URLhaus Database

You are currently viewing the URLhaus database entry for https://yeisonchacon.ottimosoft1.com/xzokl2nwa.rar which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1674030
URL: https://yeisonchacon.ottimosoft1.com/xzokl2nwa.rar
URL Status:Offline
Host: yeisonchacon.ottimosoft1.com
Date added:2021-10-13 13:14:39 UTC
Last online:2021-10-13 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-10-13 13:19:06 UTC to abuse{at}godaddy[dot]com)
Takedown time:1 day, 4 hours, 11 minutes Poor (down since 2021-10-14 17:27:55 UTC)
Tags:Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-10-14n/adll c7be52a0a0292125029d1b0e3a61590c450ea327c70389a6e2e357246d9062f5n/a Dridex
2021-10-14n/adll 667c24ee30e0cc8bdf26b87d362172d04e6cc0bc4f3e80f44ccffb8e09b69087n/a Dridex
2021-10-14n/adll baa90f27ddbfdafb49acbcb9ec5fa5f1309c18bb4825946b644e090f09f5c8dcn/a Dridex
2021-10-14n/adll 8fabdba4192e6ed7f94717460faead37bf2b61d90c60de76ce5298168f481856Virustotal results 12.90% Dridex
2021-10-13n/adll 9a099cdbb12a8b738fc625c20b4bc2b4697d3eb1e09ef4a47526b47323508ea4n/a Dridex
2021-10-13n/adll e559d25e9ca17f50a63c70cda97025a589f32c5cb6ad97c6af9cd4e66819bbedVirustotal results 10.45% Dridex
2021-10-13n/adll 11a796292aced5a713251ae6da4329fc6bea7b6e843a8ae493c7db4a2a862181Virustotal results 9.09% Dridex
2021-10-13n/adll 12ffd6ca58913913fd51e51f2db6805092e5265b846601f3399bc3402ebf9273Virustotal results 7.81% Dridex
2021-10-13n/adll f76c90a5708f67a3b24a5f28c134f027ce50e0cc4fba5f7445eb0c5ca14efc01Virustotal results 10.61% Dridex
2021-10-13n/adll 04060d601dfa67e7729088edb8a9df313dbf6912948364d044c6964d95f61dd6Virustotal results 9.09% 
2021-10-13n/adll 69b266a06229673e16bacf6fa94ffb8b4d8b662cec510d4c210c512d47a80327n/aDridex
2021-10-13n/adll 9fdfc6ad7f19696a80167476bf9beb7a88f597983251afcec650e90a2e06108fn/a Dridex