URLhaus Database

You are currently viewing the URLhaus database entry for https://emaz.pk/jx61x3ss.tar which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1040563
URL: https://emaz.pk/jx61x3ss.tar
URL Status:Offline
Host: emaz.pk
Date added:2021-03-01 15:59:01 UTC
Last online:2021-08-23 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: stoerchl
Abuse complaint sent (?): Yes (2021-03-01 16:02:18 UTC to abuse{at}greenserver[dot]io)
Takedown time:5 months, 24 days, 15 hours, 55 minutes Bad (down since 2021-08-23 07:57:49 UTC)
Tags:Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-07-16n/adll b1a452b934d665c94b1a3ea5845e6f4e7660330595e982f4a21bbb00db31ebcfn/a Dridex
2021-04-29n/adll f10723a270ca6a11df1d14ed43ab2885bcd3b689b18945ee212e0ffb5ccc7f19n/a Dridex
2021-04-20n/adll d98dc32d2058e91322f65c257da966d0fd9f111988b7adb2ab51ce71b9bf44aan/a Dridex
2021-04-11n/adll fa206eb6e4ebfa924425a1a53b811c7e032d8f80ecbdf1d13595bf8bb0976e1eVirustotal results 52.24% Dridex
2021-03-02n/adll 3f1ada78b282636a9edbac8f7fef7fe53e2ed62b2b732aed16e9ecfcb5cc04c7n/aDridex
2021-03-01n/adll 9789e808a4b2da31b349f133baafbfd9e05fc78b598915bb46c492c8aeef317fVirustotal results 8.82%Dridex
2021-03-01n/adll dda89a15ad60d2b07f09b103acd4669fbebc743244575772614236ba4d68d9ddVirustotal results 10.14%Dridex