URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2020-07-14 15:54:17	3.17.153.68	ec2-3-17-153-68.us-east-2.compute.amazonaws.com	Not listed	AS16509 AMAZON-02	US	no
2020-07-09 13:27:43	45.156.24.169		Not listed	AS56971 AS56971	US	no
2020-07-06 03:36:47	40.117.126.63		Not listed	AS8075 MICROSOFT-CORP-MSN-AS-BLOCK	US	no
2020-07-05 07:23:36	164.90.184.80	thor.battlesmiths.com	Not listed	AS14061 DIGITALOCEAN-ASN	DE	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-07-22 08:16:06	http://crogtrt.com/9/9511378.jpg	Offline	exe Formbook	abuse_ch
2020-07-14 06:01:04	http://crogtrt.com/i7/90103778.jpg	Offline	AgentTesla exe	gorimpthon
2020-07-13 14:15:11	http://crogtrt.com/i7/15601277.jpg	Offline	AgentTesla exe	abuse_ch
2020-07-13 11:59:07	http://crogtrt.com/i7/9784100.jpg	Offline	AgentTesla exe	abuse_ch
2020-07-13 11:20:09	http://crogtrt.com/i7/32027444.jpg	Offline	AgentTesla exe	abuse_ch
2020-07-07 12:48:09	http://crogtrt.com/IG/el.jpg	Offline	exe Loki	abuse_ch
2020-07-07 12:48:05	http://crogtrt.com/IG/2000.exe	Offline	AgentTesla exe	abuse_ch
2020-07-07 12:40:08	http://crogtrt.com/IG/6591111307.jpg	Offline	AgentTesla exe	abuse_ch
2020-07-05 07:23:36	http://crogtrt.com/20/103777095.msi	Offline	AgentTesla msi	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-07-22 08:16:06	c926c7de61dd7fe8057e5142bbf2263004191728bc8ba132136a2fc4b7353584	exe		Formbook
2020-07-14 06:01:04	701bb7d545df1a98de90d0a414a90c7f09538fe02f32e8ffc4c6312aab8349c5	exe		AgentTesla
2020-07-13 14:15:11	3a3663222be5128c1e1486f94faae1e3ffa785569511e4df6346bc10b5513f1f	exe		AgentTesla
2020-07-13 11:59:06	ae2e068d752e118448126ec85e5cf8d8e348113c7fbed24259c711bc8eb82ef8	exe		AgentTesla
2020-07-13 11:20:09	3b13bf8c3de862a6914cf5a9eb0539e0046faf3e62e7d2f0fb63001e8dd2b5a3	exe		AgentTesla
2020-07-07 12:48:09	37733872a7d58215f79223dd43b1a92877f768bd1344d0570f2fe74ab4db520b	exe		Loki
2020-07-07 12:48:05	353ae3fcced86a2ae12f8b249900180eeeffb722a2c56b46356c8f4ec4461925	exe		AgentTesla
2020-07-07 12:40:08	6437e7a82791bdbf30dd91f6148dc5e5e30ffe22cf0337365082784cbaf672ea	exe		AgentTesla
2020-07-05 07:23:36	10e04c6d2244a7e905d1994ef3108615c2df388976ae62cb856f2ae2e59b09fd	msi		AgentTesla