URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-09-06 15:22:05	77.91.68.52	hosted-by.yeezyhost.net	Not listed	AS198178 INC-PARTNERS-365	AM	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-10-18 10:10:20	http://77.91.68.52/zoom/angel.exe	Offline	32 exe LummaStealer	zbetcheckin
2023-10-17 04:03:06	http://77.91.68.52/fuza/angel.exe	Offline	32 exe LummaStealer	zbetcheckin
2023-10-15 20:11:07	http://77.91.68.52/fuza/foto2552.exe	Offline	Amadey dropped-by-amadey njRAT RedLineStealer Stealc	viql
2023-10-12 06:53:04	http://77.91.68.52/fuza/3.bat	Offline		abuse_ch
2023-10-11 23:31:04	http://77.91.68.52/fuza/2.ps1	Offline	dropped-by-amadey	viql
2023-10-11 23:16:10	http://77.91.68.52/fuza/sus.exe	Offline	Amadey CoinMiner dropped-by-amadey Formbook LummaStealer RedLineStealer Smoke Loader	viql
2023-10-11 23:16:09	http://77.91.68.52/fuza/nalo.exe	Offline	dropped-by-amadey Stealc	viql
2023-10-05 12:13:04	http://77.91.68.52/fuza/rus.exe	Offline	Amadey dropped-by-amadey LummaStealer RecordBreaker RedLineStealer Smoke Loader Stealc	viql
2023-10-05 12:11:07	http://77.91.68.52/fuza/nano.exe	Offline	dropped-by-amadey RedLineStealer	viql
2023-10-05 09:31:06	http://77.91.68.52/fuza/foto3553.exe	Offline	Amadey dropped-by-amadey njRAT RedLineStealer Smoke Loader	viql
2023-09-29 19:31:07	http://77.91.68.52/fuza/herom.exe	Offline	32 exe	zbetcheckin
2023-09-29 18:16:06	http://77.91.68.52/fuza/foto1221.exe	Offline	Amadey dropped-by-amadey RedLineStealer	viql
2023-09-29 18:16:05	http://77.91.68.52/fuza/kus.exe	Offline	Amadey dropped-by-amadey RedLineStealer Smoke Loader	viql
2023-09-29 17:51:05	http://77.91.68.52/fuza/exbo.exe	Offline	dropped-by-amadey	viql
2023-09-27 12:48:04	http://77.91.68.52/fuza/2.bat	Offline	dropped-by-SmokeLoader	Casperinous
2023-09-24 01:14:03	http://77.91.68.52/fuza/1.ps1	Offline	dropped-by-amadey	viql
2023-09-08 04:45:07	http://77.91.68.52/file/lega.exe	Offline	32 Amadey exe healer njRAT RedLineStealer	zbetcheckin
2023-09-07 06:11:04	http://77.91.68.52/mac/Plugins/cred64.dll	Offline	dll	abuse_ch
2023-09-06 15:22:05	http://77.91.68.52/mac/Plugins/clip64.dll	Offline	32 Amadey exe	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-10-22 14:56:44	4077118ded34a5beeca5394a8d84f4d715af6e3d85f389aa840da092456b3cc0	exe
2023-10-22 14:51:37	a9bac69d4a1aa3a14034d7367b20311a959caeb5d82d192562798da4ff8ae85e	exe		Amadey
2023-10-22 14:32:54	94d8c7741611405d48e99d30480a5cc32b0fa2214afeb5ea5f5e05556143dc70	exe
2023-10-22 14:28:01	d2d060464c4eee35427dccaff3292f25906d61bc81494b1cff43c37bc682c378	exe		Amadey
2023-10-22 14:17:20	7286694ea52e2befd331bd81fde184fc78ed7e88843830099be0d2da96a5e0d7	exe		LummaStealer
2023-10-22 14:13:07	d57cfe7f10f6fd51bd84ec84cb7e5502d41f3697c83619e0dcaf33c2c24a7bf1	exe		Stealc
2023-10-22 14:10:28	65bd272607571ebb2dca760b1a940868f6250d7c7bf3d428a117907fb8c49939	exe
2023-10-22 13:59:25	2ebae477e9d5a7f395a441445a0979679048773858f745581bab5d89000b0434	exe		RedLineStealer
