URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-12-02 23:51:23	https://crusspair.co.za/hgl2yjfr.zip	Offline	dll Dridex	Cryptolaemus1

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-12-04 11:11:22	ebe87cc844fd9875d411b5435f0ffee5e651be5ff011a306a09a6b5f3376c81e	dll		Dridex
2020-12-03 19:12:11	c96fa76a5147bf58b44c47fe42c9449da7494bf329c11e3e2792fdca8fff917e	dll		Dridex
2020-12-03 16:15:56	ab851d5364bae0749d452459953ccab2b62c62c6d5784e7adedc4d9ba43727db	dll		Dridex
2020-12-03 14:49:47	f183722041cc6ed4275dd6fc17899b36509a78617c50ed4ce4c4c39472f82dea	dll		Dridex
2020-12-03 12:29:10	f49f9acac47b813ec018f48ab2d54ddd982b294e8a68227a4d83f817cb24ec7a	dll		Dridex
2020-12-03 10:51:38	664a8adb4d5dbf9e03ca8316faecc6ae36647e331e4fab9c506045cd59fa75ee	dll		Dridex
2020-12-03 09:31:18	44941ab73d211c0353038856bba5c74f95703c3ac93786b6f9d2568a658b298a	dll		Dridex
2020-12-03 07:48:24	6120c83e844de1ca1e68ec95c714218928c272edfb379cd7344a74e5890eb2d3	dll		Dridex
2020-12-03 06:31:31	55aae894419c68f653d66c98a0b87d23c68bcdc9e4f5ca143acd03143b8f221b	dll		Dridex
2020-12-03 05:08:54	b49927abf18a8cad4054f65c1b05f418b49c56f67477928cd2949ea6a6f042d3	dll		Dridex
2020-12-03 03:32:25	148026042a20a170fb56b258538a078be324b0493746bbf5ea17704c99e38486	dll		Dridex
2020-12-02 23:51:21	7fee8c20f0586ce2d544f172b5df1f96acde543b02c50473bb7732de0d1c9fb4	dll		Dridex