URLhaus Database

You are currently viewing the URLhaus database entry for http://92.63.197.48/2.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	101635
URL:	http://92.63.197.48/2.exe
URL Status:	Offline
Host:	92.63.197.48
Date added:	2019-01-05 09:47:05 UTC
Last online:	2020-03-12 15:XX:XX UTC
Threat:	Malware download
Reporter:	zbetcheckin
Abuse complaint sent (?):	Yes (2019-01-05 09:48:03 UTC to hvfopserver{at}protonmail[dot]com)
Takedown time:	1 year, 2 month, 12 days, 5 hours, 54 minutes (down since 2020-03-12 15:42:27 UTC)
Tags:	CoinMiner exe GandCrab phorpiex Ransomware.GandCrab

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2020-03-11	n/a	exe	0fdd21beb009e9675f955733c80e8053b5dafbb12d22b9cb761af3df82be6505	n/a	Phorpiex
2020-03-11	n/a	exe	9d378340ae4e0da80a590927f139f70a875b3809592139024bf27e4c70997f9f	n/a
2020-03-11	n/a	exe	a9e8cc04eb20306734cbb0aaed90746f2e87260a1d66f20413efdf1c331fe0b0	34.25%
2020-03-10	n/a	exe	e115c62d6bd273a988c07570b40cd9caed1873b8bc85384797debb9182a113fd	n/a	CoinMiner
2020-03-09	n/a	exe	468340a7d422c3525d4bb9c274511d77ce715f86f42eb8c790f5cc59bda6c32a	27.40%
2020-03-06	n/a	exe	8a3b9a9dc3f14dce7dff9280df58eeb183b4f3b8c57289d05212ce22e25d1c16	20.55%	Phorpiex
2020-03-03	n/a	exe	1565d1de4d537a94e30ccfa2fcd87fcd56245fb03f72ff680ded7c1d1850ff68	n/a	Phorpiex
2020-03-03	n/a	exe	2d78656550bb256779b9cadbf5970b5b9b097e600bb6d00bd91775c1eef84609	58.33%	Phorpiex
2019-09-11	n/a	exe	b1e0ca203efe0ef4b3302eae10af6a78c9d35cd640f0b397d2b66ebd9982d793	10.94%	Phorpiex
2019-08-29	n/a	exe	d12100599ef8bf6d65b49159a00713e7e147d19d387af087e7313fa3a5ef473b	17.91%
2019-08-28	n/a	exe	eee23a8f3e0b0cb2929057cb468f17297c7b46b1fc5c357e17b56ee6a605121b	62.12%	Phorpiex
2019-07-19	n/a	exe	cfa7edc52cb8289ea0822520adf2c116c879c522af81a8aea35e9421a9019535	39.13%
2019-01-24	n/a	exe	3fd455b0f5535d825047ad2a8c964e2f9a6d69a02524f8d62e0fc1d8538e769f	n/a	Ransomware.GandCrab
2019-01-23	n/a	exe	0fc84d2d657e633f66658c36028e6cf4b6ee9ce474f83b4dc8aad22cd8cfb6b5	25.76%	CoinMiner
2019-01-20	n/a	exe	807d016557f27b3b32e202fd67c7112f293ac5f5cdf6ab3450cc0e485178763e	n/a	Ransomware.GandCrab
2019-01-19	n/a	exe	36d80c091c3a442fcdbc35c04582ba4843f2774785d173adf8e946163ef01d39	11.27%	CoinMiner
2019-01-17	n/a	exe	a1f8f0ab6bfe9b4d893c1c032b6ae2541ea82401aae9077acbe74686446e8b8b	21.43%	Ransomware.GandCrab
2019-01-16	n/a	exe	bf9d9de04ed90781080e144c2b0f80e48258fd99ee1ec718b932d802b21faf73	n/a	Ransomware.GandCrab
2019-01-15	n/a	exe	bf390a0da704a2f74510d09af32ee3bf31f4c7c4c7c38c53e87af1c307fd343e	14.49%	Ransomware.GandCrab
2019-01-12	n/a	exe	0bbe92558569d3b4377d92c02d43cdb8f2c51034a699d9e8a5fb2620f5694814	18.57%
2019-01-10	n/a	exe	9a3064a02f7d45b5d073d5653c53694ebfd37af6255a0b928703a11eac4a142d	25.71%
2019-01-08	n/a	exe	4b9d5841d38b8658466dcaf409c34c0f6d2d1f9ecb64254391a4621465daf79b	n/a
2019-01-08	n/a	exe	adeca0aff998ca5e0bb3f9f5caa06fc8aea00a024429dcc89e05a5fd63faaaa2	20.00%
2019-01-08	n/a	exe	f39397b95460f3c04810955b8ab5fb40fcc1c1d96431f1b0d70dde4207f746bc	n/a
2019-01-07	n/a	exe	334261cfaaedfd30382aa7096fb783ab11d32159cb3e6fc3f7e777c80b858a52	23.19%	CoinMiner
2019-01-05	n/a	exe	134bab5229fef83f9dc6bdc922fe20f906385106282e317dd60302db23a2e5e8	26.39%