URLhaus Database

You are currently viewing the URLhaus database entry for https://al-brik.com/vb/mMQlbHPCX/ which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2111283
URL: https://al-brik.com/vb/mMQlbHPCX/
URL Status:Offline
Host: al-brik.com
Date added:2022-03-22 20:59:07 UTC
Last online:2022-03-23 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2022-03-22 21:00:11 UTC to abuse{at}ovh[dot]net)
Takedown time:4 hours, 10 minutes Good (down since 2022-03-23 01:10:53 UTC)
Tags:dll emotet link epoch4 heodo link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-236Ej8XRiVsdBkGzt66kA4LbD.dlldll 10cf1b53c15b9eb0aa0f11fb26993ae325766dd101cc634a4a1e6d548f25898eVirustotal results 14.93% Heodo
2022-03-22fKCCuIEgsVdES64N.dlldll 312408d2c58a9688bddf4518512bf9a950e2bf3b102fc0aa51c0b9338da69f6bVirustotal results 13.85% Heodo
2022-03-228v8Q4BUnLK7ZaIDlKaU5.dlldll 1c7920a0590253f167f2794742eeed76d975d9ef110922b62b3c912ff37e6e4eVirustotal results 13.64% Heodo
2022-03-22cV3XgMt1jDC6cFzDkXBbVliy1CxEOh.dlldll 10ed5a6ec694a5afad284dce510bf96fb74b564d4ec3965450e02ef794eff976n/a Heodo
2022-03-22xBYzTWwmAa0zA4Y.dlldll 54ff5b421a402bc03d2691c0d4a24bba8f6436d1f58df999449ca89b390fd203n/aHeodo