URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-03-29 14:03:28	41.185.8.134	srv34.hostserv.co.za	Not listed	AS36943 ZA-1-Grid	ZA	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-03-29 14:03:28	https://narcissisto.com/drazhsz.zip	Offline	Dridex	reecdeep

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-03-30 15:41:18	0c197468076c14f7b6c4fd095009ff628970f2c8d408131f7afd306b5e65eedd	dll		Dridex
2021-03-30 07:19:46	89d29174e223d80b056e3f6b5c282b4dd07573cdf2014aec37d40e3f85d657f9	dll		Dridex
2021-03-30 03:35:17	2f95344e5e43861fd9d4d890dd49b7a1401e3d98c7308b5f45702c2c9e45d56a	dll		Dridex
2021-03-30 03:16:33	0e849fb124780a37bcd4fa4c73e86e16f9c0086500f4edce7827d59d06b9957c	dll
2021-03-29 19:22:10	78f9c1f6ae02832ac63c6697f6089cc903119a206e7388bb662f02985fee3127	dll		Dridex
2021-03-29 17:59:58	1889e4dad95d3e1c99afda0b5f3d39302c869df3abec6af9043732e8adcc05ba	dll		Dridex
2021-03-29 15:58:55	c8e7d61a95193e121433b77c045d78b4b4ff94fd92af379ab9549e672148f5a9	dll		Dridex
2021-03-29 14:56:48	7ec6d4c4d98a1901c2a64bea8f5e1ca476ea85d6d52a6d6810531f56387e7859	dll		Dridex
2021-03-29 14:03:27	1e553da2063c5773de05bd541cf8a3ec1bdd8d7153003b18b53f2a45c61df6c5	dll		Dridex