URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-08-22 07:12:07	5.42.65.80		Not listed	AS39493 RU-KSTV	RU	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-11-25 00:27:23	http://5.42.65.80/decord.exe	Offline	32 exe glupteba	zbetcheckin
2023-11-18 07:36:11	http://5.42.65.80/brandrock.exe	Offline	32 exe Smoke Loader Socks5Systemz	zbetcheckin
2023-11-03 06:56:27	http://5.42.65.80/latestrock.exe	Offline	dropped-by-SmokeLoader glupteba Smoke Loader Stealc	Casperinous
2023-10-15 23:29:07	http://5.42.65.80/newrock.exe	Offline	32 Amadey exe glupteba LummaStealer Smoke Loader Stealc	zbetcheckin
2023-10-04 08:06:05	http://5.42.65.80/rinkas.exe	Offline	Amadey dropped-by-SmokeLoader LummaStealer Stealc	Casperinous
2023-09-29 11:50:16	http://5.42.65.80/ship.exe	Offline	Amadey exe LummaStealer Stealc	abuse_ch
2023-09-18 04:43:07	http://5.42.65.80/rockss.exe	Offline	32 Amadey exe Smoke Loader Stealc	zbetcheckin
2023-09-15 06:21:06	http://5.42.65.80/Rocks.exe	Offline	Amadey RedLine stealer	vovaan
2023-09-06 15:22:05	http://5.42.65.80/ss41.exe	Offline	64 exe fabookie	zbetcheckin
2023-09-06 13:48:06	http://5.42.65.80/31839b57a4f11171d6abc8bbc4451...	Offline	32 exe glupteba	zbetcheckin
2023-09-01 17:16:05	http://5.42.65.80/4t.exe	Offline	64 exe	zbetcheckin
2023-09-01 16:29:07	http://5.42.65.80/alldata.exe	Offline	32 exe glupteba	zbetcheckin
2023-09-01 15:44:05	http://5.42.65.80/softtool.exe	Offline	32 exe Smoke Loader	zbetcheckin
2023-08-30 10:39:06	http://5.42.65.80/UMR.exe	Offline	64 exe	zbetcheckin
2023-08-30 10:39:05	http://5.42.65.80/c763cdaf.exe	Offline	32 exe Smoke Loader	zbetcheckin
2023-08-27 15:17:05	http://5.42.65.80/toolspub2.exe	Offline	32 exe Smoke Loader	zbetcheckin
2023-08-27 13:42:07	http://5.42.65.80/religionprosig.exe	Offline	64 exe	zbetcheckin
2023-08-26 08:12:05	http://5.42.65.80/toolwork.exe	Offline	exe Smoke Loader	abuse_ch
2023-08-24 08:02:07	http://5.42.65.80/data.exe	Offline	32 exe glupteba	zbetcheckin
2023-08-24 04:09:04	http://5.42.65.80/repairtool.exe	Offline	32 exe Smoke Loader	zbetcheckin
2023-08-23 23:23:09	http://5.42.65.80/datacas.exe	Offline	32 exe glupteba	zbetcheckin
2023-08-22 07:12:07	http://5.42.65.80/supr.exe	Offline	Amadey dropped-by-PrivateLoader Smoke Loader	andretavare5

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-11-28 17:29:09	af28ca70335efa9702faf39ba2f9313123b6453350855b287653151a6b5944e9	exe		Smoke Loader
