URLhaus Database

You are currently viewing the URLhaus database entry for https://genermahecha.ottimosoft1.com/e3wgfip.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1674118
URL: https://genermahecha.ottimosoft1.com/e3wgfip.zip
URL Status:Offline
Host: genermahecha.ottimosoft1.com
Date added:2021-10-13 13:15:22 UTC
Last online:2021-10-14 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-10-13 13:19:06 UTC to abuse{at}godaddy[dot]com)
Takedown time:1 day, 2 hours, 25 minutes Poor (down since 2021-10-14 15:44:55 UTC)
Tags:10222 Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-10-14n/adll 269375d73e6905a80a0668e76fe4dd273a45242fc50b17076341423382a4b8b8n/a Dridex
2021-10-14n/adll 0329d40139f2325284996f000e2b8a3dd69f05b8a10dd7fbeb403b9b1dc59071n/a Dridex
2021-10-14n/adll a41013aa5b103e8db7d3afb55358ba2a822358a32fa2c35cda53e577b7cf875fn/a Dridex
2021-10-14n/adll e9050e55a9d1f6a38312fbcbc681cbd1e772e9d380e7d2b72a56deff657f6c4bn/a Dridex
2021-10-13n/adll e455ca4df9f1257b74449df80d14aba223f5ce5727a9d3cc8905dde1c6043784n/a Dridex
2021-10-13n/adll 439ad83ea444cb894f3a641eb322a6dcef5ae9f2962485181ddd5fb3d5249d2fn/a Dridex
2021-10-13n/adll 39770f2074e2376c8c6c01d4f1ac394b6195ff6c75042c7ccf9640f2ac4e4859n/a Dridex
2021-10-13n/adll 713fc62a1cbadf2ab1fef4c2bb5cc80eefd5d5e6eb091b888232c5bed5a3051aVirustotal results 10.61% Dridex
2021-10-13n/adll de0b13c9edece1c37ea10e9f2698b641e09c222bc1c6c5b9f44cb998e8e0c067Virustotal results 9.09% Dridex
2021-10-13n/adll 3eccde549a60121f724ae22e058b0ed5a6a42ebd20fa41800cadb40839a79a51n/a Dridex
2021-10-13n/adll f97357d8db0ae59cafa51ca6bbae3356dd92311607e0b3192404969f4ff3f860n/aDridex
2021-10-13n/adll 7e6119d4bec01a6fbb11045405a697d9bd879fa6ec4887139b5f7def4a3815ffn/a Dridex