URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-12-06 18:33:11	15.204.49.148	accgeneral1.webhop.org	Not listed	AS16276 OVH	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2024-02-21 09:30:23	http://15.204.49.148/files/un.config.CfgEncFile	Offline	Amadey potentialransomware	abus3reports
2024-02-21 09:30:22	http://15.204.49.148/files/2UN.config.CfgEncFile	Offline	Amadey potentialransomware	abus3reports
2024-02-21 09:30:22	http://15.204.49.148/files/1UN.config.CfgEncFile	Offline	Amadey potentialransomware	abus3reports
2024-02-08 08:24:06	http://15.204.49.148/files/AK1.exe	Offline	dropped-by-PrivateLoader	Bitsight
2024-02-04 23:57:10	http://15.204.49.148/files/InstallSetup22.exe	Offline	32 exe Stealc	zbetcheckin
2024-02-01 08:50:11	http://15.204.49.148/files/Amadey.exe	Offline	32 Amadey exe	zbetcheckin
2024-01-29 16:49:08	http://15.204.49.148/files/Setup11.exe	Offline	dropped-by-PrivateLoader fabookie	Bitsight
2024-01-09 07:41:23	http://15.204.49.148/files/456.exe	Offline	64 exe zgRAT	zbetcheckin
2024-01-07 07:27:38	https://15.204.49.148/files/Had.exe	Offline	Smoke Loader	adm1n_usa32
2024-01-07 07:27:31	http://15.204.49.148/files/Had.exe	Offline	exe Smoke Loader	adm1n_usa32
2023-12-23 05:58:07	https://15.204.49.148/files/InstallSetup2.exe	Offline	64 exe fabookie glupteba LgoogLoader Smoke Loader Stealc zgRAT	zbetcheckin
2023-12-22 16:12:07	http://15.204.49.148/files/Rby1.exe	Offline	dropped-by-PrivateLoader glupteba Smoke Loader Stealc	andretavare5
2023-12-06 18:33:11	http://15.204.49.148/files/Installsetup2.exe	Offline	dropped-by-PrivateLoader fabookie glupteba LgoogLoader Rhadamanthys Smoke Loader Stealc zgRAT	andretavare5

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2024-02-24 04:05:42	9773188a351d42f885f0c2ca179c6353de93d160cf06c6e99ad9415a932af80f	unknown
2024-02-23 19:00:25	82aa997703f8e492c6f6808d9be1e15ed01091373aa465785f47cbf0646b77f1	unknown
2024-02-22 04:24:03	44df4e27ca44fc7b5abe4444405a218bc9f1cac0a642386cea6c6919eabefd6c	unknown
2024-02-21 09:30:23	ff0929ee7f001092f89acbc2b53bf5eb3c5878160f710b04c57b7840ceff6b90	unknown
2024-02-21 09:30:22	8fa9e32491f921646a5bc8f34ff57a808fbfaee0820e18c99bf34948fac20be9	unknown
2024-02-21 09:30:22	4697778458ee1df88d277a3bfe77816e247156e3c1a7c5c15ba4326529b64b7d	unknown
2024-02-10 20:28:09	c307873c80fd5892e04c45d29ccc3f0ad506f0e77d768f20426851434df2f933	exe		Amadey
2024-02-09 09:13:53	cd777fccd75a97cd49731bc0bac87112a0a43d3172c654c1b73bd88fe9e2afee	exe
2024-02-08 08:24:06	45e00f7ba6c5dc1f7b0e01b9f232dfcd0f2f347678bbab581894249716e4541a	exe
2024-02-04 23:57:10	6c1a2d364c63d957989483ed42bab9c880c0cb96eca3c56b86f1ed360bd39c8b	exe		Stealc
2024-02-01 08:50:11	3bb45ee150f445209bc66044d461a5bfd4c1ff424bc9eaf016eb2dac6fd6c1b8	exe		Amadey
2024-01-30 19:50:44	86674590d311280ebafc9d0ea35a17c5f7a7d6edc335baaaee38309c57c73a77	exe		LgoogLoader
