URLhaus Database

You are currently viewing the URLhaus database entry for http://dizocserebozanew.com/calle1320/x30.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:352584
URL: http://dizocserebozanew.com/calle1320/x30.exe
URL Status:Offline
Host: dizocserebozanew.com
Date added:2020-04-27 23:18:07 UTC
Last online:2020-04-28 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: p5yb34m
Abuse complaint sent (?): Yes (2020-04-27 23:20:03 UTC to abuse{at}QHoster[dot]com)
Takedown time:8 hours, 3 minutes Good (down since 2020-04-28 07:23:27 UTC)
Tags:cryptbot DanaBot link exe Trickbot link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-04-28n/aexe 7e95bc06702525c25e1889b3d3201dba8bf8d17045c9d5f278da1bce07864e4an/a DanaBot
2020-04-28n/aexe d46fdde4c0b259e0c6301ce8a1c94c5bcfd15f4c277cd6b61e33cb5a9e2629e9n/aDanaBot
2020-04-28n/aexe 37967191a8ff61d297d873d226573e4a9eca72a1b0b19a693cb488c802e96dd1Virustotal results 24.66% TrickBot
2020-04-27n/aexe 34fea5456bb0c7351da3e67c7bcc8f58bcb70ac5b7d9d70e1204a5f4556958c4n/aDanaBot