URLhaus Database

You are currently viewing the URLhaus database entry for http://soporte1.eduardoabreu.com/ebhsdv63.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:972273
URL: http://soporte1.eduardoabreu.com/ebhsdv63.zip
URL Status:Offline
Host: soporte1.eduardoabreu.com
Date added:2021-01-20 13:26:31 UTC
Last online:2021-01-25 20:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-01-20 13:29:11 UTC to abuse{at}dimenoc[dot]com)
Takedown time:5 days, 7 hours, 13 minutes Bad (down since 2021-01-25 20:42:23 UTC)
Tags:dll Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-20n/adll c2113f0ef3c074e672e4fb416720db882141c27a39fdba160f86b58eeac5af06n/a Dridex
2021-01-20n/adll 02ba693d75dee6a99d3a2414f6a426940696a5ec5d2d7c8f368f929697e55e54n/a Dridex
2021-01-20n/adll c0e892608e649eadcb648daa1e3cb8a4bfa7cfd41a6bb522f3766a9804400ca3Virustotal results 10.29% Dridex
2021-01-20n/adll 37e3ea6fccd37209f1e11f3781565e2f2eaa2de13ddf62ed75330936951cf445n/a Dridex
2021-01-20n/adll f14930c641c001377c3c4c468fc97ab43acde69287819c134d529d95c0fb7bb4n/aDridex
2021-01-20n/adll 791252fc4def3c4c3bdb270633ffc88c0e2cd8e8e8ba299825a83841a273e7ddVirustotal results 4.48%Dridex
2021-01-20n/adll b9bb671587f2dad8a3df83d6bd0b7b8327edf93fadbefe8b6aa7eabe6698ae88Virustotal results 12.12%Dridex