URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-07-09 19:09:21	113.11.254.100	cp5.ns01.net	Not listed	AS38532 EXABYTES-AS-AP	SG	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-07-09 19:09:31	http://altechsolutions.sg/july9o.exe	Offline	AgentTesla exe opendir	abuse_ch
2020-07-09 19:09:26	http://altechsolutions.sg/july9n.exe	Offline	AgentTesla exe opendir	abuse_ch
2020-07-09 19:09:21	http://altechsolutions.sg/july9c.exe	Offline	AgentTesla exe opendir	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-07-09 19:09:31	69ea320678acca63c52c05f9d51fb2ed84a6e454b0925bdf7d4a40d70f083bdc	exe		AgentTesla
2020-07-09 19:09:26	56fe97a0d2334b6f2a0c6d40551a3a53895ec976e33cf45a57f3d929c22c7e43	exe		AgentTesla
2020-07-09 19:09:20	fcbb5d4d6c4a961d1faf8ffd19547765cc67b6cb7d6ac05006ef651c55d66774	exe		AgentTesla