URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-08-04 04:44:06	5.255.105.147		Not listed	AS60404 Liteserver	NL	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-08-04 04:44:06	http://5.255.105.147/key.exe	Offline	dcrat exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-10-22 14:05:54	4e405b2c14abf193f443acd586180bf6f8a661b2418249524d393e7945c56c93	exe
2023-10-19 12:15:30	e3e05610449a5773a250e48b6f52b8a0daf59789a9fc85cffa111dfd915f9a3e	exe
2023-10-10 01:30:14	1d59c56516753d778e129da47890117d03144ce54584f063ecfa2c9f9b148b2e	exe
2023-10-06 04:14:12	f98ad11281ea6d1cf52eaeded43e16a0b73f52d17429380be329ff7069aff55a	exe
2023-09-28 05:08:12	024c933e0370dd86218949dc904f5f8d9cb3f26735286bab618714859b7848bf	exe
2023-09-08 14:58:27	1a1ffcbab9bff4a033a26e8b9a08039955ac14ac5ce1f8fb22ff481109d781a7	exe		DCRat
2023-09-08 14:07:02	d774b1d0f5bdb26e68e63dc93ba81a1cdf076524e29b4260b67542c06fbfe55c	exe
2023-09-06 09:45:31	a00beaa5228a153810b65151785596bebe2f09f77851c92989f620e37c60c935	exe		DCRat
2023-08-04 04:44:05	9c9d8a801b826de4a8d05a300673282ade62891684f682a695e6a1a8db083466	exe		DCRat