2023-10-22 13:19:34	0fd5baf99b8f234d833b4ada94e37cf7fdfe2f5e287d068132b5e96ce69212d9	exe		RedLineStealer
2023-10-22 13:01:45	988cefa6bfb3a8dd75578284de343d7c6accd24293732e8b9a3482820ceb66a9	exe
2023-10-22 12:56:48	ab5757585ea8e7926117039b2bbfcba8cb25a97e7f6ca13c1606c7ab9d430266	exe		Smoke Loader
2023-10-22 12:55:50	a59273f02fe46da79b97d8ad389b4bcdd1ea91709e9b0608ddabce97b9daf8b7	exe		Stealc
2023-10-22 12:42:34	8eb2725da95fce65783fc746feb39c111384f78843cc93789a21bf0fb0c3020d	exe		Stealc
2023-10-22 12:39:34	75842c397ffd478b849264bd45d0d701eddb2a97c786e7b02acc717f9472e1dd	exe		Stealc
2023-10-22 12:35:26	3277966cbcbedf96f9873e6098a7862b52b5f5efd9b4b7ba258209bc247f441b	exe
2023-10-22 12:24:34	44f892f95910d00ac86e76cbada4db978480b48c1e011f2a870c803cc75c4606	exe		Smoke Loader
2023-10-22 12:01:31	67fe96fe947ea732739baa8472d8bb6c92af0abd5af7eefc52c2781c101bd273	exe		Stealc
2023-10-22 11:51:50	ef8c1a790a05cd52cb5d936ff2b39217d184d6b331dcfff17a0c91599969fd1a	exe		RedLineStealer
2023-10-22 11:38:51	2df344cc441b5b8cd29126b38692712c3995444810eed0d25e048880b94f4905	exe		Backdoor.TeamViewer
2023-10-22 11:37:46	bf48aa82cacf60b5310d941b6fea5be27ff25b42fd90b3e13c51c71548408453	exe
2023-10-22 11:25:57	d5bda235f0735d391d0a07ee752e0fc87d0c0b02990bc61e04dae79fcbff639f	exe		RedLineStealer
2023-10-22 11:16:41	85984ce7289d9f863571aee2f20d9aa6acb18d4e157f9ad3a80510f377597b9e	exe		Stealc
2023-10-22 11:11:58	c20725fc47bbaad77eeaadd543a8cd16f5ca158dbe94adf0cb125137ecde7900	exe		Smoke Loader
2023-10-22 10:52:02	31c6580d4e3d53915ebc31e8fd2074ad3450e8846abadaeac2ccbb6090a0958f	exe
2023-10-22 10:51:37	625f7904543aa05acad24a5611b9ad7f80dd223e79f7c7ab22e75de3ab71ad0f	exe		Smoke Loader
2023-10-22 10:47:55	c6a8c7da3531a716d2160e6ec04289b67350c3b170d6cb0126df77c0fe67047b	exe		RedLineStealer
2023-10-22 10:47:44	8700ea91101645dc98b698336460f8489e0da12caf629f321655372583c62dd7	exe
2023-10-22 10:45:48	c18465ecdb4856439b30fad2770e52d54d24e1ae6e4dee6d2699238618550284	exe		Smoke Loader
2023-10-22 10:30:27	21b24f865d716076c1394ceb4ceb2eaf7f765c53a887b6e45292aaca207f3552	exe		Stealc
2023-10-22 10:28:34	2ab14f27b16a6dcf1bc529f017a3ef3f8d6c287239b7024c19f987c55435ed4d	exe		Amadey
2023-10-22 10:16:17	8b09ca39af7455126116a9f0846accf1411baabd8aee30def6e6a67f9e5f8c6b	exe		Stealc
2023-10-22 10:12:28	a87f3e2692d38ecab52719b3ef133c6dae302fdeb7a74428664334e635be4de6	exe
2023-10-22 10:11:07	08deececafbc681ec545fd9daab45d1f7f95330d8fc88bbb27e369def9782c78	exe		Amadey
2023-10-22 10:05:14	c60109cea9bdcf537b41a0ab4defdd45277cf370561ed510c84abb0f036b96a6	exe		Stealc
2023-10-22 09:53:18	2206713a922fcff255f763ecf029d5bc6605a9a1cb3b2fb07066c03b5f8ae471	exe		Smoke Loader
2023-10-22 09:31:51	236915dcd2665f36f127088faa1599e2a5e838ba2a068128072f0ff23325b013	exe
2023-10-22 09:28:35	9da53ea127b6ebb7337fcff979c45d82f88ac25b9d53a0873d34645552136af8	exe		Amadey
2023-10-22 09:28:15	d883c4cd943db07969a188ff97a17a885945da0a7063a15f8d16c8b82643837e	exe		Smoke Loader
2023-10-22 09:23:57	dd0b5a74f24a7969dff3619fb885b23fc753d23ea6a46123e5a93a6d1a615f15	exe
