URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-05-27 11:38:37	94.142.138.213		SBL655622	AS211522 HYPERCORELTD	FI	no
2023-05-03 13:33:09	91.215.85.135		SBL615768	AS200593 PROSPERO-AS	RU	no
2023-04-14 17:12:52	94.142.138.104		SBL655622	AS211522 HYPERCORELTD	FI	no
2023-03-16 16:17:40	91.215.85.173		SBL615768	AS200593 PROSPERO-AS	RU	no
2022-12-18 20:06:18	91.215.85.158		SBL615768	AS200593 PROSPERO-AS	RU	no
2022-07-15 08:31:07	45.143.201.4	free.ntup.net	SBL625748	AS200195 VERASEL	RU	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2022-07-15 09:03:04	http://karimgousa.ug/zxcvb.exe	Offline	32 AZORult CoinMiner exe RecordBreaker Rhadamanthys Vidar zgRAT	zbetcheckin
2022-07-15 08:31:07	http://karimgousa.ug/zxcv.EXE	Offline	32 AZORult CoinMiner exe ModiLoader RecordBreaker RemcosRAT Rhadamanthys zgRAT	zbetcheckin

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-06-20 19:24:02	66ab47355c379fdd2907594ac7579b5599dba913124b56491ba6c63aaf2e9ad1	exe
2023-06-20 06:28:27	c8455e33964558ce34dbc497e5e0cd770723194d632bb98a016350ce39188e99	exe
2023-06-19 14:06:14	7a43bd02da63260bfc0a8253ce8430cee129f5be994e29e689e7ed8916688f06	exe
2023-06-14 09:09:12	344f4ba4e892363846e3968c7ac5df61f54b4c78aeb14f47008be9fe7736e639	exe
2023-05-28 14:04:35	5d2e841645576d0eefcc6bcc6c0d480c0c6874f05a56e92441319a5c41b38979	exe		AZORult
2023-05-28 11:30:45	5d2e841645576d0eefcc6bcc6c0d480c0c6874f05a56e92441319a5c41b38979	exe		AZORult
2023-05-12 07:30:03	bf1d731a91e424fd67778f176ac652fa5ca39f2ab188ef740184e4b2808c7b3c	exe		AZORult
2023-05-12 05:32:31	bf1d731a91e424fd67778f176ac652fa5ca39f2ab188ef740184e4b2808c7b3c	exe		AZORult
2023-05-11 14:56:01	79a7c9d15971c14d78baccbf211b3ca1e9adcb0befc6d3d1c5d92902d70678e2	exe		AZORult
2023-05-11 12:53:22	79a7c9d15971c14d78baccbf211b3ca1e9adcb0befc6d3d1c5d92902d70678e2	exe		AZORult
2023-05-08 21:00:22	84c18f78f11b9bc3fd3e96925d2a7b76ab5ecfb927c377ad27456e191815b24a	exe		CoinMiner
2023-05-08 17:56:25	84c18f78f11b9bc3fd3e96925d2a7b76ab5ecfb927c377ad27456e191815b24a	exe		CoinMiner
2023-05-03 11:51:17	83263fa7b8c560ae026a24d6ea9e6eafb16aa207cc5557c65c7f71f703f3a593	exe
2023-05-03 11:11:51	83263fa7b8c560ae026a24d6ea9e6eafb16aa207cc5557c65c7f71f703f3a593	exe
2023-05-01 16:18:51	e99f79618b991de5d1052096950590a4fe833b885871a96bb1202e3d6dd876a0	exe
2023-05-01 15:20:43	e99f79618b991de5d1052096950590a4fe833b885871a96bb1202e3d6dd876a0	exe
2023-04-30 16:02:02	ff277e11345c79a60de0ba45011460629487e82e8b0b58a8ddfdfeca2d7623f5	exe
2023-04-30 14:15:33	ff277e11345c79a60de0ba45011460629487e82e8b0b58a8ddfdfeca2d7623f5	exe
2023-04-22 13:15:30	0127ebf8628f963a453520b0149fc11fc5d0a56536ce2a41c9dfdd3c597a0746	exe		zgRAT
2023-04-22 12:54:59	0127ebf8628f963a453520b0149fc11fc5d0a56536ce2a41c9dfdd3c597a0746	exe		zgRAT
2023-04-18 11:09:43	d9b498faf01b9eb598761915a6fc2fb4f1ab2317d354348baca6794730fd15d3	exe		Vidar
2023-04-18 10:16:11	b415a5cc8d0c1c960e7bc16bcb9351943b2c998f9430b1a1425b715754cc1e11	exe		ModiLoader
2023-04-14 15:27:11	c90193af8ffe050ad79402dfceb9274be08b300bc02ecb1e6394917ee50934e4	exe		ModiLoader
2023-04-14 14:54:14	0cff8404e73906f3a4932e145bf57fae7a0e66a7d7952416161a5d9bb9752fd8	exe		Vidar
