URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-11-29 14:39:08	85.119.122.2	c122-2.i17-01.melita.com	Not listed	AS200805 MELITACABLE	MT	yes

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-12-01 17:35:10	http://appsmanager.alert.com.mt/vjn.exe	Offline	32 exe Formbook	zbetcheckin
2021-12-01 17:24:09	http://appsmanager.alert.com.mt/chief.exe	Offline	32 exe Formbook	zbetcheckin
2021-12-01 14:37:08	http://appsmanager.alert.com.mt/shedy.exe	Offline	Formbook	James_inthe_box
2021-11-29 17:36:06	http://appsmanager.alert.com.mt/jnt.exe	Offline	32 exe Formbook	zbetcheckin
2021-11-29 14:39:08	http://appsmanager.alert.com.mt/chizzy.exe	Offline	Formbook	James_inthe_box

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-12-01 17:35:10	90f9e8094fe8847f4b4521afafd5c5e59d4368ddc26a4f589730cd998520fd50	exe		Formbook
2021-12-01 17:24:09	f383f40cc25197aa00a470f4b549f6da97293ebd87dd80b099d59d5fc7a2dab4	exe		Formbook
2021-12-01 14:57:57	dfa895fe8d8da53e7f3c0466a7e88aa5d36f1a781675d03b0c7400847a0b4f6b	exe		Formbook
2021-11-30 04:19:11	4241f8761ef9ce0815fbced3432ee6cfde37ea453245b60b40abb9fd39003e59	exe		Formbook
2021-11-29 17:36:06	045c15ef3a76b61d487b30e3e554c77afbc4f3fc17078d3818b5392de608a92e	exe		Formbook
2021-11-29 14:39:08	25dce07a08e1126404921a1c9cc4fc3fc06e6a8f4bbbc09d4c3fe4b24c9a4ddf	exe		Formbook