URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2020-05-12 09:26:10	http://mainbook.xyz/app/app.exe	Offline	glupteba	vxvault

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2020-05-12 17:29:36	6dc5d456dfdae36a27a1e621a4f40a65363da30bf191bb4fda5ae90632ae9772	exe
2020-05-12 16:19:23	d5d368c9ba295ef4c36fe1e02452418d14f27512fe153c2f16f7384ca60b3db4	exe		Glupteba
2020-05-12 14:45:51	55e1604ebd4d5a0a9ccb6d4a7fd2ce4b5c1f75f9e2ac2710cf0698bac42c6679	exe		Glupteba
2020-05-12 14:14:03	788eb685943b452608a07a44d75be4c5806f1374461596a6ad7cce5569fcf77e	exe
2020-05-12 12:28:26	b7db5b70b15ebac71e0aa8d7cb4e5f663171721b03157644cc2880a38337048a	exe		Glupteba
2020-05-12 12:21:36	33d20e361edb210b36aaf12826d9e358b32360102333573507b03b77da5be50e	exe		Glupteba
2020-05-12 10:07:29	c006abbb1bae333e5973f9c419bfd9c3c721698cf2cf3ffbd1048fdfb4de811b	exe		Glupteba
2020-05-12 09:47:45	9166b72a64643cbf2e12cc337d2d31fd6043e1b05414f1f6f36d3267d512a918	exe
2020-05-12 09:26:10	eacfaf6302938b5e9cd0abe895406c484d58d41d4d32e9a97a4e40295160048b	exe		Glupteba