2023-11-26 21:27:04	5c130c14c829a8165ae0ce89388f02bbc7fb0a3eb915d88ae9088cebfae1cbec	exe		Socks5Systemz
2023-11-26 10:41:43	075a1c2838c1f88bd6be4b8450be21c677938f02574e6ea05fe5ef8487cc182a	exe		Smoke Loader
2023-11-25 00:27:23	464c7ab944886103d617e334c94320344761a543de5395c6b541ae386b448ea0	exe		Glupteba
2023-11-22 19:27:47	78bf5f97aac9ed7e988fd919aa5f1212b4712b01aea5892137cc10e13158222a	exe
2023-11-22 06:41:45	6f8cac0c8053b3ea09ac50ad61d0fbe673439008af8f612afdf9d7ab17b5a694	exe
2023-11-21 15:26:31	95894fc590395b9ff90289469bcce0182b4845a63af15c97f845b74982b0d0b5	exe		Smoke Loader
2023-11-20 06:11:26	665a3b9999f1d6716fa1a0a537b1baade26027629da4c8964f011969ea49b0de	exe		Smoke Loader
2023-11-18 16:22:06	a4da06d0ab56fd0790449662e712fde91902849b4e50fd30f389fcb4bf76a6e3	exe
2023-11-18 10:59:22	8817cbb6de1446a920401a072df1453459aa95684ffc7da9c05ca759b1836c0c	exe		Smoke Loader
2023-11-18 07:36:11	0889831e4c97e94979a7cbafe87f3dcd3106f0be34e85487055bd47df1ca0a57	exe		Smoke Loader
2023-11-17 16:57:43	eeb8488e53c847357e34e2869e3a265f7b55aca14fa9270da85a022bb5912d7d	exe
2023-11-16 21:15:21	6f735da34e90dce7418f49a7d25fa183650fd9fe681804a9ab5f80d3005b1c5d	exe		Smoke Loader
2023-11-16 16:44:52	7eeec8c77dae7ae63692da71d01d9299d0c3a3453abc0ee85b72e52a338d560d	exe		Glupteba
2023-11-13 07:35:29	cf7afbb776ecb9d56aadbe8b35a2491d92c2eb30cf3b4b121fec74d8d285d88d	exe		Smoke Loader
2023-11-13 07:34:33	c2bf118e4b933b8a54ac5841c280231320182cce5e2e3af28e5db089b6198e4d	exe		Smoke Loader
2023-11-13 00:27:46	e5a7a57457a26d720ea4e758528da46c8b327bd8e31e5aff0999366898650d37	exe
2023-11-12 18:12:31	5b42f5ea4b59984f6fc9c2cbcb4608e3f1b891d5653d53050ef415e029bcd128	exe
2023-11-12 16:38:30	81632ed8cb54c19688b06bf33f49214f259454d8be8d41a0a54632b32472c156	exe		Smoke Loader
2023-11-12 16:27:05	5184c87f70fd14293e599b26fc4361ec3e5708095678c8a84143a059be319cf5	exe		Smoke Loader
2023-11-12 12:37:47	b3f31d727fb8e0b68a98b70cdb8756d003bbaa9f74aed96d456cb28a4e1d4cf1	exe
2023-11-12 06:12:02	8f6ac0c963a5642c211bc5d6bb47da885562908f716c98c21560e29acfe6e42e	exe		Stealc
2023-11-12 05:42:13	9d8ca0ed84c5b3a858c2230000f28d9326ceeefc8a8a603e9af3c6c1bc65ba67	exe		Stealc
2023-11-12 02:43:25	471e7356f5688b05ab5ae1608a09f1af680ed17b7b857138f404a6321dcca7e2	exe
2023-11-11 21:04:58	19ed8a06e27e50c441bb3b3e0c743ea9f0263b43154e323a93e5b78953162e32	exe		Stealc
2023-11-11 20:32:55	c646664de8fc9fee5af83d716642be363f0965fa3d95958b433719bd3e73a778	exe		Stealc