2023-10-22 08:48:35	6c63c756ef2ddd08b1f766ea72d5dd3cfa81ecc5c3752f91bf9da4718f24d9e1	exe		Stealc
2023-10-22 08:36:21	edf3f0de10a52656b687633717eed41284cf1a9cb55f696ee976d547aaa19e23	exe
2023-10-22 08:32:20	192505665539c4c8e8a0897399e4b4cc1aa0a6bf4c32a1c07abe6634cdb3ee7b	exe		RedLineStealer
2023-10-22 08:15:52	1c58e1388a21061d76aa14e7a34a5628471909a8f12255646ad6c1b27d1472de	exe		Smoke Loader
2023-10-22 08:07:33	16c2601c0ad8f5a75063d76d63326087c865cb2998c11677eba5b484c06fd7fb	exe
2023-10-22 07:58:52	c066a92dc421092bb3d80229fc873ab40b1e5ce6426c4eb34525df3068e0cf8a	exe		Amadey
2023-10-22 07:39:12	57ccb3f07671260c7bbadd201a5145ddf370d78190df6a3026c21462bea876fd	exe		Stealc
2023-10-22 07:38:07	7e35d8cb0d66165f53ceb7473a4cf28a5d81cd09bfc377cf03567a4f90a9c50b	exe		RedLineStealer
2023-10-22 07:25:47	85bc68320f4b46448931d8112f84ed4aac5728dc5686ee93b5221ad8d05ff075	exe		Formbook
2023-10-22 07:14:31	1c8482a9f315690b84c71bc40933a17706ed23c34fa4ebd6feba0fa8337b649b	exe		RedLineStealer
2023-10-22 07:07:16	556fd8b3f6531948358f39a31128bc56f098499d6c7b2e5915b831084b86dfd9	exe		Stealc
2023-10-22 06:51:11	dd1d27987b29de1c233e08d30c4497b88baf2b655d8f4b512398a25f3185c014	exe
2023-10-22 06:41:02	2e2ae6770a6a5bb4a12718e94267e64504a1f7edff66c35255d6050ca590229f	exe		Amadey
2023-10-22 06:32:24	889426933b1a29a6a69b22ce77900ee695d65c65ddef9180eaa972931f131f93	exe		Stealc
2023-10-22 06:27:28	1d6df5e2a42f4a61b60cf45a65897cdb1fe9b81958cb46d56157f58f574f959e	exe		Formbook
2023-10-22 06:21:37	8b2464f9ddd9026d72607b109d8c88bb983a9c21f1b8c23b8d221e5413db0418	exe
2023-10-22 05:57:37	fbe3ee6e97efbb68ebcadb736b4d7162e418b4232dc736a0a1e01c25fc7806b7	exe		RedLineStealer
2023-10-22 05:56:57	0ec4e84acdb00923f1cc938412d244f72a17f0c3250a76c153e8d2aa9e153172	exe		Stealc
2023-10-22 05:36:17	4866f053168f74690a947d2b5adb4b7043a54616573ad2ca6a5f34c584af55ec	exe
2023-10-22 05:35:02	39aeae7fc4ae6d53c886452a12738b093e4b1cd9c7602be5fbd567b43d073ee2	exe		Formbook
2023-10-22 05:27:52	ef517204f2e3f75efae822811fbad49e76072bf001e722e49aec2e19b5801713	exe
2023-10-22 05:25:04	6f128eca567c0a72914310fbdf10648c6a1f591496d451840a3df15b549373d6	exe		RedLineStealer
2023-10-22 05:20:24	d6df440119144964c791568dee1aa903217014edef7ed041fea804e8d639571c	exe		Stealc
2023-10-22 05:12:32	15c213c158285f62ad42773855f183c1f0a66033a071c47ba5bb600c0e89c627	exe		Smoke Loader
2023-10-22 04:27:45	7121c9de627f8f30164cd251915e056ece4d12d308fad2b3b33b891e5c0a4da0	exe		Stealc
2023-10-22 04:17:06	0ba364bd0ac711a5d8f508f0a46e516a882e92b22e56b3f99725030f062d630f	exe		RedLineStealer
2023-10-22 04:14:54	51d3bcf219e8d249969efdda04cb80ea1156a1715f49d4bddbfbde83f03a1dcb	exe		RedLineStealer
2023-10-22 04:12:06	c8ce6047bff4d55d695fc91cf8bc3940b74686b30d9b834e2d193f277dace2d9	exe
2023-10-22 03:52:35	e45e5d124f98b7f710c520602c3c4b24bc18a45a782c3409ff8ad279a6e4f8e9	exe		RedLineStealer
2023-10-22 03:50:11	be801b8294a05ee504bb772c65f9c976f12795bc840c74e92a8376124458fd3f	exe
2023-10-22 03:36:54	9594dc80097c0512ab77d843d183c652cec90b148effa8f84342748529a1fd5d	exe		Smoke Loader
