URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	installcb.ru
Domain registrar:	REG.RU
Domain registration date:	2021-09-08 16:25:16 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Status unknown
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Status unknown
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-09-17 09:12:05 UTC
Total malware sites :	2
Online malware sites :	0 (0%)
Offline Malware sites :	2 (100%)
A record(s) observed :	3

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-09-24 03:06:59	185.87.150.53		Not listed	AS9009 M247	FR	no
2021-09-21 10:58:52	37.140.192.43	server12.hosting.reg.ru	Not listed	AS197695 AS-REGRU	RU	no
2021-09-17 09:12:18	31.31.196.204	server166.hosting.reg.ru	Not listed	AS197695 AS-REGRU	RU	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-09-17 11:24:07	http://installcb.ru/CurrenyCalculatorInstaller.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-09-17 09:12:18	http://installcb.ru/CurrenyCalculatorInst.exe	Offline	exe RedLineStealer	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-09-21 06:07:53	06dee1a75feee580683c2541b6b520d07456215ab3592f59e39f4f2b0c8966fa	exe
2021-09-20 21:33:51	986ec8c30ab4281161bc7861e47f6bc2cde8960db915da07bc1eade6865018e9	exe
2021-09-20 17:30:19	670906ad0855a2402291c290dc16f18343be80a00cb7f164463475b2fbf132b5	exe		RedLineStealer
2021-09-20 12:41:36	39f5b13c60418f4bcefdd1df075a6fe9e8bd879340c42d12c8a5e636aa035e6d	exe		RedLineStealer
2021-09-18 23:27:39	6a498d84dd0cba5d8e272cbc5cb10382e7fd0da648a345e92c26414ceb5d3dc8	exe		RedLineStealer
2021-09-17 21:46:37	13d8d9a03df3f510c71149a3c9ccaa4570172e45b34463d16e85a008a57469bf	exe		RedLineStealer
2021-09-17 17:06:04	a1c142249017dbf317c9d86e57779f2e98387c84e927a24ed48dc84d191c6097	exe		RedLineStealer
2021-09-17 11:24:07	5bb7ab8d474109d82d8dfa3aae223df280517fe425a54d33d16ef5d00d49fcc1	exe		RedLineStealer
2021-09-17 09:12:18	e313b4fd124a57681c954a72c3a09aa4fd96245df42130fc6ddeaa10d6a4451c	exe		RedLineStealer