URLhaus Database

You are currently viewing the URLhaus database entry for http://trainingzoneatlanta.com/u49wl9p.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:972241
URL: http://trainingzoneatlanta.com/u49wl9p.zip
URL Status:Offline
Host: trainingzoneatlanta.com
Date added:2021-01-20 13:26:08 UTC
Last online:2021-02-08 06:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-01-20 13:28:26 UTC to gb{at}tulix[dot]com)
Takedown time:18 days, 17 hours, 30 minutes Bad (down since 2021-02-08 06:59:01 UTC)
Tags:dll Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-21n/aexe 642ab82c74a436b00f64a17174e23f40a64b721b6128e80a70e3cbffc7d3424aVirustotal results 10.29%Dridex
2021-01-21n/adll 9c9dcacbcb40813c2efc0d9934eace278cb39e9042a215d1cef9ad6eca43a478n/a Dridex
2021-01-21n/adll 06e890b836e0087897506148583b71de6d0c1837b465dfe8e69c6ec1c6462b7en/a Dridex
2021-01-21n/adll 90bd41b029a4618b84125ea9b16256f07d8a29ca4a11e6a902bbe336c2386f52n/a Dridex
2021-01-21n/adll 4314efb523499b2e7bd3de57d762c972c11d65790d6415ce3b9d3e84176c88d0n/aDridex
2021-01-20n/adll fc646c8e5daae0acb513d09a199292da6a9f35b4c4bbc0fc452da63f541aed1dn/a Dridex
2021-01-20n/aexe 2bfa88a5c855f4d24139d5d9c556cfbdb05a5a68b23a528ae53226d526dc4e7dn/aDridex
2021-01-20n/adll c2113f0ef3c074e672e4fb416720db882141c27a39fdba160f86b58eeac5af06n/a Dridex
2021-01-20n/adll 2f7d44672a0be121841f5bc447c5c4580846c8ba385bb2c6815c6879f5cda2d2n/a Dridex
2021-01-20n/adll 02ba693d75dee6a99d3a2414f6a426940696a5ec5d2d7c8f368f929697e55e54Virustotal results 7.69% Dridex
2021-01-20n/adll c0e892608e649eadcb648daa1e3cb8a4bfa7cfd41a6bb522f3766a9804400ca3n/a Dridex
2021-01-20n/adll 37e3ea6fccd37209f1e11f3781565e2f2eaa2de13ddf62ed75330936951cf445n/a Dridex
2021-01-20n/adll f14930c641c001377c3c4c468fc97ab43acde69287819c134d529d95c0fb7bb4n/aDridex
2021-01-20n/adll 791252fc4def3c4c3bdb270633ffc88c0e2cd8e8e8ba299825a83841a273e7ddn/aDridex
2021-01-20n/adll b9bb671587f2dad8a3df83d6bd0b7b8327edf93fadbefe8b6aa7eabe6698ae88Virustotal results 12.12%Dridex