URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-03-29 15:23:30	185.121.120.159		Not listed	AS262287 Latitude.sh_LTDA	US	no
2020-10-06 13:06:05	144.91.64.187	ip-187-64-91-144.static.contabo.net	Not listed	AS51167 CONTABO	FR	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-10-07 16:46:31	http://altcbs.com/WiPvqc8PxnUiCGh.exe	Offline	AgentTesla exe opendir	abuse_ch
2020-10-07 16:46:03	http://altcbs.com/rjJgAjRl2meYYRl.exe	Offline	AgentTesla exe opendir	abuse_ch
2020-10-07 16:46:03	http://altcbs.com/7HSxaXW0mvIF2DN.exe	Offline	AgentTesla exe opendir	abuse_ch
2020-10-07 16:46:02	http://altcbs.com/don.exe	Offline	AgentTesla exe opendir	abuse_ch
2020-10-06 16:23:32	http://altcbs.com/j.exe	Offline	AgentTesla exe	abuse_ch
2020-10-06 16:23:32	http://altcbs.com/n.exe	Offline	AgentTesla exe	abuse_ch
2020-10-06 16:23:32	http://altcbs.com/m.exe	Offline	AgentTesla exe	abuse_ch
2020-10-06 16:23:32	http://altcbs.com/v.exe	Offline	AgentTesla exe	abuse_ch
2020-10-06 14:39:05	http://altcbs.com/99.exe	Offline	AgentTesla	Anonymous
2020-10-06 14:39:05	http://altcbs.com/uaa.exe	Offline	AgentTesla	Anonymous
2020-10-06 14:39:05	http://altcbs.com/r.exe	Offline	AgentTesla	Anonymous
2020-10-06 13:06:05	http://altcbs.com/f.exe	Offline	AgentTesla exe	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-10-07 16:48:32	587cf961a9b37e426ce6f1d532d5e40b2e08b67ad48a077537870fe873370d59	exe		AgentTesla
2020-10-07 16:46:03	7f717f3d6242070c4f59575f510fa366e5cbd6c17ad484c0735fca89e365a351	exe		AgentTesla
2020-10-07 16:46:03	66c8e38b2f545edd7660168b8e778c165f200867abb90cd07c2f033ea1ae8405	exe		AgentTesla
2020-10-07 16:46:02	d8dc17c4b3642e45151c21b7e02f12cda99c8c5ee51549a6f271c3ea1b436c3d	exe		AgentTesla
2020-10-07 06:16:35	a3510ca0d8cbd8fb1035c1c59a8781abfc1e463d0429e108c242c23188f1adcc	exe		AgentTesla
2020-10-07 06:12:36	5721caf58487fb47214366a352f663b5bab915ca04ec1466467ec2d96cf03f83	exe
2020-10-07 05:28:55	2af46f4cd0f565e48c953a7e2d6c98fd03457433724935485a3a9f95b5cf93e4	exe
2020-10-07 05:26:24	bebf4581c4ee43e7b17f63b005e6dc9fb6ebd6ad5415dde0142aa8ac38d90376	exe		AgentTesla
2020-10-07 05:25:38	cd34053691fae92e42fc3836d8d93844b8c6f43a0c0bf826a935efafea693e7e	exe		AgentTesla
2020-10-06 16:57:20	3afef4ab289c49f347ed065f4d272cec7ea413b5c84fb4c2e6aa9adad2716db6	exe		AgentTesla
2020-10-06 16:47:28	19ea2b24f4d65b8169f982300901dba2253a880e3bd3f07dfcf933c0fe67a139	exe		AgentTesla
2020-10-06 16:44:32	8bc8f11f65265cd267e36dd30710793863582fd6e4c554d50fa5a083d015ced6	exe		AgentTesla
2020-10-06 16:43:18	2ddbf5aed765723b948699526bc2a9a49864dc1181e21f4c51fe613aa8d0ca7e	exe		AgentTesla
2020-10-06 14:39:05	99d1e6642a3f135215927e2166213409c4390a70332a77ea5fb342beaf629d65	exe		AgentTesla
2020-10-06 14:39:05	c725eea92437455b05cf0c4007e63abff342befc67e4b8ad0e60eaa96074955e	exe		AgentTesla
2020-10-06 14:39:05	ea34ce44176906af3dd7ec1e4d9db0df144f5769ce3298d88864698c54164c9b	exe		AgentTesla
2020-10-06 13:06:04	07971958696b43eead2da2114b7a3965b492cdae39843078f16d56ad331427fe	exe		AgentTesla