URLhaus Database

You are currently viewing the URLhaus database entry for http://cristianadorin.ro/w7tlyfq.rar which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:972320
URL: http://cristianadorin.ro/w7tlyfq.rar
URL Status:Offline
Host: cristianadorin.ro
Date added:2021-01-20 13:26:58 UTC
Last online:2021-01-21 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-01-20 13:28:39 UTC to abuse{at}xservers[dot]ro)
Takedown time:15 hours, 33 minutes Good (down since 2021-01-21 05:02:38 UTC)
Tags:dll Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-21n/adll fcddcf6dedd8f2bd69e1007831e397e243d4994bfe6d90b5840c1cf91eacf245n/aDridex
2021-01-20n/adll 3459d30b5d2e6c58ddb8dcd9f45f5141f8d15c55fff16f9cc76ec621e6d829fbn/a Dridex
2021-01-20n/aexe 2bfa88a5c855f4d24139d5d9c556cfbdb05a5a68b23a528ae53226d526dc4e7dVirustotal results 11.59%Dridex
2021-01-20n/adll b553789ab78bdf72ecaec67917b7fabbcd485bbd2d1b1baa03802cf01147927dn/a Dridex
2021-01-20n/adll 7872f401516f88967a064039f38f20de144e76dcc3a5a26413312dff29041e26n/a Dridex
2021-01-20n/adll f7c8f98516cab79befde56567a6c5023ffb9e096ebff140d96dcf6e77583d9b9n/a Dridex
2021-01-20n/adll d160b47e8ef2f76e25caee95595893d3f55986de9216ee247e7e48fcb90edf99n/a Dridex
2021-01-20n/adll e4191288a595ba5a8af0d6bf081d0963fbeb553c0667a343c7d217f2b65ddf4bn/a Dridex
2021-01-20n/adll 9cdc32b5cd2fb375072d681b488fe5b40789e2c87d36044033579b0281ee35f6n/a Dridex
2021-01-20n/adll 791252fc4def3c4c3bdb270633ffc88c0e2cd8e8e8ba299825a83841a273e7ddVirustotal results 4.48%Dridex
2021-01-20n/adll b9bb671587f2dad8a3df83d6bd0b7b8327edf93fadbefe8b6aa7eabe6698ae88Virustotal results 12.12%Dridex