2024-01-30 19:46:55	86674590d311280ebafc9d0ea35a17c5f7a7d6edc335baaaee38309c57c73a77	exe		LgoogLoader
2024-01-30 16:41:57	84f9f404de26cf9030444c669ade0cae3fcb2edd98d74a2e9bf2e5ae5712da87	exe
2024-01-30 16:41:21	84f9f404de26cf9030444c669ade0cae3fcb2edd98d74a2e9bf2e5ae5712da87	exe
2024-01-30 05:21:09	5bb1fbf226f1160346f62cca7f2ef06657e6aabac6b6c38c0a4a2f3744312ce4	exe
2024-01-30 05:19:41	5bb1fbf226f1160346f62cca7f2ef06657e6aabac6b6c38c0a4a2f3744312ce4	exe
2024-01-29 16:49:07	068f44c4be9fe6476e001c866876b9495f6ad03835807364ea7eb499037aa6a9	exe		Fabookie
2024-01-28 02:42:55	fb2b3cee6ed4ce327e57f631befe82f24499a9a227371f351586daa9d92640ca	exe		Stealc
2024-01-28 02:25:33	fb2b3cee6ed4ce327e57f631befe82f24499a9a227371f351586daa9d92640ca	exe		Stealc
2024-01-27 20:22:59	42612f9ca7bda45342938a2e95394aadbe8dc4886be35aa4ed9bf13ab40de53b	exe
2024-01-27 20:06:13	42612f9ca7bda45342938a2e95394aadbe8dc4886be35aa4ed9bf13ab40de53b	exe
2024-01-27 02:40:29	17ed11df8f69250fe2b7447a7c139cb59faa9318f550e27b7f1eaff5ec59fef6	exe
2024-01-27 02:29:37	17ed11df8f69250fe2b7447a7c139cb59faa9318f550e27b7f1eaff5ec59fef6	exe
2024-01-23 03:27:03	8f1db790b8dcd0cfa72966ee8702bfd44c52600a290e40285b21bd6f356c12c5	exe		Fabookie
2024-01-23 03:08:14	8f1db790b8dcd0cfa72966ee8702bfd44c52600a290e40285b21bd6f356c12c5	exe		Fabookie
2024-01-18 02:51:00	6ed3de614155bf8fc83672c2e088a2b8e3edd9aa01355455802b8b81ce7be0ec	exe
2024-01-18 02:50:09	6ed3de614155bf8fc83672c2e088a2b8e3edd9aa01355455802b8b81ce7be0ec	exe
2024-01-13 03:24:25	b5a550031245113f336edee9de44a8e5473eb4dd02c4201566a54c129df3f000	exe		Fabookie
2024-01-13 03:12:24	b5a550031245113f336edee9de44a8e5473eb4dd02c4201566a54c129df3f000	exe		Fabookie
2024-01-09 07:41:23	48b0afb9f404d55c311994ab4da41e3aa6dacd23a1b8e0de1addfe6f9fea4d11	exe		zgRAT
2024-01-07 07:27:37	2c009fefcf337b8b5e4f0249aeb1627d3a39934097cf5fea75b16c5aa9a7f374	exe		Smoke Loader
2024-01-07 07:27:31	2c009fefcf337b8b5e4f0249aeb1627d3a39934097cf5fea75b16c5aa9a7f374	exe		Smoke Loader
2024-01-03 18:16:21	455a6a7f15ba86a0fe02ae1d8beff7a3dc8e858380244a45141054b0d330135c	exe		zgRAT
2024-01-03 18:14:15	455a6a7f15ba86a0fe02ae1d8beff7a3dc8e858380244a45141054b0d330135c	exe		zgRAT
2023-12-31 01:34:19	cad66abae32e9de58d1538c7a992a350661f5a7d5c4774605c75183a038c8a08	exe		Glupteba
2023-12-31 01:28:12	cad66abae32e9de58d1538c7a992a350661f5a7d5c4774605c75183a038c8a08	exe		Glupteba
2023-12-29 03:11:54	f58ad4337612da61eb8872c59cf8c5a7c6ccbc36872284ff69ba053809d4195d	exe		Glupteba
2023-12-29 03:02:46	f03426437ef56b9a40f7bb9ffced80201a8d1864b3fa943e827c2d893c92fef0	exe
2023-12-29 02:57:11	f03426437ef56b9a40f7bb9ffced80201a8d1864b3fa943e827c2d893c92fef0	exe
2023-12-27 02:16:07	9e8fd63fbf58938109c336c047af0e0bd059b3b7840da0ae1577b4ba9fd20599	exe		Stealc
