URLhaus Database

You are currently viewing the URLhaus database entry for http://ethar.ae/aqjgq0.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:884028
URL: http://ethar.ae/aqjgq0.zip
URL Status:Offline
Host: ethar.ae
Date added:2020-12-02 23:51:11 UTC
Last online:2021-02-24 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2020-12-02 23:52:12 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:2 months, 23 days, 5 hours, 57 minutes Bad (down since 2021-02-24 05:49:52 UTC)
Tags:dll Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-02-19n/adll 87c16f11a67539502257b82372956286f6c52d1e4aad5237b7caeb2d50258c19n/a Dridex
2021-02-18n/adll ae7b758f031bd3f63798b0204d2656a2631895b011de2d16b0b9a8a823f0dba9n/a Dridex
2021-02-11n/adll f2a4e786abf8c9cf98336b30e1613064e5fa145947b8e7d79d5ac934eac4f4fbn/a Dridex
2021-01-25n/adll fa0de0d05efe12286744a5e3c8edf87aa9a907f619f3b5be13c81856d8d2c5f6n/a Dridex
2020-12-03n/adll c96fa76a5147bf58b44c47fe42c9449da7494bf329c11e3e2792fdca8fff917en/a Dridex
2020-12-03n/adll ab851d5364bae0749d452459953ccab2b62c62c6d5784e7adedc4d9ba43727dbn/a Dridex
2020-12-03n/adll f183722041cc6ed4275dd6fc17899b36509a78617c50ed4ce4c4c39472f82dean/a Dridex
2020-12-03n/adll f49f9acac47b813ec018f48ab2d54ddd982b294e8a68227a4d83f817cb24ec7an/a Dridex
2020-12-03n/adll 664a8adb4d5dbf9e03ca8316faecc6ae36647e331e4fab9c506045cd59fa75een/a Dridex
2020-12-03n/adll 44941ab73d211c0353038856bba5c74f95703c3ac93786b6f9d2568a658b298an/a Dridex
2020-12-03n/adll 6120c83e844de1ca1e68ec95c714218928c272edfb379cd7344a74e5890eb2d3n/a Dridex
2020-12-03n/adll 55aae894419c68f653d66c98a0b87d23c68bcdc9e4f5ca143acd03143b8f221bn/a Dridex
2020-12-03n/adll b49927abf18a8cad4054f65c1b05f418b49c56f67477928cd2949ea6a6f042d3n/aDridex
2020-12-03n/adll 148026042a20a170fb56b258538a078be324b0493746bbf5ea17704c99e38486n/aDridex
2020-12-02n/adll 7fee8c20f0586ce2d544f172b5df1f96acde543b02c50473bb7732de0d1c9fb4Virustotal results 31.43% Dridex