URLhaus Database

You are currently viewing the URLhaus database entry for http://trandy.sujalaonline.com/c8hz6o.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:980196
URL: http://trandy.sujalaonline.com/c8hz6o.zip
URL Status:Offline
Host: trandy.sujalaonline.com
Date added:2021-01-27 10:08:06 UTC
Last online:2021-02-01 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: stoerchl
Abuse complaint sent (?): Yes (2021-01-27 10:10:03 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:5 days, 5 hours, 21 minutes Bad (down since 2021-02-01 15:31:16 UTC)
Tags:Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-28n/adll ff0efdad65d67bb34986f4be712f63ebb994dfa2fbec699a5ee2693688be6463n/a Dridex
2021-01-28n/adll d987da2edc194b08694df2c82f0bdffe81e26a7ce0f76cf26336f5cb18084bb3n/a Dridex
2021-01-27n/adll 661fd79c0129401947b43d2212f5156616dc88e7d38f8b65499e6e0f0b93e39en/a Dridex
2021-01-27n/adll 5fc8b21e4976f8210d3b9ab1f9400a0fcabd720f1c3611147daa72e9a8e5624an/a Dridex
2021-01-27n/adll d22ad6672baa9d1947a2fb59d4da6ad94dd1ffca720fa060d84ea6d2dbf7a964n/aDridex
2021-01-27n/adll e58605284b9af2bfe1f5d32ffeb2a93d6e610001ed43fe6db62e8668254d1061Virustotal results 15.94%Dridex
2021-01-27n/adll 609bdf4a236231539cc2ed813319888615c646eddc20e2b559efa0e6e236bff4Virustotal results 11.76%Dridex
2021-01-27n/adll 930f3adbd388e4a5f4c86aa854cbf317ed09aefd7798e3a0e5fb6c88032bbc9fn/aDridex
2021-01-27n/adll 15144d693b83175b6dbf9e9468a33660aa6ab1f29a2650c945993af8031779c6Virustotal results 14.71%Dridex
2021-01-27n/adll 999939fcdee19930d459925a2b6bae49d42dad1f80d2137cae201770d1fec2e1n/a Dridex
2021-01-27n/adll b35b57fbcd696d157001d60ae06b778e0a8c08a02f8d2812c701dc8c82b0cd99Virustotal results 11.59%Dridex
2021-01-27n/adll 24a58167e594184da27ab543258bf883decabf055099a2c786295596a8a38b08n/aDridex