URLhaus Database

You are currently viewing the URLhaus database entry for http://194.38.20.199/pa.sh which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1046522
URL: http://194.38.20.199/pa.sh
URL Status:Offline
Host: 194.38.20.199
Date added:2021-03-04 10:34:43 UTC
Last online:2021-11-30 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-03-04 10:36:04 UTC to vb{at}smartmedianetwork[dot]com[dot]ua)
Takedown time:9 months, 1 days, 0 hours, 40 minutes Bad (down since 2021-11-30 11:16:26 UTC)
Tags:shellscript

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-09-16n/aunknown bd9b8d810462fb5626e77bfb64a040776df3bb1bf01e7d235151d769b921206cn/a 
2021-06-09n/aunknown 3e25e845ffcc356ed20af38164ebe3ce501f9c9e16a04c36922764cee9f5f343n/a 
2021-06-08n/aunknown bcd463c05f28a489c665e3c849eed63908c155c5a191b5bb8c61746769eaae17n/a 
2021-03-25n/aunknown d8b1e95ef79dec07089fb95e3ee9a7169ffa0e46dbd190675cab1a37c40e49f5n/a 
2021-03-13n/aunknown 9f4d8393b72130a72fc47f587d6091b42df45dc0d43c6dfdd4835c2edfc72664n/a 
2021-03-04n/aunknown 5db8d8333fc5ab52b9619541dfcb58e02f7a9c01565a1fe71092a14c3bfbd7f5Virustotal results 31.67%