URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-05-15 18:12:06	https://freedoge.info/putin.exe	Offline	exe RedLineStealer	zbetcheckin
2020-05-15 18:04:08	https://freedoge.info/red.exe	Offline	exe	zbetcheckin
2020-05-15 18:03:03	https://freedoge.info/reclip.exe	Offline	exe	zbetcheckin
2020-05-15 18:00:25	https://freedoge.info/rec.exe	Offline	exe RedLineStealer	zbetcheckin
2020-05-15 15:51:04	https://freedoge.info/new.exe	Offline	AgentTesla	Anonymous

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-05-15 18:12:06	aa0ef170fbdf28b626cafc71c401ce5e5b151efca751e1301ab1d68ddc6af5ad	exe		RedLineStealer
2020-05-15 18:04:08	cf0c7af64ac3fe68335149f081ba815c3204240ac04fe4acf3fbf6649d67613d	exe
2020-05-15 18:03:03	aaf4ec4fd94e1da7b19a572aa597547d47e3d727e9d23a664996d62b0d3bcc88	exe
2020-05-15 18:00:25	c4e42ebfd487b325ece4f09d75687c96e252aa8559f8a8daad6336dc39ee5424	exe		RedLineStealer
2020-05-15 15:51:04	f0e91f423775ca9ba80077774a4de1a212e890d285bdb587b003d57ba0f68b1c	exe		AgentTesla