URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-12-17 16:50:18	http://linkmifi.duckdns.org/file/net.exe	Offline	AgentTesla AZORult	Anonymous

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-12-22 15:09:23	d2be42441b0a5e46e566cc099ac90cef3e6cf121ba0ecec5bd6510264524c3e2	exe		AgentTesla
2020-12-22 14:26:58	09cfbae308d3cbdf17c9c71920feee15faac8ae3c78cf70d88fffbe49e166f4e	exe		AZORult
2020-12-22 10:44:57	8abbd310dd3e242c31380c26ea16e9ac6380ac3cf53ad94fa368a70fa419abbf	exe		AZORult
2020-12-18 08:54:34	197137c5fd8c8051516f3004db4721d5d066b68d5d02695390a7e820635056ac	exe		AZORult
2020-12-18 08:37:10	5a22e0da88853bf15c3062bce4c9cdaec4daf94d26dffb372f14c8641b519f24	exe		AgentTesla
2020-12-17 17:15:29	98ad8528238c8ab87e33bc9048ad95f06b9bc92b2e45b2ccbf49562074c56662	exe		AgentTesla
2020-12-17 17:02:34	67670c27b8182dc39f69b38b567ec82317754a2e1411285b31a8871640c62430	exe		AgentTesla
2020-12-17 16:50:11	c63d4581dbe839bdb9865bcb6033e9e0ef459d1c5406e9f4fd3a05f48b46d0f1	exe		AZORult