URLhaus Database

You are currently viewing the URLhaus database entry for http://dell1.ug/exe/sqlreader.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:239851
URL: http://dell1.ug/exe/sqlreader.exe
URL Status:Offline
Host: dell1.ug
Date added:2019-10-07 00:40:07 UTC
Last online:2019-10-17 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2019-10-07 00:42:04 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com)
Takedown time:10 days, 0 hours, 19 minutes Bad (down since 2019-10-17 01:01:59 UTC)
Tags:AZORult link exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-10-14n/aexe 05be869cd52d9417653c75df843599183e681f6a40da027b8de248fdfb967d83n/a 
2019-10-10n/aexe 29bab8f41d95c5c82f092bfa4a8cf4ec575ee7f6a3cfc1b64f28a22eaa61fa06n/a 
2019-10-08n/aexe ac8ab52546070907d21d89f931aaca5e63fc0721ef9b77ef238b620160d93e89Virustotal results 14.29% AZORult
2019-10-07n/aexe 2763ce699fc4bbb87d92da137c6f179b8df74d05436f6f0fa7c09cd3bcde0410Virustotal results 23.94% AZORult