2023-11-10 09:35:58	2f831895016ec2f255ca65fb3fb7b7aac1c5f8bd07569fd170bba8dabca86f7c	exe		Smoke Loader
2023-11-09 18:01:54	72abf8c3fb6a8203fb09cc25458d00eaf0c09b243530cddeb1cebdd110a5f607	exe		Smoke Loader
2023-11-09 17:47:22	ace19af274a8621575b615838a1ea1ebca87ef0917fa4fba4c94251c9cadd31c	exe		Smoke Loader
2023-11-09 06:32:15	8e45063e1a145b4615ebed660283c782c83ed9a8887f0ad5d5323fc605af2f35	exe		Smoke Loader
2023-11-08 20:27:10	3896ce0e1c5303b2a1e3fd68b483da076de04d757ea5226e6dac5429e25f7a66	exe		Smoke Loader
2023-11-06 05:22:06	611e6e42c48a86177c0bcb9cbde807ad275d13440e1772a7eaf29d3891db3f3b	exe		Glupteba
2023-11-05 18:07:43	12e23f7064f23cfda81e75f0b778e2fbdc508372d26de1e283b6e36988afc26a	exe		Glupteba
2023-11-05 15:24:29	3397a524da79660589f2c4ff107d9018d01d2918feeba20f5d7e4c87b4a9edb4	exe
2023-11-04 23:19:48	fafc3b0e8af66f908427a0213f414344712ad4f9afa4fb2d0a7bd58aec091a30	exe
2023-11-03 19:21:08	f24d47bd9cc9daa71c869a1d06551801395ba2bbbff0c33a102e79d32c0a630d	exe		Glupteba
2023-11-03 14:19:09	985ace3f4d50e1df595a3ff06455a42300d16c50989cf132d88e16e150cd0998	exe
2023-11-03 06:56:27	54349953542084ceceb6de40c4edc6124bf69ccad39051a62d8e2be651acb9dc	exe		Smoke Loader
2023-11-02 20:12:59	e5e0558d007f65ee85a22fe837df740ce55f8f40455206f3df502bf4ac564f75	exe
2023-11-02 18:17:34	79d08c963936f636caf08c7b738a7cd09aea0e4e762e2600adc6e62745a3087e	exe		Glupteba
2023-11-01 17:31:50	8e0cf22b0de87b986ce6653e5d892633688574d1b51662fdeb620697b79a122a	exe		Glupteba
2023-10-31 13:07:59	56ae58cbc108cb9d2237a4aff5509a0fd5862d4cf4bab8adfde9a4c49c5e9392	exe		Glupteba
2023-10-29 15:18:38	8a964d8fb52489ba9086bf0ab5cf8ca7822fe698d03e5e6d5174640f52b8c5ee	exe		Smoke Loader
2023-10-27 19:37:17	c3847002a8cd53999920d0024658212061b4173877e1afb61126543e1a17172c	exe		Glupteba
2023-10-27 05:06:08	5618ce8cda91260aaa569b6848108ecef4ffa8a9836ee25d92f8e85523def7cd	exe
2023-10-26 19:03:31	3d69fe50e9052d908c98e00921a10512ebf2ba3ef109459a6b979795fd5178ad	exe
2023-10-26 18:11:20	ba45603aa8d33513bee6297f87f2bdc61ddde8dfeaa6cf086a1b28e33c2b5af8	exe
2023-10-26 08:53:56	8dcc81b1d6ecd83c0f4c57f559b480dd00a3f4640b11517db9b28d66321735c9	exe
2023-10-26 08:06:18	a406a3c1474a57c62f3dbd56aa15d5d732e6a0fe8bbfd7bce9425b132204da8b	exe		Glupteba
2023-10-25 14:31:43	15ac76fbfa706eba90fa943d3417ef3de45bf8d21c1f77bd4dd6ebfbfb87d621	exe		Smoke Loader
2023-10-25 10:14:16	41ca40d43bca0d7179b4a13253098df506015778bf60ade4f118cef1fcc68bf8	exe		Backdoor.TeamViewer
