URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-08-12 07:15:05	37.0.10.83		Not listed	AS3758 SINGNET	SG	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-08-20 15:41:04	http://37.0.10.83/so/mo.exe	Offline	32 exe Formbook	zbetcheckin
2021-08-20 15:41:03	http://37.0.10.83/so/rut.exe	Offline	32 AZORult exe	zbetcheckin
2021-08-20 15:38:02	http://37.0.10.83/so/js.exe	Offline	32 exe Formbook	zbetcheckin
2021-08-20 11:34:03	http://37.0.10.83/os/justin.exe	Offline	32 exe Formbook	zbetcheckin
2021-08-20 11:28:03	http://37.0.10.83/os/moses.exe	Offline	32 exe Formbook	zbetcheckin
2021-08-20 10:22:04	http://37.0.10.83/os/eli.exe	Offline	AZORult exe	vxvault
2021-08-12 07:23:04	http://37.0.10.83/cxx/sa.exe	Offline	exe Formbook opendir	abuse_ch
2021-08-12 07:23:04	http://37.0.10.83/cxx/xds.exe	Offline	AZORult exe opendir	abuse_ch
2021-08-12 07:15:05	http://37.0.10.83/cxx/sww.exe	Offline	exe Formbook opendir	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-08-20 15:41:04	abb0ac59e0528e0323d12d411d508c2a2b1a9463f0c1036c382a1a8ee986bb2e	exe		Formbook
2021-08-20 15:41:03	0e544a7cb8a7edee3f842a7721245bf15bf8be3084cb13ded019ba79ac206bd5	exe		AZORult
2021-08-20 15:38:02	1ba83ab6f009f73bcdf5114e31a0e2959bee3c8ce049d9a562c9d04ce6cdc11f	exe		Formbook
2021-08-20 11:34:03	af0e9136ff8915ef261cd9068ddb08262cf0d034c52776854169f9f75ec13227	exe		Formbook
2021-08-20 11:28:03	35010478a1deb14596e40b68bff541fdf1567b67116de6c8b3146f7352159420	exe		Formbook
2021-08-20 10:22:03	aca7a7d812ac2192255aa3d47477f13b05963da0383e459d6b09d1630cd11aae	exe		AZORult
2021-08-12 07:23:04	ec6af3530e12f450657a1a54e44580dfd29e32a46d888c694967573b0796f3f2	exe		Formbook
2021-08-12 07:23:04	fb64982d0bee9d86ecd9ddca94b51091f146f2c77ac622c4b4c9908080ed7324	exe		AZORult
2021-08-12 07:15:04	84617e9b429736d15a45e1d0c75cd39c60b0387168fc9f46bfd4eb8b7e2d50fc	exe		Formbook