URLhaus Database

You are currently viewing the URLhaus database entry for http://194.38.20.199/wb.sh which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1046503
URL: http://194.38.20.199/wb.sh
URL Status:Offline
Host: 194.38.20.199
Date added:2021-03-04 10:28:04 UTC
Last online:2021-11-30 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-03-04 10:30:05 UTC to vb{at}smartmedianetwork[dot]com[dot]ua)
Takedown time:9 months, 1 days, 1 hours, 8 minutes Bad (down since 2021-11-30 11:38:32 UTC)
Tags:shellscript

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-09-16n/aunknown 61879d5b2f083b69e8e6cc6afce00be6619176151b093de14f2778a87ea46565n/a 
2021-06-09n/aunknown 274b11542fcb30065c4cc0976ce33252ba2812756f7e22f6d80fae1acadf5c4cn/a 
2021-06-08n/aunknown 00bc49757f48cb02a5e385186ae51ae9ab995bcb6359b35fde8bfcc8b365ef7cn/a 
2021-03-25n/aunknown d039cbb40ffb6d3033f738e0f3f345557dc1dd556b89e1a00a6cbf51ba09baccn/a 
2021-03-13n/aunknown 8de3d2a4a1ec31459937a1d1c7240e95fdfd95a3884406993e8c8929c2c4ab5dn/a 
2021-03-04n/aunknown 6e022b434deca2c970d00ec6ffaf7b4ce9af89f33df6cb28b85d343e247a9268Virustotal results 30.00%