2023-10-22 03:34:57	8fa80714736b6208eab944dba5afd782f0070bce585fb6164000fab73f911a36	exe		Stealc
2023-10-22 03:29:24	4a6ed4a61eb26923fd7367f2139159414027f0ad04cb965300de83155d1e0439	exe
2023-10-22 03:13:20	964084a29b88746c7831fe4a911976153abe6cc0b2f49191bb1be373056a8215	exe		RedLineStealer
2023-10-22 03:10:41	2e5f55128f68b14db5b0d9488e30c9408759ae1f8e89d714419a6583e9793fbf	exe		Formbook
2023-10-22 02:58:08	73de3dcbf39dd11c6ba011bd4157e63ce0ab44d6c4b331cb8520b6f13741f6d9	exe		Stealc
2023-10-22 02:37:51	0f99360dddca5382f0f94fa92f6dfca5a51873594b1f71405fd495386e20f348	exe		Formbook
2023-10-22 02:32:50	e329b874eb5be16b7efe79acd023cc49a5aa644db623bdea9929e3b95213ceac	exe		RedLineStealer
2023-10-22 02:31:49	83f957221b519a422d06ed57ce1b557e4b141d02bb168cdc96a7be5041eac7d7	exe
2023-10-22 02:29:20	e29bea0ff59c99ab514f71bdea806d5839f9df80723bd8e589c51bb53f274d87	exe		Formbook
2023-10-22 02:03:10	2dc670fb3f97715a5653407fbd2f55d8944e057eccbee7d4efc07dc22bd734c7	exe		Stealc
2023-10-22 01:43:13	20f1328acfee703c7db9e71cbdc977aa7608694856f172f231232af0a2c06ac5	exe		Stealc
2023-10-22 01:42:39	dd9d5368b264059541c31ef60b39015fbc1017455ba70d617c4b0d5de2ba5a11	exe
2023-10-22 01:40:41	9a73ef12749d790bd6da5f6b64370ffb31c7c9ffb0b074e415aedbffff9ee551	exe		RedLineStealer
2023-10-22 01:24:42	b57b5e5d5dec508965144f67a44326d180cb25156c6ccbe964bddded9d487b24	exe		Smoke Loader
2023-10-22 01:04:25	997befd139c2381083680a183da811d8fea23abdae12336b7aecc759885726df	exe		RedLineStealer
2023-10-22 01:02:27	30186110424cb99f02cd048db9ae928006f9fcc9ec18fd0f770b0d22395b6e81	exe		Stealc
2023-10-22 00:53:09	d4f228c48c349a7ce04d1782bd0d1473233a111325604ceca66e350292e42ac0	exe		Smoke Loader
2023-10-22 00:50:41	49ad365031fdd3208923e7ee1e720f624b95e7214c4f794411277b151e637f40	exe
2023-10-22 00:30:19	b4c14dfb414ac74eca981c85fb73c322c808636983367ece5109b0e7ca1d85d6	exe
2023-10-22 00:25:54	94c44d916b27f693a843dc746fad3f2fa3c7b2d85e8a5c6b35b163e7cf6f5237	exe		LummaStealer
2023-10-22 00:25:35	c72b84632f671ad78f388edc65066432b921633c927554cb33c50dc0a538c66a	exe		Amadey
2023-10-22 00:07:23	24dfdc96e8916d8d1bdb7d3295270869c139d7728ae8d9e8c0176bef83c95278	exe		Stealc
2023-10-21 23:42:41	f2a413a1db7470508dfe2d942701ad40c930b457dfef8779a468b2ac80618641	exe		RedLineStealer
2023-10-21 23:39:34	2c98dd1282f5b9a488e93f59f11041137a0bd30faf66ff7022703e9338ce031a	exe		Stealc
2023-10-21 23:30:57	992a760ccb4758773c02f5659938bd04403ca692a7b1398d832af57bfaf18775	exe		Smoke Loader
2023-10-21 23:03:34	3c4601415e3777584f4cc9889ad1cfab3b1a8ef24359e419300c61b441545146	exe		Smoke Loader
2023-10-21 23:03:27	a92f2886dd6c6efd497517cbaef2a06c9b6629569a39053dc2f775e3f97b4db4	exe
2023-10-21 22:58:07	7f10cce7bd835c0a69ce067711dd9a6b64a7ca180cdede2a6ca37d297c4511d4	exe		MysticStealer
2023-10-21 22:39:52	81baaf274fbae9b7cc665575a70f136e39712fa0b04a5f0cb832eb99fa76a572	exe		Amadey
2023-10-21 22:13:58	84324502b567bee3dab56b1114abefcd3ab9d1eefc9474feb05b13fedfb0b520	exe		Stealc