URLhaus Database

You are currently viewing the URLhaus database entry for https://cokhithienan.vn/yqkswiyr1.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1674078
URL: https://cokhithienan.vn/yqkswiyr1.zip
URL Status:Offline
Host: cokhithienan.vn
Date added:2021-10-13 13:14:59 UTC
Last online:2021-12-29 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-10-13 13:19:02 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:2 months, 17 days, 2 hours, 28 minutes Bad (down since 2021-12-29 15:47:48 UTC)
Tags:Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-10-14n/adll 9c6fc0d3b5244e36f8a8922f7aee73821dd306cb8bb9883529f4c2a427efb9a0n/a Dridex
2021-10-14n/adll 8e2828cb206b3c3a3a7f10700fbf370eaf288dbcc68f1c5e64e17bd4da3a354fn/a Dridex
2021-10-14n/adll 4b9d738f062ba82dbfd1b5fefc90560baa07a002621aeb38df63159a709aad20n/a Dridex
2021-10-14n/adll e9050e55a9d1f6a38312fbcbc681cbd1e772e9d380e7d2b72a56deff657f6c4bn/a Dridex
2021-10-13n/adll eff6c847ac91049384701f47fe41a1125f98951213dc426f72edfc463781a3d8n/a Dridex
2021-10-13n/adll 06d13e23ec283f32a083e8be2b2d7ef0589d5ef99ab2552938c43e3ddfa2964aVirustotal results 10.45% Dridex
2021-10-13n/adll 39770f2074e2376c8c6c01d4f1ac394b6195ff6c75042c7ccf9640f2ac4e4859n/a Dridex
2021-10-13n/adll 19ed109f5dfa9e589d28b3126e849a9b022a85486b70e39dd193720d2cbdc743Virustotal results 9.09% Dridex
2021-10-13n/adll ea0fb6f428df5ba78dc44c8b5133af259784a0feaae87da8699199bdde82b6d8Virustotal results 9.09% Dridex
2021-10-13n/adll 32a6496366e25d43a22b26a85924ae655e3bad9878cecff70176deff9690d2bdVirustotal results 9.09% Dridex
2021-10-13n/adll a6c8e854f7c30f6390c39a1cea1393b949331a1b17b455dedd05fd7c92c7ff90n/aDridex
2021-10-13n/adll ffe271af6c57a5f01fd692ad0c94801eff3116cdf5d6c82b2f44d666dcebd424n/a Dridex