URLhaus Database

Every malware URL on URLhaus is associated with a host. A host can be either an domain name or an IP address (in case the malware URL is hosted on an IP address and doesn't use a domain name).

Database Entry

Host:	squadlegion.crabdance.com
Domain registrar:	eNom
Domain registration date:	2005-11-22 16:17:44 UTC
Spamhaus DBL :	Not blocked
SURBL :	Not blocked
Quad9 :	Not blocked
AdGuard :	Not blocked
Cloudflare :	Not blocked
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Control D HaGeZi :	Not blocked
Firstseen:	2021-09-28 11:29:03 UTC
Total malware sites :	5
Online malware sites :	0 (0%)
Offline Malware sites :	5 (100%)
A record(s) observed :	2

IP addresses

The table below shows all IP address observed for this particular host (in case the host is a domain name, all A records will be listed - including all historical ones). Please note that the output is limited to 10 entires.

Firstseen (UTC)	IP address	Hostname	SBL	ASN	Country	Active?
2021-09-28 11:29:06	194.36.178.69	free.ds	Not listed	AS200740 FIRST-SERVER-EU-AS	SG	no

Malware URLs

• URLs
• Payloads

The table below shows all malware URLs that are associated with this particular host.

Dateadded (UTC)	URL	Status	Tags	Reporter
2021-10-08 17:44:12	http://squadlegion.crabdance.com/e.exe	Offline	32 exe RedLineStealer	zbetcheckin
2021-09-28 11:29:11	http://squadlegion.crabdance.com/s.exe	Offline	exe opendir	abuse_ch
2021-09-28 11:29:08	http://squadlegion.crabdance.com/r.exe	Offline	AsyncRAT exe opendir	abuse_ch
2021-09-28 11:29:07	http://squadlegion.crabdance.com/b.exe	Offline	CoinMiner exe opendir	abuse_ch
2021-09-28 11:29:07	http://squadlegion.crabdance.com/m.exe	Offline	CoinMiner exe opendir	abuse_ch

The table below shows recent payloads delivery by this host.

Firstseen (UTC)	SHA256 hash	File type	Bazaar	Signature
2021-10-08 18:20:20	9277f4b0c05ad683df1c7b9ff100bb75098191949a1329c5773bb4562a288178	exe		CoinMiner
2021-10-08 17:44:12	260dbb4e6556f73e71926d8df1258cb902e00963a1cd199d4a00771d2058e7d7	exe		RedLineStealer
2021-10-06 15:54:10	2a073ae75ece3d967d1dd97638a956c40bfd60207519bcbab19d31395b84e32e	exe		CoinMiner
2021-10-04 17:58:49	2d72296e4e5ac720dab307f96e4e26e94b9f754df781e20b1115c2fe5932ca66	exe
2021-09-28 11:29:10	3b347a4641e8553c4ecbee8e6d86c32311cd9348d61eb55929aae076e82f96c3	exe
2021-09-28 11:29:07	bcc7c88a78159d256da9838d8148b61bf92057b71eabf3bed83ed650d723562c	exe		CoinMiner
2021-09-28 11:29:07	1e6d253a7e98aecc71ea7509f5fcfaef4c91258403dcb028cfa6e0e7d47d8080	exe		AsyncRAT
2021-09-28 11:29:06	715e1eb5414e749e16fb3999dda7bcf8405e6fb4e14e66ddcbdf20a2e1af89c3	exe		CoinMiner