URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2023-02-22 10:17:14	62.1.216.128	hotelsline.gr	Not listed	AS1241 FORTHNET-GR	GR	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2023-03-01 19:02:10	http://kerasiastudios.gr/ojekon2.1.exe	Offline	AveMariaRAT exe rat	abuse_ch
2023-03-01 18:24:10	http://kerasiastudios.gr/intershev2.4.exe	Offline	exe Formbook	abuse_ch
2023-03-01 18:19:10	http://kerasiastudios.gr/boillinet2.1.exe	Offline	exe Formbook	abuse_ch
2023-03-01 18:19:10	http://kerasiastudios.gr/bobourn2.1.exe	Offline	exe Formbook	abuse_ch
2023-02-28 08:47:05	http://kerasiastudios.gr/pakento3.1.exe	Offline	exe Formbook	abuse_ch
2023-02-24 13:49:04	http://kerasiastudios.gr/warex2.1.exe	Offline	AveMairaRAT AveMariaRAT exe rat	abuse_ch
2023-02-24 01:18:05	http://kerasiastudios.gr/warzgo2.1.exe	Offline	32 AveMariaRAT exe	zbetcheckin
2023-02-24 01:17:05	http://kerasiastudios.gr/kentorio2.1.exe	Offline	32 exe Formbook	zbetcheckin
2023-02-22 13:08:13	http://kerasiastudios.gr/neowarz2.1.exe	Offline	AveMariaRAT exe rat	abuse_ch
2023-02-22 10:17:14	http://kerasiastudios.gr/shedygint2.1.exe	Offline	exe Formbook	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2023-03-01 19:02:10	4f28ee7984759256fdaf5b2a190a5a16f6df2925248550dae5d85fdce9e027b6	exe		AveMariaRAT
2023-03-01 18:24:10	3a5125b535a9d3aec7608c040173cea1e3c12cb855ec5bad90847406022dfe98	exe		Formbook
2023-03-01 18:19:10	d79d4f61a8ac7e72f4b51fd872317a7d9feb84a46e47bebd09eb60c8a34ec057	exe		Formbook
2023-03-01 18:19:09	8e903fbd8158f9518831fbdd2d848bce083b572a0b7c1ded58afb5bef12e8f3b	exe		Formbook
2023-02-28 08:47:05	21d9202edf6777535543c0de3924fafa28423c68ff95c5ad9b0ce823736c846b	exe		Formbook
2023-02-27 03:22:09	d094cf97104aeb8329fe0d30aaac1defe237c4f05fd57bf5f06c141818143ad4	exe		AveMariaRAT
2023-02-24 13:49:04	da029a807d20d6ab41299ae370424cc78fab56d7ee97d11f1156f4e99e54c87a	exe		AveMariaRAT
2023-02-24 01:18:05	49ff2c2f0c21aa26f9ee4357241cdd347278ebacb5f343e34e71b431c891f7b7	exe		AveMariaRAT
2023-02-24 01:17:05	3ecf38540014a3fe10b883b34592b8e5eefb11d0e4abf64fd98129d00bf4a682	exe		Formbook
2023-02-23 05:54:07	1376df41ef75f22b8d35a4407c9aa23789e82c5b49bbef3cba7406bafa067122	exe		AveMariaRAT
2023-02-22 13:08:13	f60ea0e9fc88d4de1c25942a4f62dc6ad804af599a083da1595ec02db53bdb19	exe		AveMariaRAT
2023-02-22 10:17:14	4b2c21ea5f69768b3fa702304683c99e18dea0823d0c8585cec84be4210f08da	exe		Formbook