa7e6080e506ee0b8e7afb30193dedd8Virustotal results 22.58% Heodo
2020-10-294563992.docdoc 8200214bee8f21c170b9173814cac8166b9f605ebeee543870d9facdefa73d76Virustotal results 21.88% Heodo
2020-10-29Copy invoice #287872.docdoc 26ecd84d3c7a3cb416d832a5695934324e8d2b2eb5d44a4d3103d0eff7a7dfd6Virustotal results 22.22%Heodo
2020-10-29PO# 10292020.docdoc dd46084c550c55905276f7c43df92dbe4a91d31ba7afebe0313262ddbfbd56edVirustotal results 22.95% Heodo
2020-10-29invoice #330018.docdoc 8072c6df686242c611cf697252c4e98152f0d6bd68e125f1527d3cc6192707a0Virustotal results 19.05% Heodo
2020-10-29INV #0339075 FOR PO #73262001.docdoc 4076636560061cc4ff5eef39af1175c75192f566e214b6cb17be9f9f819c0390Virustotal results 19.05% Heodo
2020-10-29Payment.docdoc 36bc0b0a45b7b904804ec1e2efc5349ac69bbdd883633311f3c89eea32884799n/a Heodo
2020-10-29Invoice.docdoc e06078c4dbd95ae50e1851d57970a1f2a98d874ba5726452404dbc9cd64ea8faVirustotal results 19.05% Heodo
2020-10-29RK3524994843BC.docdoc 86784b37bc0a4c5ad8f488356ec333dbeda709272a5aa412aeff54fee3f9db46Virustotal results 17.46% Heodo
2020-10-29Invoice #8375411.docdoc 8744e383bf013444ed1f687f385d558ee1c4e2a153cdfe224250a02fd1eada2eVirustotal results 19.05% Heodo
2020-10-29INV_8033.docdoc 2dc19d1576e1d7e5d43a3e0cf6ed690d3b66634515389ca782f0af0198069e65Virustotal results 19.05% Heodo
2020-10-28form.docdoc 6c9191798758c5d2cb92a9f60c5d221a0e2d737aa467dfacb65c2a86c5781586Virustotal results 29.03% Heodo
2020-10-28P099 invoicing.docdoc 767adf40099224255f150c5dab97873a98b3aa9a0516b068d3412b1302ab2352Virustotal results 26.98% Heodo
2020-10-28October Invoice.docdoc 6398e25e380cf00aa433acf528e8f0245fd02007338aa75df4deb5bd9eeefbbbVirustotal results 26.98% Heodo
2020-10-28October Invoice.docdoc 6c3c1280087fe50fd411676b26ffd9bf41044300aeef5d27ed6322cf365fcd99Virustotal results 26.23% Heodo
2020-10-28October invoice.docdoc 47777481ca315073bee9224d1ef95b64203170ca33c9295b1519e18a004ea2a1n/a Heodo
2020-10-28invoice.docdoc 5177894154a2ad0d67c6ea62534a27cdc18b7cfe9c73c8ec6071d72fb8c198a2Virustotal results 22.58% Heodo
2020-10-28Inv_7072.docdoc 2a87f25fe351249b33ffc8d24f6310b9d8e1e3907a6b53b06e324566027dcae0Virustotal results 22.22% Heodo
2020-10-28Invoice 004327.docdoc 6c5d2dceb77aca3c35f72874bcb483c53950fd5f5aeb9dd9a66fed7341d3cd3aVirustotal results 20.63% Heodo
2020-10-28Invoice 001134752.docdoc e69175f1d0fc57715610220f59992ae3a56ac12d27917162e4626cd0ef2bfc30Virustotal results 19.05% Heodo
2020-10-28Form - Oct 28, 2020.docdoc 87ba8d2cd453427750317da53541442b62760f1757073b1b3a5fe0cbcc69ec14n/a Heodo
2020-10-28CEE-100120 DYUB-102820.docdoc 1f83279e11907f0f3b4b2164f90fc56c5043732bb07681b9c8827bc91f3d7181Virustotal results 17.46% Heodo
2020-10-28Payment.docdoc fadcbe7aa3d7b823b03d2627cf8a05b229e0f6c7518a71b9c4a106155b04df3cVirustotal results 17.46% Heodo
2020-10-28B2813060828OV.docdoc f7f94de76d23a7933abb8bd20b8fe7ac8200c6cc8d3b837dcb1686368c86a718Virustotal results 17.74%Heodo
2020-10-28YP-100120 PCIB-102820.docdoc 7e7bd61af07906f31a4efa5442f7cfda98c0047ef70e15f64e37c5d4882917b2Virustotal results 17.46%Heodo
2020-10-28Invoice 0799501.docdoc 941dc42e68ed58a3e797724f248c30d20e035734f6e3193a1e0c39b5ee751512Virustotal results 17.46% Heodo
2020-10-28October Invoice.docdoc 3732182a2ad2854b3f9ae9a1eeaaec7d53eb43bbc485318ae0a2f573a0159b0cn/a Heodo
