URLhaus Database
Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).
Database Entry
IP addresses
The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.
| Firstseen (UTC) | IP address | Hostname | SBL | ASN | Country | Active? |
|---|---|---|---|---|---|---|
| 2021-06-01 08:19:05 | 111.90.156.91 | server1.kamon.la | SBL620128 | AS45839 SHINJIRU-MY-AS-AP |  MY | no |
Malware URLs
The table below shows all malware URLs that are associated with this particular host.
| Dateadded (UTC) | URL | Status | Tags | Reporter |
|---|---|---|---|---|
| 2021-06-01 08:23:05 | http://pughegsed.com/paul/friendz3.exe | Offline |  Cryptolaemus1 | |
| 2021-06-01 08:23:05 | http://pughegsed.com/paul/friendz5.exe | Offline | RemcosRAT  | Cryptolaemus1 |
| 2021-06-01 08:23:05 | http://pughegsed.com/paul/WinFriendzRem.exe | Offline | RemcosRAT | Cryptolaemus1 |
| 2021-06-01 08:23:05 | http://pughegsed.com/paul/friendz6.exe | Offline | RemcosRAT | Cryptolaemus1 |
| 2021-06-01 08:23:05 | http://pughegsed.com/paul/friendz7.exe | Offline | RemcosRAT | Cryptolaemus1 |
| 2021-06-01 08:23:05 | http://pughegsed.com/paul/friendz4.exe | Offline | Cryptolaemus1 | |
| 2021-06-01 08:23:05 | http://pughegsed.com/paul/friendz1.exe | Offline | RemcosRAT | Cryptolaemus1 |
| 2021-06-01 08:19:05 | http://pughegsed.com/paul/friendz2.exe | Offline | remcos RemcosRAT | Cryptolaemus1 |
The table below shows recent payloads delivery by this host.
| Firstseen (UTC) | SHA256 hash | File type | Bazaar | Signature |
|---|---|---|---|---|
| 2021-06-01 08:23:05 | 60f8225003fe72419de846a81e2f8f41bcb04c0ce3a56d6ae11b86e87370c9e6 | exe | ||
| 2021-06-01 08:23:05 | 58e1e7b5e509b746e9b9d12fc30f99434e69a6fc6e8665f05ccde723efb18803 | exe | RemcosRAT | |
| 2021-06-01 08:23:05 | 46ad06ea41612cf4825f35a9e317b0707da66d83b9aad4cf715f69e7ac565f9c | exe | RemcosRAT | |
| 2021-06-01 08:23:05 | ee3e1ff02ef8c163c2472764b0f380528809ab305de242bd049c0f99c8ffdddd | exe | RemcosRAT | |
| 2021-06-01 08:23:05 | 1424e13c4573971df0e92dd41cfc205d0017fd3b3024ce16a2caf9bf9a0a3ef4 | exe | RemcosRAT | |
| 2021-06-01 08:23:05 | 44d0c0c3f733cb739725c37ddca9f2028215249549ec09b33a16a8f72852174c | exe | ||
| 2021-06-01 08:23:05 | 398a8ad514fff3943f5cb05d7d2f3bf6a1c80b66ec7cfd824419863cb09c46cb | exe | RemcosRAT | |
| 2021-06-01 08:19:04 | fee00d95d7dee4af2fc600cc86121013cb34300e2ba3bf4b4557689893918a8c | exe | RemcosRAT |