URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-06-15 14:11:07	192.227.158.111	192-227-158-111-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-08-15 07:21:05	http://192.227.158.111/AcrobatDC.exe	Offline	bitrat exe rat	abuse_ch
2021-08-10 07:29:05	http://192.227.158.111/bank.exe	Offline	exe RemcosRAT	vxvault
2021-07-30 20:43:05	http://192.227.158.111/credit.exe	Offline	32 exe RemcosRAT	zbetcheckin
2021-07-30 19:12:05	http://192.227.158.111/clip.exe	Offline	remcos RemcosRAT	James_inthe_box
2021-07-23 20:52:05	http://192.227.158.111/hunt.exe	Offline	remcos RemcosRAT	James_inthe_box
2021-07-20 20:30:06	http://192.227.158.111/gut.exe	Offline	32 exe RemcosRAT	zbetcheckin
2021-07-14 19:58:06	http://192.227.158.111/dit.jpg	Offline	remcos	James_inthe_box
2021-06-18 06:51:05	http://192.227.158.111/hut.exe	Offline	exe rat RemcosRAT	abuse_ch
2021-06-15 14:11:07	http://192.227.158.111/newr.exe	Offline	exe rat remcos RemcosRAT	ffforward

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-08-15 07:21:05	704e26dbdebc8b3ad1391f5b9d671f8b9550609455821540151ff70e17bed798	exe		BitRAT
2021-08-10 07:29:05	dcfbcb0018eb4a0bcca81d7990bde125541b7c9de20c16142ba46140261a0b0d	exe		RemcosRAT
2021-07-30 20:43:05	e1686c75b6d0982c533063557289dd24d66ba74a9dd37cd5d328c3451035a01f	exe		RemcosRAT
2021-07-30 19:12:05	fd866b4e18b49ef0232eda27280a0d56a9e408792bba4cddded1961fe64e7bf3	exe		RemcosRAT
2021-07-23 20:52:05	4825f620ea431958e79491a625aa756aaf26e1305758381d503869b43393a2e0	exe		RemcosRAT
2021-07-20 20:30:06	33b1629dc01123f78d568c7638f33ca6619834daad9866f666c00062920b13da	exe		RemcosRAT
2021-07-14 19:58:06	be226a34b06060b772293f73f227e5dced4b3c90d1533b767d95006e97580b6b	txt
2021-06-18 06:51:05	cd35cae0b96e7e0e19d837c418128aa3336fb5e714bc04fb2c1d90c46a7a2124	exe		RemcosRAT
2021-06-15 14:11:06	3f5ccdc99b29651852d447f8587f5cfa5e108ea10dba0eed36d436a4b6e73719	exe		RemcosRAT