URLhaus Database

You are currently viewing the URLhaus database entry for http://5.39.217.221/gst/vbc.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1040004
URL: http://5.39.217.221/gst/vbc.exe
URL Status:Offline
Host: 5.39.217.221
Date added:2021-03-01 13:12:04 UTC
Last online:2021-03-03 09:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2021-03-01 13:14:04 UTC to abuse{at}hostkey[dot]nl)
Takedown time:1 day, 20 hours, 29 minutes Poor (down since 2021-03-03 09:43:47 UTC)
Tags:AgentTesla link exe opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-03-02n/aexe 98844d2c2c3815f5b743e40dea380cfea992b35cf8461f0f529b9874d9a3e23fn/aAgentTesla
2021-03-02n/aexe f2d2638afb528c7476c9ee8e83ddb20e686b0b05f53f2f966fd9eb962427f8aaVirustotal results 5.80%
2021-03-02n/aexe c7cdab6fee95ee4299afb418849f16d738d63a03e85f683393103c835cea0a5an/aAgentTesla
2021-03-01n/aexe b37bd45d6862b8e8edc950135e35c66a534724ec5a58a0ed448575753cad8871n/aAgentTesla
2021-03-01n/aexe 6458530468461cb08fc1673aed2dbbd606d5a5795b89198a78132645eca95c9an/aAgentTesla