URLhaus Database

You are currently viewing the URLhaus database entry for http://admaris.ir/kenlawx/kenlawx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:386646
URL: http://admaris.ir/kenlawx/kenlawx.exe
URL Status:Offline
Host: admaris.ir
Date added:2020-06-11 13:22:41 UTC
Last online:2020-11-11 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2020-06-11 13:24:02 UTC to mehmet{at}vitaminbilisim[dot]com)
Takedown time:5 months, 2 days, 11 hours, 13 minutes Bad (down since 2020-11-11 00:37:04 UTC)
Tags:exe Loki link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-07-16n/aexe c43b0c99da438892e85837872b4588b7ac6aeaaca2e1169c7136a439033ab762n/aLoki
2020-07-14n/aexe 3c6b47f865ff44be79c408bf016428cba3c1bfdecfb82bc7cac63a3b56542ff5n/a Loki
2020-07-10n/aexe 194b8a7fc231fbf508a7b89ee31cc82c54ec51e2a0e161096abef951b4297605n/aLoki
2020-07-07n/aexe e6e3f72544d28e098f81e1fea5b0a13f05f76330aeed4dbd40181114be2d0af2n/a Loki
2020-06-30n/aexe c8b3a01832b2e830bee4a54c0620582b67082dfe03ee434a1c08941c714bdc2cn/aLoki
2020-06-26n/aexe 704076e4458351b7b44f433b7ce8525b1e538511a0f2e5bf88b2ff7d184c41ecn/a 
2020-06-24n/aexe d94bd1a2409560c4ce25ec3e633d04eca159592b7d8b50b054fe0224951d975cn/a Loki
2020-06-23n/aexe 9ed49839f97c5bd2844562286ae50e5ccf1dcf6d0b47399d857f4fd8671c01dbn/aLoki
2020-06-22n/aexe d3f6f08545d4ea76a93169aed58e1f72ea40899d2f5b77e1b6a2813ba01e28d7n/a Loki
2020-06-21n/aexe 0634a029c2cb3c11d1f3e75db0625e0eefc72c32f094954c8bd22fa11ef4f224n/aLoki
2020-06-17n/aexe c7ed9ceafb18a2851083adb67a9f33e27d35a67cff63b2e08da23f4523a824c7n/aLoki
2020-06-16n/aexe 4b9d1963eb59e21e0ff87f014424955cfcecbba48add3de512c4fc2f1ed6aa3an/a 
2020-06-16n/aexe f7e0f21aeae2458598469629e7d83b5f34ae109b8583abea5ae36af623d18a88n/a Loki
2020-06-12n/aexe 16a4541772ba0abdf230b9c31baca3e9b592778efdb7db772bfbdd25dec22506n/a Loki
2020-06-11n/aexe a5db1adb41c2ea72b72cc35a725a44f37c6be628bb6ce7de757b9fd5dce38d94Virustotal results 27.40%Loki