2023-12-27 02:03:45	805092e0147098b3b21bf2c822e85b3591ce27a8ac1c3be99829fb2747ca02f0	exe		Stealc
2023-12-27 02:02:45	9e8fd63fbf58938109c336c047af0e0bd059b3b7840da0ae1577b4ba9fd20599	exe		Stealc
2023-12-25 18:17:00	7e8958eccdf94838193099c458dc96c68ac7d07f14bb28e99e2ea0e5c83cfb03	exe
2023-12-25 18:15:31	686f86908d4503d58f2ee7ff6b714226577a40ef60807ab20923ff3d5ad5b30e	exe
2023-12-25 18:08:33	7e8958eccdf94838193099c458dc96c68ac7d07f14bb28e99e2ea0e5c83cfb03	exe
2023-12-24 05:39:46	5ece35d565cc0b5274c6ce8cf9a782c9c8e07baa2296267454fbc325d194a1cd	exe		Stealc
2023-12-24 05:34:32	e6e1106fec7137b46da15bdd0853b1b9a6104bce649a24145793e4d451261c6b	exe		Stealc
2023-12-24 05:29:02	5ece35d565cc0b5274c6ce8cf9a782c9c8e07baa2296267454fbc325d194a1cd	exe		Stealc
2023-12-23 05:58:06	ff3bd8bcbd9f93c0b48fac3dad59735db9db2343da3126bc836a3134b563924d	exe		Smoke Loader
2023-12-23 02:26:46	4e2375353e49f18d6679c5372a688fc5c9a2ae3994830e6fe19e1cd20bc5ea6d	exe		Smoke Loader
2023-12-23 02:24:01	ff3bd8bcbd9f93c0b48fac3dad59735db9db2343da3126bc836a3134b563924d	exe		Smoke Loader
2023-12-22 16:12:07	89a5243cac0104e257ede052b495cf346c995df99c306f344650b8b88e89f42d	exe		Stealc
2023-12-22 05:21:52	20611e98cfa1eb933a6f90afaa222b832637a27015251fb40d2fc8fd6157f7a5	exe		Stealc
2023-12-17 02:01:33	a8cc276de2e2a2310a86a5bd2649554f04d6d2015bb3a77370c1e37e1d27c97c	exe
2023-12-16 18:06:40	f3c2557bd0d203790395065d0912947cface0eef8c18132405be7a8b1fea252b	exe
2023-12-16 01:08:17	cc8b87ae334d636c7bc03c02de55e6489e193114266a8dc997c50d8e9e0d24e3	exe
2023-12-15 20:51:46	b72aad1bb85af2b585a9b91eabe2cba281d21fe4b9f9ff78e75f6753e994d990	exe
2023-12-14 14:09:03	02a5992ebd2c53892c3f855999aa1d6ab6ccebb3b104e3b50a967d0a8b4bc42e	exe
2023-12-14 00:58:10	65853f722723f376be8509a5e134b3499a5fb6cd407e638a6049cddc4a6d0527	exe
2023-12-13 19:04:05	a9b2d057ae7bcc20f1cf8c059f0dfdf4d6d1a7d8af58c406795595311c759166	exe
2023-12-13 00:58:28	1cdfe75e001473ef46290dc86ee6b54bb6af93dd8b2b8a8b8cf9eb12dbaea154	exe
2023-12-12 01:13:01	6e63a47d125df9d879cb2ac15604284b38fefd4235eb493b7c62f4d0e59e1fcf	exe
2023-12-11 01:10:56	33f5cbacef8878e3e922bfb0a651750ff873a91ac4d42a742e187ef8f789f5c1	exe
2023-12-10 18:16:43	2772403df32adec199765d4a7119d17aa066dc21d583aa7eac8f5d71571fe3a3	exe		Glupteba
2023-12-10 01:02:18	0acc5eca8860dc87070e066f3258296228439b35bdb9fbc02185fc861a97475f	exe		Stealc
2023-12-09 18:48:12	b7283eee6896c605fbaf0c06c8c39d0d7bb43df0fcec72e7d63873732cfd4f8e	exe		Stealc
2023-12-09 01:18:46	51d8d1c7a0b2aa618b476ff090fe95509c96241a0a7bbfe04663b24c1e89c6f3	exe		Stealc
2023-12-08 00:53:40	e0c8662ec6617b3f32e98860b382dd9a626952ec1845459469ba235ed13b53d8	exe		Stealc
2023-12-07 01:10:47	08350103990b4a2c500792ff535bbda6019c06dc00e3a2c8f7d42da234f94531	exe		Stealc
2023-12-06 18:33:09	686a9348e5412fe8d386b0e44723d8b7b538399e001741a628babf64d15d6a62	exe		Stealc