URLhaus Database

You are currently viewing the URLhaus database entry for https://cleanafrik.com/ag3tkx6e1.rar which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1083781
URL: https://cleanafrik.com/ag3tkx6e1.rar
URL Status:Offline
Host: cleanafrik.com
Date added:2021-03-22 12:46:14 UTC
Last online:2021-03-24 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: stoerchl
Abuse complaint sent (?): Yes (2021-03-22 12:47:39 UTC to abuse{at}publicdomainregistry[dot]com)
Takedown time:1 day, 23 hours, 32 minutes Poor (down since 2021-03-24 12:19:58 UTC)
Tags:Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-03-23n/adll ace691c336e0c9a311681ccd4768d52feacc30e13e667ee577a590bff837caa9n/aDridex
2021-03-22n/adll 59128e46bb0e23b4b892d01c0ae70218de61c9a7439c80659bff8ef2489ca099n/aDridex
2021-03-22n/adll 89353e69bccfbc8ad53c208414a105a8066ad855db3a3bdf74766d63915da06an/aDridex
2021-03-22n/adll 57806a1fdc9e4bdc3d77ca297f75df5ec41dff08d604944d9634f1f7a675813cn/aDridex
2021-03-22n/adll 38cea6b8da276da415ba1f4127eb6db81f914e27335da458a540cd2db671886fn/aDridex
2021-03-22n/adll c0cfee7ceb6d51139f866dd1d95fa60c3f48ae0309002714dca27d87f3c2a76fn/aDridex