URLhaus Database

You are currently viewing the URLhaus database entry for https://1p57.com/bxkihjojf.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:980247
URL: https://1p57.com/bxkihjojf.zip
URL Status:Offline
Host: 1p57.com
Date added:2021-01-27 10:41:22 UTC
Last online:2021-01-28 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-01-27 10:42:45 UTC to eig-abuse{at}endurance[dot]com)
Takedown time:1 day, 8 hours, 27 minutes Poor (down since 2021-01-28 19:09:58 UTC)
Tags:dll Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-01-28n/adll ff0efdad65d67bb34986f4be712f63ebb994dfa2fbec699a5ee2693688be6463n/a Dridex
2021-01-28n/adll 3153551bfefd5417573ed045c6b39796e85eaa2cd4c573b69211bbe1b4b7d75dn/a 
2021-01-28n/adll 7a200360163701a899ef12510b1bfb5a88bb904800e8cf8c687ca2a5a36247ddn/a Dridex
2021-01-27n/adll b6669b0677186d99b92663c86ac5c035884271e4fa76aaa9fa054dcc3d13969cn/a Dridex
2021-01-27n/adll c7f7daea8aa81d8ca8978ce28ab59ac655c141e871e09093afef3ee94a8634a7n/a Dridex
2021-01-27n/adll 1aebe4e7d4af56d65b83ccda8db82cf539970862513554a01812fcb6dc085b68Virustotal results 16.42%Dridex
2021-01-27n/adll 029ae6ff82c941c83049b7387d1d3f367077e9c27645e2c951ac8a9f8ac51d5bn/a Dridex
2021-01-27n/adll 609bdf4a236231539cc2ed813319888615c646eddc20e2b559efa0e6e236bff4Virustotal results 11.76%Dridex
2021-01-27n/adll 25c522b40ba520f905aebe985d7b22789c595bb4ec5a9c9234cf3ed5a15c9502n/aDridex
2021-01-27n/adll 15144d693b83175b6dbf9e9468a33660aa6ab1f29a2650c945993af8031779c6n/aDridex
2021-01-27n/adll 1f6ac943d2866d3521135b96309fb721ccc552369d7543dec60106c014edeef0n/a Dridex
2021-01-27n/adll aca6dadc8cf23497c48a11899481945920a62edd3568f5d0c67cf96e11543ee0Virustotal results 12.12%Dridex
2021-01-27n/adll cfc7dc603faeb37131d1539ac805951e9dfde304c6c57447eff742d4a7b90a37Virustotal results 11.94%Dridex