URLhaus Database

You are currently viewing the URLhaus database entry for https://gpworksinc.com/ntd7zy47.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:980275
URL: https://gpworksinc.com/ntd7zy47.zip
URL Status:Offline
Host: gpworksinc.com
Date added:2021-01-27 10:41:41 UTC
Last online:2021-03-11 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: reecdeep
Abuse complaint sent (?): Yes (2021-01-27 10:42:10 UTC to abuse{at}publicdomainregistry[dot]com)
Takedown time:1 month, 13 days, 8 hours, 30 minutes Bad (down since 2021-03-11 19:12:56 UTC)
Tags:dll Dridex link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-03-05n/adll 8100cb7871670e10bdb2b9c30b578fecb47cf6dfa1b5f488e8b542de1053fb99Virustotal results 35.38% Dridex
2021-01-28n/adll ff0efdad65d67bb34986f4be712f63ebb994dfa2fbec699a5ee2693688be6463Virustotal results 26.32% Dridex
2021-01-28n/adll af64132d865c856db59b8dc8ea3210af859503aa2ea06384fe59c1cc3b6661d5n/a Dridex
2021-01-27n/adll 661fd79c0129401947b43d2212f5156616dc88e7d38f8b65499e6e0f0b93e39en/a Dridex
2021-01-27n/adll cf9638eb6d3bc3bd78b17dc84a4d78dd79586e48ed78770f8f50e1cd67deca08n/a Dridex
2021-01-27n/adll c1e0d19ecd4192e14ebd8c41073207c881b7104a68e30469821464a726f93be7n/aDridex
2021-01-27n/adll 5025a453c45d853b3d2b2683eb4f5ddcaaf3af5430f37cf52428bc10f2768ae7n/aDridex
2021-01-27n/adll ee0d0cdb50a25529043244c035bafe10936194d268ebcce2cd55387e3491ba5dVirustotal results 11.94%Dridex
2021-01-27n/adll 25c522b40ba520f905aebe985d7b22789c595bb4ec5a9c9234cf3ed5a15c9502n/aDridex
2021-01-27n/adll 15144d693b83175b6dbf9e9468a33660aa6ab1f29a2650c945993af8031779c6Virustotal results 14.71%Dridex
2021-01-27n/adll 5156f1647dabebf075ad3f98f12f34d30df1bac046407f014349ded1a406a0ebn/a Dridex
2021-01-27n/adll 0545d620abf1d2bee320cfabf8ef873041a0a051c928307057d3a15bf3ecc266n/aDridex
2021-01-27n/adll 481eee3d2481deaee26af1afd66628f0cb41b2b7aa961535608de11dd0a87c7dn/aDridex