URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2019-11-27 11:48:05	45.137.22.59	hosted-by.rootlayer.net	Not listed	AS51447 ROOTLAYERNET	NL	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2019-11-27 20:28:02	http://45.137.22.59/anggel/img.jpeg	Offline		p5yb34m
2019-11-27 20:27:24	http://45.137.22.59/anggel/pc.jpeg	Offline		p5yb34m
2019-11-27 20:18:04	http://45.137.22.59/anggel/win.exe	Offline	AgentTesla Formbook	p5yb34m
2019-11-27 20:14:03	http://45.137.22.59/anggel/angel.vbe	Offline	Formbook	p5yb34m
2019-11-27 18:21:04	http://45.137.22.59/morrrrt/vbc.exe	Offline	AgentTesla exe	zbetcheckin
2019-11-27 16:08:07	http://45.137.22.59/loveees/v.exe	Offline	exe Quakbot	oppimaniac
2019-11-27 16:08:05	http://45.137.22.59/loveees/vbc.exe	Offline	AgentTesla exe	oppimaniac
2019-11-27 14:30:04	http://45.137.22.59/bbggmm/vbc.exe	Offline	exe	zbetcheckin
2019-11-27 14:24:04	http://45.137.22.59/bbggmm/win.exe	Offline	AgentTesla exe	zbetcheckin
2019-11-27 11:48:05	http://45.137.22.59/anggel/vbc.exe	Offline	exe Formbook Quakbot	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2019-11-28 10:37:40	fc4bc043d438967115a50571e55484e01023e03d975d646ca345e948092f17b0	exe		AgentTesla
2019-11-28 10:37:18	736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582	exe		Quakbot
2019-11-27 20:18:04	a6346505b1bc3d2b3cfbdbb2c03934be512206b69a940a8ae9c3900eaa78b03a	exe		FormBook
2019-11-27 18:21:04	5683f9e5a5c66581aa5bda9d75d72329477a1009c62fb60f0d12a12f13e9ba21	exe		AgentTesla
2019-11-27 16:08:07	736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582	exe		Quakbot
2019-11-27 16:08:05	2a745be7666179f899a98e38100ed51ce64a346abaf97cdb5bb37f2f937b7daf	exe		AgentTesla
2019-11-27 14:30:04	aa589381220413a2f4ab55a90e40a24fd9dba83f037f764e86a8d1a939f043a9	exe
2019-11-27 14:24:04	4975876a8ede7d290b65e22f8f362057a85d2e2390c70ac940c46d067d562d3f	exe		AgentTesla
2019-11-27 11:48:04	277c69c8f6d9e8f396455ba5ba927507ac0f7b88501e21d719d7e83b94a1dc91	exe		FormBook