URLhaus Database

You are currently viewing the URLhaus database entry for http://torbandera.co/ag3cq1.rar which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:980262
URL: http://torbandera.co/ag3cq1.rar
URL Status:Offline
Host: torbandera.co
Date added:2021-01-27 10:41:31 UTC
Last online:2021-02-24 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-01-27 10:43:04 UTC to abuse{at}dimenoc[dot]com)
Takedown time:28 days, 5 hours, 39 minutes Bad (down since 2021-02-24 16:22:10 UTC)
Tags:dll Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-02-23n/aunknown 3532a432180c52900edccf438f42d7c0b3a0c6e469e2cb0761da00a7eb07c7f8Virustotal results 0.00% 
2021-01-28n/adll 713fc72c9fd79cbe6883bf4b9ab30d4a65ce1efac849b18c8a68da13202c5072n/a Dridex
2021-01-28n/adll d9940f24c40cc361e96f021941ce7231dd355170ab637fc1dd6a12a03851a844n/a Dridex
2021-01-27n/adll df5e90737f27d43ce6e974f93398bdcc0c3bb3999dee22cf8fb5664a6f752150Virustotal results 14.49% Dridex
2021-01-27n/adll b522019f5b5f0a42c1150b741e80d3eb08a0fc7353c67a5bec49460a9141dca0Virustotal results 15.94%Dridex
2021-01-27n/adll a0863f1b168782926f3c612b48533c71c26d4063e6c511d7f3da9127e6b37c82n/a Dridex
2021-01-27n/adll f4196017f74fbba0c42d58aac7bcdd36ead440d975c1677ead151d391704136aVirustotal results 10.77%Dridex
2021-01-27n/adll d56c056afab9e453170ddb80961e7189f5aeb0fcd8ed28f29ec05675bdac6a8an/aDridex
2021-01-27n/adll c828e1555cbd88ff76bf67ff891e2fce0d5dbd3cc69878e5887fe3dbbede4756Virustotal results 14.49%Dridex
2021-01-27n/adll 02727264fcf2b28d543dd08831f57465d17a141b324f0ebf997348c71bbbecaan/a Dridex
2021-01-27n/adll 3b08bfad1b8bcd30e0082f78c53a07e664063a832266ad2343a69b90ebf1142an/aDridex