URLhaus Database

You are currently viewing the URLhaus database entry for https://agemn.co.za/zk58h95.rar which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:979225
URL: https://agemn.co.za/zk58h95.rar
URL Status:Offline
Host: agemn.co.za
Date added:2021-01-26 16:50:25 UTC
Last online:2022-07-05 05:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Myrtus0x0
Abuse complaint sent (?): Yes (2022-07-05 04:29:05 UTC to abusepoc{at}afrinic[dot]net)
Takedown time:3 years, 0 months, 29 days, 19 hours, 34 minutes Bad (down since 2024-02-10 12:28:55 UTC)
Tags:Dridex link payload

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-01-08n/adll b1b01b21d54f17dbf359873c561fd1c6ebe67c8f4f1b0497a97c3134a8bf0313n/a 
2023-11-17n/adll f3141c9f870fbc29e0bd1f1ea41717953ddc429f46981d251e9cab4305d8b538n/a 
2022-03-16n/adll b4d6fd6e3bd866c9f4d7d0327ef54786e775195c4b5f9c22953d749e83f6dfa5n/a 
2021-01-26n/adll cfcc473a5f83f83517a1c4917dd2c330be6252bc95fcf176e9b783fb694f6f31Virustotal results 19.70%Dridex