URLhaus Database

You are currently viewing the URLhaus database entry for https://kellyvelez.ottimosoft1.com/wcd0y3qg.tar which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1673998
URL: https://kellyvelez.ottimosoft1.com/wcd0y3qg.tar
URL Status:Offline
Host: kellyvelez.ottimosoft1.com
Date added:2021-10-13 13:14:24 UTC
Last online:2021-10-13 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-10-13 13:19:06 UTC to abuse{at}godaddy[dot]com)
Takedown time:1 day, 4 hours, 4 minutes Poor (down since 2021-10-14 17:20:36 UTC)
Tags:Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-10-14n/adll bca18e2628c045b37f06b70498a032004d50801e95a5a68c1a71129bf99ad7f5n/a Dridex
2021-10-14n/adll a7ece6d86ee4101e7b8238f2fc20e9c21ad40f04f95432825aeef1b434c96bc7Virustotal results 15.38% Dridex
2021-10-14n/adll ca19fc56501a752b6d06ff38e66a7f9c98984ee7cf7599e6140dfbf419f07a10n/a Dridex
2021-10-13n/adll cf03d4d2b3deee6495955cc58da468a12bb6d3c68133f386784ba113030730a4n/a Dridex
2021-10-13n/adll 36b5b56b82716d0c1237a2e15b5d1626dc4c5cd55ea175b96466823ed79a05cdn/a Dridex
2021-10-13n/adll ff0b0878821718f9f9626ee6f60ac6268f9a3c529f18cacf485236767f249f23n/aDridex
2021-10-13n/adll baead9dfeec5ee594b33b520a975f67a5a20c39cbef27c9b4b6eabb4ca0f212eVirustotal results 9.52% Dridex
2021-10-13n/adll ffa0a2e90b1ec1dc206420825730e97cde53797c183358a842ddfd460c7779e4n/a Dridex
2021-10-13n/adll 631522e561705d7b1e8943b61927aff2be4325cca41ee5458b6180793acb9de0Virustotal results 9.09% Dridex
2021-10-13n/adll c72fa2296308b8500ddb8c345035befee0711451d1272df8b6762c608e0cfb82n/aDridex
2021-10-13n/adll 5ef4af2e7b97d1bdc698bbf285e68703a48db5521eeebe9598e0c8919902f1cen/a Dridex