URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-07-01 12:37:37	185.203.243.211	free.example.com	Not listed	AS204601 PODAON	NL	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-07-01 23:39:35	http://btgapp.club/hta1.exe	Offline	exe Formbook	p5yb34m
2020-07-01 23:17:34	http://btgapp.club/tg3.exe	Offline	exe	p5yb34m
2020-07-01 18:33:07	http://btgapp.club/tg2.exe	Offline	AgentTesla exe	zbetcheckin
2020-07-01 18:24:03	http://btgapp.club/tg1.exe	Offline	AgentTesla exe	zbetcheckin
2020-07-01 12:44:33	http://btgapp.club/hta3.exe	Offline		vxvault
2020-07-01 12:43:08	http://btgapp.club/db1.exe	Offline	RedLineStealer	vxvault
2020-07-01 12:42:35	http://btgapp.club/db2.exe	Offline	AgentTesla	vxvault
2020-07-01 12:41:33	http://btgapp.club/fl3.exe	Offline		vxvault
2020-07-01 12:40:36	http://btgapp.club/fl1.exe	Offline	RaccoonStealer RedLineStealer	vxvault
2020-07-01 12:39:34	http://btgapp.club/db3.exe	Offline		vxvault
2020-07-01 12:38:10	http://btgapp.club/hta2.exe	Offline	AgentTesla	vxvault
2020-07-01 12:37:37	http://btgapp.club/fl2.exe	Offline		vxvault

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-07-02 11:10:20	58556055a31ae8d4e6bc4afd7feaf61439ea03860546796f6a1bc2cd100625ce	exe		AgentTesla
2020-07-02 09:28:36	bfb194c2020359da5169cc6eb2664551e61ccbe7c67af375c7c7c5c8f2b84bc9	exe		Formbook
2020-07-02 00:16:41	429cefff743820eac9d12ba43fb0c12bd77b854330164a74b6450230a31928bc	exe		ElysiumStealer
2020-07-01 23:39:34	a8acc5541232cb969af9af29cf382e2ed3391f8807d225d42808aab70cca5fc1	exe
2020-07-01 23:17:34	4adeb825a7c078f43a3929a2b6ee71b23a7636f920f791b00169e6ef4a748b30	exe
2020-07-01 20:04:04	de989a7339fadd1a4c95ce4ff18fca9959cee32161354062327b52a38541d02c	exe		AgentTesla
2020-07-01 18:33:07	de989a7339fadd1a4c95ce4ff18fca9959cee32161354062327b52a38541d02c	exe		AgentTesla
2020-07-01 18:24:03	1681aa9c53703a91a8feb2296051bffc02763c1663e8e50113d51c4b7cb37378	exe
2020-07-01 17:19:37	4adeb825a7c078f43a3929a2b6ee71b23a7636f920f791b00169e6ef4a748b30	exe
2020-07-01 17:19:36	4adeb825a7c078f43a3929a2b6ee71b23a7636f920f791b00169e6ef4a748b30	exe
2020-07-01 17:19:36	4adeb825a7c078f43a3929a2b6ee71b23a7636f920f791b00169e6ef4a748b30	exe
2020-07-01 16:01:11	f59acd24bc0eb9bb88a1f4ce31daf924622666039f98f9426a63c6d2242a3617	exe		RaccoonStealer
2020-07-01 14:35:57	d51861bee7da084197de80b44da801303efb75d19d27bad917eac7dd6036cb71	exe		RedLineStealer
2020-07-01 12:44:33	eb4a13bcb6b1e05474e7f4ced08a186871420581dd3d4f9a0d55361d6d190573	exe
2020-07-01 12:43:08	aa30299c8266809acb727ef5ec89a80f0cdbcc848550607743f256438f00e398	exe		RedLineStealer
2020-07-01 12:42:35	178cf2e50182606e000719ee8b7caa9c620950155542d10de6dd7eb5a2a34d01	exe		AgentTesla
2020-07-01 12:41:33	eb4a13bcb6b1e05474e7f4ced08a186871420581dd3d4f9a0d55361d6d190573	exe
2020-07-01 12:40:36	0a20f486ccf411fc53264ddca20c0df4390081e5e7695cad8420ba1f0c052e5a	exe
2020-07-01 12:39:34	eb4a13bcb6b1e05474e7f4ced08a186871420581dd3d4f9a0d55361d6d190573	exe
2020-07-01 12:38:10	178cf2e50182606e000719ee8b7caa9c620950155542d10de6dd7eb5a2a34d01	exe		AgentTesla
2020-07-01 12:37:37	e03453f7d20650bab10d1e70c787c329dab6360512b47070408010806cc8401d	exe