URLhaus Database

You are currently viewing the URLhaus database entry for http://45.140.146.34/44270.6571252315.dat which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1069196
URL: http://45.140.146.34/44270.6571252315.dat
URL Status:Offline
Host: 45.140.146.34
Date added:2021-03-15 16:44:04 UTC
Last online:2021-03-15 19:XX:XX UTC
Threat:Malware download Malware download
Reporter:Anonymous
Abuse complaint sent (?): Yes (2021-03-15 16:45:08 UTC to abuse{at}pq[dot]hosting)
Takedown time:2 hours, 58 minutes Good (down since 2021-03-15 19:44:00 UTC)
Tags:IcedID link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-03-1544270.6571252315.datdll e9886f2a51b1d720f1b170e4b24f66cc50727f114139269e9150c9215b7eb5b0n/a IcedID
2021-03-1544270.6571252315.datdll fa38f0021c3f9a07dc470aab890628865407cc39fa0b3d5b1709d7909bde4324n/a IcedID
2021-03-1544270.6571252315.datdll e07b3fd515f820c1e59361b37a60a3a2d7af29496f6482e54777950a31b29025Virustotal results 1.45% IcedID
2021-03-1544270.6571252315.datdll f175d5883a0958f8ce10c387fef6c6750d26089e7413bf7b9a3767b655e61417n/aIcedID
2021-03-1544270.6571252315.datdll 5e9194a676908f852950aa52f02679510718d72a33ab82e8376b0d5382c28d38n/a IcedID
2021-03-1544270.6571252315.datdll f4f50367e9f7529b0459cac82804f80b9231bbf9ef9fdb4f30abdfd90d530f56n/a IcedID