URLhaus Database

You are currently viewing the URLhaus database entry for http://194.38.20.199/d.sh which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1046500
URL: http://194.38.20.199/d.sh
URL Status:Offline
Host: 194.38.20.199
Date added:2021-03-04 10:24:04 UTC
Last online:2021-11-30 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-03-04 10:24:07 UTC to vb{at}smartmedianetwork[dot]com[dot]ua)
Takedown time:9 months, 1 days, 0 hours, 56 minutes Bad (down since 2021-11-30 11:20:57 UTC)
Tags:shellscript

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-09-16n/aunknown 5439ee923df0557a3134dc6e2d62dd95739bca2198ff1219e0314c4c23fa69a7n/a 
2021-06-09n/aunknown 0e79ec7b00c14a4c576803a1fd2e8dd3ea077e4e98dafa77d26c0f9d6f27f0c9n/a 
2021-06-08n/aunknown a6ae36bf8c28ad8ddd376069a8f0e8bc8138e1ba105408fd86c5a1dd2d45abe5n/a 
2021-03-25n/aunknown 981bea9cf9fbeda11088fcb9553ef5b27d09ef0fda3cbf3e7dd275b32c042976n/a 
2021-03-13n/aunknown 9d9261ea5c28e4d36e10be63472d3bb4e1e17dbd5bbf77964cb3628887f9fda9n/a 
2021-03-04n/aunknown fee0bbef61396a9f82c6f49a21484727e1533ea2d821c5d15e5a739bfb6066deVirustotal results 36.67%