URLhaus Database

You are currently viewing the URLhaus database entry for https://tukanprint.com/ecmp7q.rar which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:980244
URL: https://tukanprint.com/ecmp7q.rar
URL Status:Offline
Host: tukanprint.com
Date added:2021-01-27 10:41:22 UTC
Last online:2021-02-01 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-01-27 10:43:03 UTC to abuse{at}sbb[dot]rs)
Takedown time:5 days, 3 hours, 18 minutes Bad (down since 2021-02-01 14:01:51 UTC)
Tags:dll Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-28n/adll 89559bfbf77fa42bcb4874aaebcab8d24b97afb967c9afdffead013a7101435en/a Dridex
2021-01-28n/adll d9940f24c40cc361e96f021941ce7231dd355170ab637fc1dd6a12a03851a844n/a Dridex
2021-01-27n/adll 3ab478760a8089eaf9a78badd68089ec109165695b56b329cd7df4f15c00b5cen/a Dridex
2021-01-27n/adll 84c64e3d5c8fa239cd7efb288f84a7a6a0aac39690c8c5131c9828829b4a0cf9Virustotal results 24.24% Dridex
2021-01-27n/adll 87e0a7b4edc2ed09ad74ce4629dd58e689331297ba783a0d28842ee2f14b45a0n/aDridex
2021-01-27n/adll a0863f1b168782926f3c612b48533c71c26d4063e6c511d7f3da9127e6b37c82Virustotal results 17.39% Dridex
2021-01-27n/adll f4196017f74fbba0c42d58aac7bcdd36ead440d975c1677ead151d391704136an/aDridex
2021-01-27n/adll 68e33e85ff85d6eb4866afeb1161136dc3f0d974673796a6f92ce5665a924b3fn/aDridex
2021-01-27n/adll c828e1555cbd88ff76bf67ff891e2fce0d5dbd3cc69878e5887fe3dbbede4756n/aDridex
2021-01-27n/adll 522fd92aa36d7796487f3350d5b9a5b3909595e5b78f0c6fd315020e3ece5447n/aDridex
2021-01-27n/adll dace6bde47bead3ca8032c326ac2abf2ec9c2e98474258cfcec6b92f6fb22a79Virustotal results 11.59%Dridex
2021-01-27n/adll a6c1fc3e3298f1c469435924a975d38c5e76ebf04ebf8c07b6704feb4fa00c4bn/aDridex