URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-04-24 09:08:04	88.218.16.37		Not listed	AS213953 MizbanDadehPardis	IR	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-04-28 18:27:03	http://88.218.16.37/NAnazCgFwSxQ8sK.exe	Offline	AgentTesla exe	zbetcheckin
2020-04-28 18:24:04	http://88.218.16.37/D3nXjwy5EMjHNdM.exe	Offline	AgentTesla exe	zbetcheckin
2020-04-28 14:20:04	http://88.218.16.37/Srr45MA8prCJUWh.exe	Offline	AgentTesla exe	zbetcheckin
2020-04-28 12:45:03	http://88.218.16.37//Srr45MA8prCJUWh.exe	Offline	AgentTesla exe	cocaman
2020-04-27 22:24:03	http://88.218.16.37/yZhLDBjcFMDlgz4.exe	Offline	AgentTesla exe	zbetcheckin
2020-04-27 17:56:03	http://88.218.16.37/9dudiNwDI5cxFKk.exe	Offline	AgentTesla exe	abuse_ch
2020-04-27 11:07:03	http://88.218.16.37/HOyAJr0lqxvcwYJ.exe	Offline	AgentTesla	JAMESWT_MHT
2020-04-27 06:13:09	http://88.218.16.37/z9KKjJSU69oPOYb.exe	Offline	AgentTesla exe	gorimpthon
2020-04-24 09:08:04	http://88.218.16.37/EocJyfwjX51UduQ.exe	Offline	AgentTesla exe	cocaman

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-04-28 18:27:03	a357aa6395027d3b26d9847f2c7e3d63447f776e38f202663294e1905b7097ad	exe		AgentTesla
2020-04-28 18:24:04	ae70e6c070ff4cceeddec7c132ba9d8411f231a95b5f00d978b47d43dc7b05e4	exe		AgentTesla
2020-04-28 14:20:04	90cebef0f2f998bd1563f4f1c086b76a0ccda51f2294f5048e33d0f7782040fc	exe		AgentTesla
2020-04-28 12:45:03	90cebef0f2f998bd1563f4f1c086b76a0ccda51f2294f5048e33d0f7782040fc	exe		AgentTesla
2020-04-27 22:24:03	2eb306e481d8d1eb4b2b6d51b336dd02700c66caccd1c5ed736400e91aa4c75a	exe		AgentTesla
2020-04-27 17:56:03	f34c4cad829d7f44f730d66e9be8571c4d69b55487e5b7fb00a60ed8094d00ba	exe		AgentTesla
2020-04-27 11:07:03	dfa3957b74cd9b446c797897f53b54a5dcc73cb222476e105ad1eaa19494f5af	exe		AgentTesla
2020-04-27 06:13:09	f3eaa29ba9a92a1fc2b07860c7077097bc92f9143be442be4d3d0ce5e9d035e9	exe		AgentTesla
2020-04-24 09:08:04	ca0857232f00a68a3fd2850bb7a219303465b595cdf25838d0de61084859df93	exe		AgentTesla