URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-04-21 17:28:14	103.232.53.243		SBL622159	AS63737 VIETSERVER-AS-VN	VN	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-05-09 08:22:10	http://103.232.53.243/MAZI/Szrgrojkmf.png	Offline	opendir	abuse_ch
2023-05-09 08:22:10	http://103.232.53.243/MAZI/Fidaeimavz.bmp	Offline	opendir	abuse_ch
2023-05-09 08:22:10	http://103.232.53.243/MAZI/Qjsbkwevgr.dat	Offline	opendir	abuse_ch
2023-05-09 08:22:09	http://103.232.53.243/MAZI/Yccuv.dll	Offline	opendir	abuse_ch
2023-05-09 08:22:08	http://103.232.53.243/MAZI/Nxcjg.bmp	Offline	opendir	abuse_ch
2023-05-09 08:22:08	http://103.232.53.243/MAZI/Ivemagwciic.dat	Offline	opendir	abuse_ch
2023-05-09 08:22:08	http://103.232.53.243/MAZI/Fcwcdfjfzz.dll	Offline	opendir	abuse_ch
2023-05-09 08:22:07	http://103.232.53.243/MAZI/Mjntxvj.dat	Offline	opendir	abuse_ch
2023-05-09 08:22:07	http://103.232.53.243/MAZI/Dxxlgy.png	Offline	opendir	abuse_ch
2023-04-26 08:40:09	http://103.232.53.243/MAZI/Mbnhftyl.png	Offline		abuse_ch
2023-04-21 17:28:14	http://103.232.53.243/windows1/networksec.exe	Offline	AgentTesla exe opendir	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-05-09 08:22:10	dc901c98553fbb1cf5bcf734fa459613b32f28a37e9ea4404d813c13ddd3bc1d	txt
2023-05-09 08:22:10	fb7df147ec4a27325eca01a97e91384f038c7f891a77c2bb9b4bcdfcd636a133	txt
2023-05-09 08:22:10	10008dd46c6c1e54876a6c3cf347c4eec743db7094fa1b062b246a49fff5a95a	txt
2023-05-09 08:22:09	c4db1033a6b627f1575fd6031a74dd2bec9f626f7439f341224cdb836e506929	txt
2023-05-09 08:22:08	d75fffd1516f341278f5fa8aeb42705a7816a3bc0542039d032a58f0b6f7760f	txt
2023-05-09 08:22:08	7796099fd953c401317305b16c3934047628914c8f77e2abd0566739872a0a21	txt
2023-05-09 08:22:08	822d587f072ed6f94d16257c7a6019513e0596a74426a50a47bdf7625859c080	txt
2023-05-09 08:22:07	a3e26b5722a02ab12d356c0cb16d171281465b486bc60979161c20ff4a7a2f94	txt
2023-05-09 08:22:07	612eb98981f686452a6a0c71cc8c3eea073722ca24eadedb029530071a4df4ee	txt
2023-05-04 14:35:46	02a554f861b98958680322db4c6e2145ac535c820869ed06ce37fbaa61932fb6	exe		AgentTesla
2023-05-02 22:39:33	c81ad39e78fde20c4d04c46a56b933fffeb81feb12a0eabc86d41a2bc067417e	exe
2023-04-30 21:28:06	d61f2f965222f6a9589551bed96dcadee9193570adc5f8e952cea482e549db29	exe		AgentTesla
2023-04-26 08:40:09	4058910cb74097d5cedccabd0f79bf6343f1775c39934a79ed93b82b189d839a	txt
2023-04-26 02:07:36	b75bd1fe99600c7ef3402534c705f1e8d3334ed91f841ee673f52e1b6b608533	exe		AgentTesla
2023-04-21 17:28:08	0bb23fead3ba01a2ced6b97198a0a12946b4ac4e2c93a39a2286636e484a035a	exe		AgentTesla