URLhaus Database

You are currently viewing the URLhaus database entry for http://turkexportline.com/US/Attachments/12_18/ which is or has been used to serve malware. Please consider that URLhaus does not differentiate between websites thats have been compromised by hackers and such that has been setup by hackers for serving malware.

Database Entry


ID:90937
URL:http://turkexportline.com/US/Attachments/12_18/
URL Status: Online
Host:turkexportline.com
Date added:2018-12-07 03:36:08 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Abused domain (malware)
SURBL:Blacklisted
Reporter:@Cryptolaemus1
Abuse complaint sent (?): Yes (2018-12-07 03:38:14 UTC to abuse{at}ihs[dot]com[dot]tr)
Tags:doc emotet epoch1 heodo

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-12-08Untitled-62826864793612.docdoc688770a69b2985abf2ab475f0b7f855918d9270b8f5324686762a476d1eb4c85Virustotal results 18 / 61 (29.51)Heodo
2018-12-08FORM-6809810931933687.docdoc2a22be1295c6cfacf3fc52cb1dbb4c5ef26f83784eb9ff1ae2009ebea1359b68n/aHeodo
2018-12-08Untitled-7427056408352.docdoc3b787cdd9467d46141792d313de5ac4a3bd8d082bb17759399d54675d42ef42cVirustotal results 20 / 60 (33.33)Heodo
2018-12-08Untitled-71106435601558.docdoc6b9b7e68ba6730d54c569cfaa439d2fdd20bef04b78c40a6f816a56cae2592beVirustotal results 20 / 60 (33.33)Heodo
2018-12-07eFILE-6817507238195963.docdoc30a7f4ae5734ac6e1f6ebddaa747745a02bf2b7d00d5bb584e9e88fc5875f318Virustotal results 20 / 60 (33.33)
2018-12-07eFILE-8174444511735.docdoc780a5038941f0d742863951025b8861a2990265615e42834c535fe741aae92ceVirustotal results 20 / 59 (33.90)Heodo
2018-12-07DOC-37766548075193.docdoc25d7739ee8c7798d26aab5499e0af080b8a01cce30fcdf4c08c3e98db4333aecVirustotal results 18 / 59 (30.51)
2018-12-07Untitled-8831205047.docdoca6a3caa920589fb154965983eaf7df4b2c7464655949157f7bcd5130c2929706Virustotal results 18 / 60 (30.00)Heodo
2018-12-07Untitled-22028764736.docdoc320b35c8c5146de33eed58792af1dc16801b5d950359838c58117e305a6369a6Virustotal results 17 / 59 (28.81)Heodo
2018-12-07doc-5044127966.docdocecc1b8d9dcf35b0da769002f338afb7d7c0dd9edb76bcbc79ef2460fcaa0002cVirustotal results 18 / 60 (30.00)Heodo
2018-12-07DOC-9300346386609769.docdoc0cd65801f363ec8baf87629bdd31da24eb48c4e232fe7788b753c74717defb50Virustotal results 18 / 59 (30.51)Heodo
2018-12-07eForm-1361036292989.docdoc4711ae2828acecc28724f4a7df9a2f350c93c8e6ea945278bdb2824518c4b8cdVirustotal results 18 / 60 (30.00)Heodo
2018-12-07FILE-2295102088677590.docdoccefebc8f2b70693fa4826272e750c817720c33f9df9ba0af600aad8bda8cc25aVirustotal results 18 / 60 (30.00)Heodo
2018-12-07doc-128765917463.docdocee31da561fda319dda8e6f278befe3d6c063dc64dd93fe0e083378d5571ddabcVirustotal results 17 / 58 (29.31)
2018-12-07DOC-03598730260785.docdoc280b03be699024017d9aea4798286ebea9402ae6e1abcb90c675438efb47157aVirustotal results 16 / 58 (27.59)Heodo
2018-12-07FORM-41448535859.docdoce5e89ba0563ef81e70411d184508b12670dc78b2d1187b77e697a5627e0a5434Virustotal results 16 / 58 (27.59)
2018-12-07FILE-590096064000.docdoc07c7a2b43e547f2f88af7bc32501f029d657aa8cb98d501a6419cdb7dee9d473Virustotal results 16 / 59 (27.12)
2018-12-07eForm-7953020907.docdocc2a4afb1ead07a63db90cdcbd05b6d14e9df3892b97994016deb5b4755a151afVirustotal results 16 / 61 (26.23)
2018-12-07file-02499348138818.docdoc3c0e083f257ae49ebcdfb1ebebedd038b8cdc98bfc019002a2050e70764dd191Virustotal results 16 / 59 (27.12)
2018-12-07eForm-00800564574345.docdoc259ca4d02c038286a4ce84449a6d959d495423dd5e49762b5066df9b73ee3136n/a
2018-12-07form-5844772490498.docdoc3c0c5bc1f9a86f3193182f7857ea7d71aa1540963ea93ac36028317ce30f0ee2Virustotal results 16 / 60 (26.67)Heodo
2018-12-07FORM-67526189033.docdocfa056d23707f85751c275afe45805c5ecc53a7268da0911f788e9c31021bc05dVirustotal results 16 / 59 (27.12)Heodo
2018-12-07DOC-812037349594.docdocb6fc93e8d999ad593cd5466d34a888a8ccf68a905716560ead25ebd0d6b19ab4Virustotal results 18 / 60 (30.00)
2018-12-07FILE-53977063619.docdoc0c2adfea9dd5af860956b45cc4e8cdb967dc9210c8375daed99e478d2e074dedVirustotal results 16 / 60 (26.67)Heodo
2018-12-07doc-105562658881.docdoc92be261b1d512a18c27d81c13d7d8e728e939f1dc75af1bb1559dcce1ae64522Virustotal results 17 / 60 (28.33)Heodo
2018-12-07FILE-80087397161365.docdoc94ed4902fdcb0cc97c879f9a3c0d36f751b77ea7a37afecb771be1e96e35725bVirustotal results 18 / 60 (30.00)
2018-12-07Untitled-528224840134090.docdoce415e9496cbea9351fa8884a6ed0951847feea5cc8c92bda3abe68d4d2c8221dVirustotal results 16 / 60 (26.67)Heodo
2018-12-07eFILE-203582183508.docdoc0029192b66856ab4c67705c299c31178efd5ae6cfd5f9a17b2f4c5337a987069Virustotal results 16 / 59 (27.12)
2018-12-07form-7920327159954.docdocf5b218f4091d1e1b944c3544ae820b78eb8ed0795ea7b6ff5595272703574798Virustotal results 16 / 60 (26.67)
2018-12-07eFILE-668649602884669.docdoca3f9d20a724676a5f565f92181de6cdab9bc3106cf2a42eb248be7ff4c00510eVirustotal results 15 / 58 (25.86)
2018-12-07Untitled-252055936456134.docdoc7af520baeb7ab2431a9f87ec30ecccf65339a6a257f38c37d99b4a2e718f72b6Virustotal results 14 / 59 (23.73)
2018-12-07DOC-8664295648992381.docdoce8da3a2455ab14a9ba664f2bba4189d6ddbe20eaaa832375bb4fb6d7ff39f1f2Virustotal results 14 / 58 (24.14)Heodo
2018-12-07eForm-569867489272922.docdoce5ffc538f0d107bed7d7876ca9d9afd66846a122a7edc6c0f5fa880171a9e255Virustotal results 25 / 61 (40.98)Heodo
2018-12-07eFILE-970675184417154.docdoc035260ff1a13e5bf3096d17e4a4ea90c22b07932c51cb1fcad1f786dc3d250fcn/aHeodo