URLhaus Database

You are currently viewing the URLhaus database entry for http://tokajkonferencia.elitemarketing.hu/bmaxb7d.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:973100
URL: http://tokajkonferencia.elitemarketing.hu/bmaxb7d.zip
URL Status:Offline
Host: tokajkonferencia.elitemarketing.hu
Date added:2021-01-21 11:33:17 UTC
Last online:2021-01-29 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: stoerchl
Abuse complaint sent (?): Yes (2021-01-21 11:34:40 UTC to abuse{at}mhosting[dot]hu)
Takedown time:7 days, 22 hours, 27 minutes Bad (down since 2021-01-29 10:02:25 UTC)
Tags:Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-21n/adll 6628e8dc46b9a20fd44b83573e692c13fbfd7a970d5062dfa3f4bc96e0989525n/aDridex
2021-01-21n/adll f1b8db9b03a5cb348d275cb285f06f3a224042d333f9eeb283fb6f4e079235d4n/aDridex
2021-01-21n/adll f9a4f05e5d78ace785001794ebc02cf9239ad95398de7b0915ae2366ea5abecan/aDridex
2021-01-21n/adll d03842cdec5a9579fe22be85f7b32d836a027537cb7f4be0c7e65a5c24cb0d70n/a Dridex
2021-01-21n/adll 0a905cb733a72dc8a3a2d4b744653d5697cfe86a0fb481ea9db8b8f60dc3a1f7Virustotal results 7.25%Dridex
2021-01-21n/adll 4bfddde9f8b6c92a2436385cedf3f5acf3a3284a22f40390a503decad56eecf9n/aDridex
2021-01-21n/adll f02daa7dc041b9166371cc8f76de01f90bb3bee82ee8236fc9a113eb7a80f878Virustotal results 10.14%Dridex