2023-10-25 08:27:13	07e0f1bd9b75e2a91827480684278771b2309945f108f6f966a31eaede673105	exe
2023-10-24 20:04:28	1c821461df42754405a1661ced3406fd519ae8b211fef952fcb6e03d718039cc	exe		Backdoor.TeamViewer
2023-10-24 18:27:29	752db01b5ddb754369ff5182155bf87b3c6f6d263e9485034b6d20369552df9a	exe
2023-10-24 15:43:52	aa4bf2143b0890be96617075d93065ae39ae9a41c090fe05c97b2449c2443740	exe		Backdoor.TeamViewer
2023-10-24 11:13:51	4e233c5e8da5286a9255855fecaed4173da8a700c5c746f227d83799b63a7c32	exe		LummaStealer
2023-10-24 07:46:16	a94c46db65430f4dfd0f41a6c054733038c26b11b584f8bb622d9553df129d2b	exe		LummaStealer
2023-10-22 02:00:30	51d09b19d28bdb3ba4887b2bca74f1a8828dcae4764416cd77358aefa58d23fb	exe
2023-10-21 00:29:25	fb05bb51cff2c073869c81d78a084650c62f061f0aad33138c862b36271a4054	exe
2023-10-20 17:25:32	8fa813e6be834da063c8e38cc29134e40a571e1ab0d4d0ad481c80b19d0762ad	exe		Backdoor.TeamViewer
2023-10-20 04:12:21	dc3465fb3227b34a1cda75509864d20db9fa846013883ae4010590352253da1b	exe
2023-10-20 01:52:41	4dff6960c0433813d15e76e95c9f5885564dcaf3f0f2cb26efb84cb4721be8dd	exe
2023-10-19 08:10:28	3bf78815615306ad4be27fad0bad2a6415b55ae781d104028772c3975586b53a	exe		Smoke Loader
2023-10-15 23:29:07	2d620c7feb27b4866579c6156df1ec547bfc22ad0aef00752ea8c6b083b8b73d	exe		Amadey
2023-10-12 11:18:56	563acabe49cc451e9caac20fae780bad27ea09aaefaaf8a1dfd838a00de97144	exe		Amadey
2023-10-12 07:25:51	58a3a12bad866167a10eaf1511fedf0d8759533880f040a4a6d7bbb8a348e448	exe		Backdoor.TeamViewer
2023-10-12 06:57:35	c6b3bded3652afda304198fec2b7e12921b1cf80fc3c76aae6df102eba372905	exe		Backdoor.TeamViewer
2023-10-12 06:51:31	97931886c3b7609b59afb16d53a5a689c210b15e2c28a75fae75a6f9ceb4348d	exe		Backdoor.TeamViewer
2023-10-11 16:54:57	33d2a9e058659d01f1fa5b752c91aa8e1ab4bac22ec5a1fd2ec1813fe3667238	exe		Backdoor.TeamViewer
2023-10-11 16:29:54	ddc3ba21d70f788998930254d4a47ee0ce69f494b6f96d804ed55de8123e4bba	exe		Backdoor.TeamViewer
2023-10-11 16:17:46	5db152a22827f1e105d6aa98166dd30338930eacbd1bf2e7c6e74cf10334e7c1	exe		Backdoor.TeamViewer
2023-10-11 11:33:11	f35aaa60a0cd43454c0416883c855b19da2cb19dfde455c64f41278421e6dcae	exe		Backdoor.TeamViewer
2023-10-11 11:30:36	5a08584edc12c1469580d4ddb2b0ceaa8a8b212c62e715bed845bd59d6f83331	exe		Backdoor.TeamViewer
2023-10-11 11:11:57	2d91d570352bd6a65a8dfdf72bcf4bf1ed353c8f4310aabd4b77b31e1e98c831	exe		Backdoor.TeamViewer
2023-10-10 16:52:38	8f3054ea1c4adfcafc009a413324aec4d47357384e1f57c08a4cdc8ec3863826	exe		LummaStealer