2023-04-13 13:52:46	2600b1b998ede090c24f22c8d275adbaa3dddcca8df0c7aa7a36e03d73735651	exe
2023-04-08 13:20:36	1c79dc6cbe83fdc6a9aec9a3af9e2aea51cf4d29d95caf45752a38c604ab81b7	exe
2023-04-08 07:00:36	0e73ba72446172d8136275bce2c64b66b4220406e0b15960dac82474f81c3e84	exe
2023-04-07 16:36:29	4130ce135fbfab00618f261a0397e88479d2f61e1ed0d09ebcde525439774f3e	exe		AZORult
2023-04-07 16:07:06	4130ce135fbfab00618f261a0397e88479d2f61e1ed0d09ebcde525439774f3e	exe		AZORult
2023-03-23 11:32:27	6ad4c22533cf835aaafd24303e155aa431d3aa38c1746dc8fccf2924e0be4b63	exe		Rhadamanthys
2023-03-23 11:01:59	60289bfd6a3a67726074cccced70f113419fea3b76c00855fb7dc5fa332d3f7a	exe		Rhadamanthys
2023-03-16 16:26:32	a54493e71a7f28fe61e607ba4c089ada71e13ff9e1df6cef5619a4163e2b0a1f	exe		AZORult
2023-03-16 16:17:39	a54493e71a7f28fe61e607ba4c089ada71e13ff9e1df6cef5619a4163e2b0a1f	exe		AZORult
2023-02-05 09:56:56	4908e51e65bf67fdc3a559be7c47c3df1354a4a864b931cb176d282048f8d9c2	exe		AZORult
2023-02-05 09:07:08	4908e51e65bf67fdc3a559be7c47c3df1354a4a864b931cb176d282048f8d9c2	exe		AZORult
2023-01-13 04:59:20	8c5df030de0c79f2155a60e0d5f41889ec8d07d441279d406996dca4639f8539	exe		RecordBreaker
2023-01-13 04:53:18	8c5df030de0c79f2155a60e0d5f41889ec8d07d441279d406996dca4639f8539	exe		RecordBreaker
2022-12-19 08:13:10	aa4185102f68d05e1dc41d46e7b65cfb4a12e1f8694b7300264a6044a51f6931	exe		RecordBreaker
2022-12-18 20:06:18	746669c6be1807fdafbc7ee3f1e958e1b584fa31688742bcc044d269af94b0d8	exe		RecordBreaker
2022-11-26 16:17:37	2fc0f46e2ceded0b284d4f41759de65e73532900202260b98769ebfaf3244951	exe		RecordBreaker
2022-11-26 16:17:32	9063dd7d69236cca3007587ccc04334b4289ec456f6983673f3d9f749092a29c	exe		RecordBreaker
2022-11-13 00:06:38	8f270ec9427618c5cfd9fb5b8216535fb42922aff88215205c8211e0cd23ad1e	exe
2022-10-06 00:41:31	599fa7fc07b1b8265ea936ce641733fcec03eb0fe8cc4822e5a752b6629e216e	exe		RecordBreaker
2022-10-06 00:32:56	d4227ec9dd2159223342099e0ed7d55c0691fe677ab2fc513c149a137e50ced8	exe		AZORult
2022-10-03 13:12:25	ae1c1443f10ee6bba7b8280e97283a572237d979e4c59a313fdf1ac650e37c5d	exe
2022-10-01 16:03:26	8e2d87f5f34b7764e66644f831467e469dcc18a30a17d02252880851f560783d	exe
2022-10-01 15:51:27	9a81a9c84d36a49be8286458ce7c919538647711b28fedae9b5521762ff76030	exe
2022-09-16 10:28:30	e553b05dd2afafadb6ad38d3463056e50cfa31ba3ac5489a7a114ec35ef10194	exe		RecordBreaker
2022-09-16 10:09:43	60e6da1143cb32a41ecc76952d3b4ae8a8910b790973473e61fc2eb147704af7	exe		RecordBreaker
2022-08-18 23:21:42	65020d58d04109f2e8f46d12e43aeee9e98ec182db4bd4a2b2c336978e696c06	exe		AZORult
2022-08-18 19:21:44	04fb5a1f6082a09a55bec26e0748918da0d1007e2a43c70723dc79cc7c413079	exe		AZORult
2022-08-14 05:24:54	d81620ec69feb5e745b23dacc25b874cef4db7b0daeaefbdb739300838f4d343	exe		RecordBreaker
2022-08-14 05:19:46	ea34b776b896df9512f0aab37e3b0d56ff012a0906910a957db335f9e7dcf2d4	exe		RecordBreaker
2022-07-15 09:03:04	d75d7b0534ff648f16f5751be79a2c23158b6412a780180aec78c77c7e95071d	exe		AZORult
2022-07-15 08:31:07	28455b1a0b29240e95877cff96528b3a196f0cf3a63d9980dc70349cdc0e1e74	exe		RemcosRAT