URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-10-10 06:28:04	23.95.13.131	23-95-13-131-host.colocrossing.com	Not listed	AS36352 AS-COLOCROSSING	US	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-11-05 11:44:05	http://23.95.13.131/doc/sars.exe	Offline	AgentTesla exe	oppimaniac
2020-11-04 10:15:07	http://23.95.13.131/doc/bob.exe	Offline	AgentTesla exe	oppimaniac
2020-11-02 08:18:05	http://23.95.13.131/doc/raz.exe	Offline	AgentTesla exe	oppimaniac
2020-10-21 10:19:05	http://23.95.13.131/office.exe	Offline	AgentTesla exe	abuse_ch
2020-10-19 06:09:04	http://23.95.13.131/kings.exe	Offline	AgentTesla exe	abuse_ch
2020-10-16 17:24:05	http://23.95.13.131/amina.exe	Offline	AgentTesla exe	abuse_ch
2020-10-15 16:45:05	http://23.95.13.131/bob.exe	Offline	AgentTesla exe	abuse_ch
2020-10-14 16:40:05	http://23.95.13.131/bag.exe	Offline	404KeyLogger exe	abuse_ch
2020-10-14 06:12:06	http://23.95.13.131/osinachi.exe	Offline	AgentTesla exe	abuse_ch
2020-10-12 09:49:05	http://23.95.13.131/jesu.exe	Offline	AgentTesla exe	abuse_ch
2020-10-12 05:40:05	http://23.95.13.131/kaptain.exe	Offline	AgentTesla exe	abuse_ch
2020-10-10 06:28:04	http://23.95.13.131/baba.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-11-05 11:44:05	599cf925792d277131ea91b93c908324fd3115e4bda163cae7ab0f44dd3cd263	exe		AgentTesla
2020-11-04 10:15:07	a5cab0a179d83d27c7cddb804f83325d5c47825b09150dd80c1ec55033d25b74	exe		AgentTesla
2020-11-02 08:18:05	48df21e0db1ed0c865e729b5469ff5059f582b3d53bdc44c88aab6fe2f398075	exe		AgentTesla
2020-10-21 10:19:05	46cd81c55aa852ff497dc45e1a90cad856697c04133c63a12c0f4ba2cd2a4e56	exe		AgentTesla
2020-10-19 06:09:04	7cd9624b6ba4422a372ba8d01bf1287ec10abe7b5d658d40fda20a07344e906c	exe		AgentTesla
2020-10-16 17:24:05	d6b92ecd3617d817df1553d6ea6bc37afa5c527ffc997c94eee5223efa6c0c26	exe		AgentTesla
2020-10-15 16:45:05	d9029ab42ac205dc948b7d7d03010db9bc5c9a1893bd72bb0970a82751e2f047	exe		AgentTesla
2020-10-14 16:40:05	16732dd83907bd9e881729cca144a2008193830f9db8686030216091a380d9d0	exe		404Keylogger
2020-10-14 06:12:06	b60f7101e7fe4632ce94f03fe039e6ff31d5d4a00b304fff73f7cfd3d9023e4c	exe		AgentTesla
2020-10-12 20:10:05	f5341d66214d3735ee48fb7344753c6d4d8d9a8c5d0a3fa3d55fa6ceb7fff74e	exe		AgentTesla
2020-10-12 14:37:26	7ed42f7ef1538a1e13b685f37ed0b2995fdd7151af2a5ae97c68112bb244ef8d	exe		AgentTesla
2020-10-12 09:49:05	a58b3b7f178d68f4a4c9a1985bc2add6b951f449d18050a50282ab98d0884a8a	exe		AgentTesla
2020-10-12 05:40:05	fc23fe967415672cbd925b8f8e1ab099003ba329592b4075fa36c8e53582f5cd	exe		AgentTesla
2020-10-10 06:28:04	08cbeda02bbd881b472a19322159f285ead2de6968a102826a11d7b38bfe6172	exe		AgentTesla