2020-10-28INV #01749 FOR PO #0944376041267.docdoc abc441e8e79d4bbbc2cad82c9c8640e5556dfa439a39b965716dd1cbef7e2ac6Virustotal results 16.39% Heodo
2020-10-28Form - Oct 28, 2020.docdoc 268438b641db6d86d82847ad12e55ab098615a5b5328d37db2b6123a4e08a822n/a Heodo
2020-10-28Inv_56067.docdoc 6b8a13edbe6d2e19282d97fae23cb4eed96c854672c61fc5724b9fdda058760eVirustotal results 17.74% Heodo
2020-10-28Invoice.docdoc 5a9c040e67efe0446aaaeff9b0dacd2f668516484cf5487449360cd489ce268aVirustotal results 17.46% Heodo
2020-10-28Invoice 7654691.docdoc 9819d665344dae10323a62049a4b5193c88afbdd1792f6d8ad80b7df403b6c73Virustotal results 17.46% Heodo
2020-10-28O3931179603XF.docdoc 91fd99663914efc537bbc0f6a9c7f56b4211918e3b5cd280e590c58c23a002e7n/a Heodo
2020-10-28Inv. 0004961340737.docdoc f104662c93957cb9de8b8b5db529dcd6dc40bd62d362d375d4894efba21b8c94n/a Heodo
2020-10-28XL1 invoicing.docdoc eb7342e956ea7f0a234e89063bf36cbdb9e2bf4d6478141379a0eaf2efaf711fVirustotal results 19.05% Heodo
2020-10-28form.docdoc 7e8996f6c2bb380cdd8ee5149be9a14a338720b1db9e4ba106e9e039361ecbd8Virustotal results 19.05% Heodo
2020-10-2800274755.docdoc a4d1178f3a923b023599d331b6772e92a0728644f27f4ad372f74a28b6a5a096Virustotal results 17.46% Heodo
2020-10-28form.docdoc e1a1c8b02de20858f2703c835ecd985f2b744816cd4f8757ca7e12af15d3af11n/a Heodo
2020-10-28D009 invoicing.docdoc d4d88bb7b289fc8fe85835f356c30440662efd3f2a033d4b99bda2f234647243Virustotal results 17.46% Heodo
2020-10-28PNY-100120 MIOG-102820.docdoc 7d18ce30a5e5559dba5b330602ce6d3aed362781f7764ae4d0a152d568a5f45an/a Heodo
2020-10-28Inv_91243.docdoc 446e21090ce1bf05d7b94165ffc64b219bdaaa820ef729fafc816d0e7d602e0dn/a Heodo
2020-10-28Form.docdoc 8a5d45742906d99f6a25870884036c29e1df4a190ada0ad3af81feae44092f1cn/a Heodo
2020-10-28form.docdoc a77088a16b23e969ba4331abca1b875bdbec7815fe8cd3ca42438e6bfd862de4Virustotal results 17.46% Heodo
2020-10-28PO# 10282020.docdoc 753c4521e07dab9a1de57a156021942b8e1019f48da5659b28dedbc848c3d013Virustotal results 17.74% Heodo
2020-10-28Payment status.docdoc fe3c5a60f73b2274c9d19816c7263b1a5094858ccce9268c748e738528e39fdbVirustotal results 18.33% Heodo
2020-10-28Payment.docdoc d80a1b08046a480c270322dbb63db1c6068ff358df2a12b407ae126205550de3n/a Heodo
2020-10-2806871120.docdoc dae86e5f6950b75013fc995cadb73abc26cced79c643080cbf10815728971718Virustotal results 15.00% Heodo
2020-10-28October invoice.docdoc 6cb931cfef7f5739b5f499111e547bfd45063632a663cfdbba4ffefeea61fff5Virustotal results 15.87% Heodo
2020-10-28PO# 10282020.docdoc fc885504c2ffed13a395bc94f32335b3dc5551a0b0a843536c8e6016ccac8ee9n/a Heodo
2020-10-28JW05 invoicing.docdoc 1ffa0f653207549990a81373d3a44a8be126ef0a7ad5bc5fb2e2dcee681c32a7n/a Heodo
2020-10-28INV_64024.docdoc b1bdd6e1e3abe17d23d0470a135cdf17a4c0753e5829b7abc7bf792d3cca7715Virustotal results 15.87% Heodo
2020-10-28Invoice 096320.docdoc 3320393528683e812b4d0a18fb2b4a20627ede2339b173dd501aad8c55264dd5n/a Heodo
2020-10-28Electronic form.docdoc e18de078538bddb4429a87ecfd385fb4c667558bc466a1b12d723fd061ee5accVirustotal results 15.87% Heodo
2020-10-28October Invoice.docdoc d43cadfad58e74565b6629f25e5364e7266d223dfd97fc0eea5acd5665a438acVirustotal results 18.52% Heodo
2020-10-28Payment.docdoc 9fee8929b36a06e948d6a56d3de1466b9d102bf2e686ad5fb293f485490ff976n/a Heodo