2023-10-10 16:40:37	7fd0f6e825773d09f3f2233504316d20d3c18fa20c3f8427f9d1db46c69a4740	exe		Smoke Loader
2023-10-10 16:39:46	f30654f4b2b72d4143616a3c2bb3b94b78a9726868b3dfa302ba36892e889d0e	exe		LummaStealer
2023-10-10 06:28:29	7a111775617fd40041aed973937c5e6a975fb7a3a93213318bb6007c01a8d64b	exe		Backdoor.TeamViewer
2023-10-10 06:09:25	89b23431a3fd1b1932a26c626dbf5ad39d5a82fcc10ca4fd20e4d90f635bda42	exe		Stealc
2023-10-10 05:57:23	abf143f53b0c5c36e4d9614f77e12c6a070dbe8e38307a0647acae090a0d1bac	exe		Stealc
2023-10-10 04:41:47	7ce024eccfe9cbd70a597965fea9348511df62e4ed82f2f077d224318c3870cb	exe
2023-10-09 22:32:25	4a8c18ee86bede3f5bfe55b5646e2676067b80ac802513186e7327577b3e9f73	exe		Stealc
2023-10-09 22:29:20	28c7a1e748b19f24cbd60e3391636e66c29243bec0414c4a839183b8ed439425	exe
2023-10-09 21:46:37	472a7897cd5566dcbf76702343eafb5bff6390f679965a22361eecffeadf4e80	exe		Backdoor.TeamViewer
2023-10-09 21:37:55	b8b8bd658fc2c59179feb45647839521608a37e3f67c1357e3d2dc76fa9828e0	exe		Backdoor.TeamViewer
2023-10-09 20:35:31	a2da4f8ebbc4085821300ac9adb8706ce9cfa283c08895497e519d599654582f	exe
2023-10-09 16:22:59	f657ca897cc86da03b5378c9740d565abc8b1bcc6481915a2d28ebc170bbea4c	exe
2023-10-08 20:26:27	a754eb655af6114a85fe5d32bc3a42b0038fec86c2d557fef2d3f2f92d68b942	exe		Stealc
2023-10-08 20:11:36	0c620ad9e0327c9397c2e869a45e3c24cf234f6da22df60ae7fcd802c63d0e8c	exe		Stealc
2023-10-07 22:23:02	25fb255dfc65bca2ca92a3b06ad2e8528c4fd190d6937ae434869e6604453a43	exe
2023-10-07 16:07:01	df9200675c836a7edc8c2a9a02da73c7666d9eed96470104f1112d2d61b48a40	exe
2023-10-06 18:36:13	7c5048e50bf83c7a281f471425276e6a80b2089ddd85bf5e843a6c06184daf0a	exe
2023-10-06 06:25:34	3cb2b7b1b59cc6ace537173608f089cf23da565156cb289e83d41adab31f64bb	exe		Backdoor.TeamViewer
2023-10-04 08:06:05	563acabe49cc451e9caac20fae780bad27ea09aaefaaf8a1dfd838a00de97144	exe		Amadey
2023-10-03 07:49:48	563acabe49cc451e9caac20fae780bad27ea09aaefaaf8a1dfd838a00de97144	exe		Amadey
2023-10-02 19:30:37	ebf9d27b79fc7c3124325a73f1c4ce201c29df3e5355f08e73a9fc2355cc1b1f	exe
2023-09-29 11:50:16	88921dad96a51ff9f15a1d93b51910b2ac75589020fbb75956b6f090381d4d4f	exe		Backdoor.TeamViewer
2023-09-24 13:12:04	45584db65038ba23dac7cc37e8314f8e25a8119154f2dd60d42911139437a02e	exe		Backdoor.TeamViewer
2023-09-22 20:13:19	01a7afff3220c1a442e3b8bc41dbf4036e9c223f9aab374265d9beae0709e434	exe
2023-09-19 20:32:26	856fc5a591470b6dd10633727130a65d47afed149da52d2c275ef4ef3fdd9856	exe		Backdoor.TeamViewer