URLhaus Database

You are currently viewing the URLhaus database entry for http://d1.udashi.com/soft/wlyy/16396/jxszdjp.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1283186
URL: http://d1.udashi.com/soft/wlyy/16396/jxszdjp.exe
URL Status:Offline
Host: d1.udashi.com
Date added:2021-05-25 16:18:06 UTC
Last online:2024-08-02 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2024-08-01 11:39:07 UTC to ipas{at}cnnic[dot]cn)
Takedown time:3 years, 2 months, 24 days, 11 hours, 7 minutes Bad (down since 2024-08-02 03:26:35 UTC)
Tags:exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-07-24n/aexe 92d695c8f90027072bf474009ea4d30de9238f38b601a2b1873d2f4f18b72b66n/a 
2024-01-29n/aexe 2bc71b8159b78c8de7f1d8fbc882b4f4a71313b98831c2468b99e8f377bf8dc6n/a 
2022-09-03n/aexe e7375c992bc0df715ac482de9d7e5e99eacadad766a712d712608649b3cbb122n/a 
2022-07-17n/aexe 53b7ad8f14872e19bc4937486bbd60b5486159c20f83487a2827a5338e7895e2n/a 
2022-07-09n/aexe deb867259fc3338e9622d7812535bce457cefa93bb8b40ec5f729dbeefe4c9aen/a 
2022-06-03n/aexe 84326818cdcb5ddaa9aa566427020910b3758c4249e15a7b58ddfff3b201dd02n/a 
2022-05-21n/aexe 8cbcb8e6bb6fd7ad8f6a9fdf9b66051e95c5a7fe342576e2717dffde2bd9cfcdn/a 
2022-05-15n/aexe a1f88e02ae68f0be1343f6c9a6260983fec06e8cdd526582a73bef73072ad415n/a 
2022-05-15n/aexe 8f776021a221b1f5c2543108a51ad34785fd74c1fd9e35895aa68d8c26c1c4a0n/a 
2022-05-03n/aexe 585c052b339bfc21d052ae16319e390f419aff4bed1610e37966e9a4d01cb725n/a 
2022-05-01n/aexe 8247583566f19dcb6df14d89a11031358b9ef67c3d83df6ea4c830ccc08b35e1n/a 
2021-05-25n/aexe 87c160843bc0bdcd754a151c288f899763494385830016c299245f1fe9354b54Virustotal results 91.30% Worm.Ramnit