URLhaus Database

You are currently viewing the URLhaus database entry for http://surearmllc.com/wp-content/ewww/sserv.jpg which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:105828
URL: http://surearmllc.com/wp-content/ewww/sserv.jpg
URL Status:Offline
Host: surearmllc.com
Date added:2019-01-19 02:08:04 UTC
Last online:2019-12-18 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2019-01-19 02:10:02 UTC to abusencc{at}interserver[dot]net)
Takedown time:11 months, 3 days, 6 hours, 6 minutes Bad (down since 2019-12-18 08:16:12 UTC)
Tags:exe Troldesh link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-11-30n/ahtml 4c7d08f1d6fac569c83fa87b42a3a727668da55317954637ce500d59e058fe03Virustotal results 0.00% 
2019-04-05n/aexe 697c0d25b9dda449e9fc21e9f7eaee2334bce081d9df58429f339d6bcd36b7bdn/a 
2019-03-07n/aexe e3391fae9d0c92a0963de3b37683521e494fb7e73ef0f514778b8ba1ab2d22a3n/a 
2019-01-19n/aexe 50119da56e84ae4baa207a9391a0143fe5aa66c212aeba08e2d6d864af0a0d83Virustotal results 76.06%Ransomware.Troldesh