URLhaus Database

You are currently viewing the URLhaus database entry for http://10uniteddefenceforgorvermentsocialsndymh.duckdns.org/chnsfrnd1/vbc.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:362131
URL: http://10uniteddefenceforgorvermentsocialsndymh.duckdns.org/chnsfrnd1/vbc.exe
URL Status:Offline
Host: 10uniteddefenceforgorvermentsocialsndymh.duckdns.org
Date added:2020-05-13 16:34:22 UTC
Last online:2020-05-14 13:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: gorimpthon
Abuse complaint sent (?): Yes (2020-05-13 16:36:05 UTC to abuse{at}vnn[dot]vn,abuse{at}vdc[dot]com[dot]vn)
Takedown time:21 hours, 6 minutes Good (down since 2020-05-14 13:42:07 UTC)
Tags:exe Loki link lokibot link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-05-14n/aexe 8f81624e14510c9bc19eada99760ea5266080155edc3380deaf1799dee9f63b5n/aLoki
2020-05-14n/aexe e34ea10e33cac3cd7e82feb163446f1fbbff7c024eafcfd330e62e66f285062dn/aLoki
2020-05-14n/aexe e1ec4eca2e96f0cf0b8a84b39ad2a256ae00943ea390fd854e74877624071a56n/a 
2020-05-13n/aexe 5fc8d193bb58bad3b8bb13700f84ac3ceec7cb10e93bfb68caea0bc7b287b134Virustotal results 26.39%