URLhaus Database

You are currently viewing the URLhaus database entry for http://manuyala.com/cb0d2k0.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:977884
URL: http://manuyala.com/cb0d2k0.zip
URL Status:Offline
Host: manuyala.com
Date added:2021-01-25 16:41:35 UTC
Last online:2021-01-30 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: Myrtus0x0
Abuse complaint sent (?): Yes (2021-01-25 16:42:35 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:4 days, 23 hours, 14 minutes Bad (down since 2021-01-30 15:57:22 UTC)
Tags:Dridex link dropper

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-26n/adll b6cf019dca618ebc676b84c40846e0a9a2050689b35845af2f12a93442fb25e8Virustotal results 14.93%Dridex
2021-01-26n/adll 4e45e2e0c42bde09b34d7206411ab3a6a08586fa0d1dbecb61579024881e9a23Virustotal results 10.29% Dridex
2021-01-25n/adll 172a5fa7dbc656f25b8b62e00fcddcb5f9ec1cb92e53ff056afb8d7f378a77efVirustotal results 8.70% 
2021-01-25n/adll 98d34bcabc9744d79000ed1391ead17a2b3d8bcd4f12999282cce1cd8dcfc059n/a 
2021-01-25n/adll 00daa3b5a706763ebfee1c9257eab05045c01c9d6598d031cf1dd92495a502ecVirustotal results 10.29%Dridex
2021-01-25n/adll 112260f410fca847e918173c32da7d3f6025eb4f025db3373e906b4dd6ffc14dVirustotal results 7.25% Dridex
2021-01-25n/adll f6679a1f0be2a91d0a36cb03638a025af1f25426aad9de64a4a81e837cda6ecaVirustotal results 7.35%Dridex