URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-10-07 11:31:03	3.70.52.8	ec2-3-70-52-8.eu-central-1.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	DE	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-09 08:23:03	http://3.70.52.8/r1/z/img2503169654100.exe	Offline	32 exe Loki	zbetcheckin
2021-10-09 06:24:03	http://3.70.52.8/R1/Z/UYH302.exe	Offline	exe SnakeKeylogger	abuse_ch
2021-10-07 18:30:04	http://3.70.52.8/R1/Z/bin-crypting.exe	Offline	32 exe Formbook	zbetcheckin
2021-10-07 13:53:03	http://3.70.52.8/R1/Z/QTL076213000008.exe	Offline	32 a310Logger exe	zbetcheckin
2021-10-07 13:53:03	http://3.70.52.8/R1/Z/QPL_112075000351102.exe	Offline	32 exe	zbetcheckin
2021-10-07 13:53:02	http://3.70.52.8/fb/z/img-0878111036633.exe	Offline	32 a310Logger exe	zbetcheckin
2021-10-07 13:49:03	http://3.70.52.8/fb/z/plt_107510013098613.exe	Offline	32 a310Logger exe	zbetcheckin
2021-10-07 13:49:03	http://3.70.52.8/fb/z/qpl-075091120003.exe	Offline	32 a310Logger exe	zbetcheckin
2021-10-07 11:31:03	http://3.70.52.8/FB/Z/IMG_741000106237874.exe	Offline	a310Logger	JAMESWT_MHT

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-09 08:23:03	815ffebdbbd8196de95355b067f49b562237b0818c5bdce80b1e4248f1b493d6	exe		Loki
2021-10-09 06:24:03	c632316bd2ab1da6746e03065b4feb4dc6b1dc6a3af4863fd7cbd1f44babf69e	exe		SnakeKeylogger
2021-10-07 18:30:04	94aa24f8b40073f3474809c5e7b5c0bb808a88a65810d92ee231baeb8efc0cb3	exe		Formbook
2021-10-07 13:53:03	e2974131c2b7d7c62379556b860db19f2dd28dbd77eddf01bd0dba673c5cd6b8	exe		a310Logger
2021-10-07 13:53:03	e5e4040c48a3b61fa0764f33c6d2192745d0529a14f58a95f46bd3db621c5334	exe
2021-10-07 13:53:02	3554f11996cf0ec2e3541b07c9460a5da109d65117795f7e1a12727184b9446b	exe		a310Logger
2021-10-07 13:49:03	ae025c9c90faa47f899e3154fde3917187f1332962729da17e29353e0afe50f3	exe		a310Logger
2021-10-07 13:49:03	d3be6e0f0d5596c000d14f103f1c773002c934753bc21ebebdb1ee2a8882d323	exe		a310Logger
2021-10-07 11:31:03	683de9f06f811629c5ff539256f0674ddcf03a60baa60783e8ef2dc1496d8b7c	exe		a310Logger