URLhaus Database

You are currently viewing the URLhaus database entry for http://vidrioindustrial.com/h6mkgr.rar which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:786032
URL: http://vidrioindustrial.com/h6mkgr.rar
URL Status:Offline
Host: vidrioindustrial.com
Date added:2020-11-04 11:17:59 UTC
Last online:2020-11-19 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: JAMESWT_MHT
Abuse complaint sent (?): Yes (2020-11-04 11:18:03 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:15 days, 4 hours, 16 minutes Bad (down since 2020-11-19 15:34:51 UTC)
Tags:Zeppelin Buran Ransomware Zeppelin

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-11-18n/aexe 0635d7bba121281fd91917dda207d908fe705878227eb9ac9e4d31daa125eaf9n/a 
2020-11-17n/aexe 008f6f66457b5c54a5143ecfeb83cc02da011783c813c6957470d82159cb80a0n/a 
2020-11-16n/aexe b1e1ef093b5ff530fcf4c1f21f3abeadb7b74762b0d59c0cd282902c8b287ec7n/a 
2020-11-15n/aexe 5dcd825ce3b840b3d8ed466f7b4fc3e1c08e805eecfe0d49560f452afc909bf8n/a 
2020-11-14n/aexe cea9bfc0562c1521a836504cfc17cb3b856e9468cf98dbfaafdde0b0d45e6335n/a 
2020-11-14n/aexe 7d49e4aa7e50dd05f63f8f85b561e849ced9a313a07f140cbd8559fedc40f6c5n/a 
2020-11-07n/aexe f6069cc256facce5470bd9ea3cd70590b98bdb861a133da392d91cfb43567ef2n/a 
2020-11-07n/aexe d5761966607afc640ccf8419c02e0075c1d9214f280b41630847f1c6d5186a41n/a 
2020-11-05n/aexe 8ce264d783c4e7fd44ef4138dd6274976939620e4d8f83dfac4b9aefe3020d42n/a 
2020-11-04n/aexe 7d809e8c9b98c16647bbfac49854c28ecc3fe6d4345410deeaa79445cc50cf51n/aRansomware.Zeppelin
2020-11-04n/aexe 4e0d1edb76747fd945b87dd18299298f0df719edbea946119d91db59a9b6527aVirustotal results 20.83%Zeppelin