URLhaus Database

You are currently viewing the URLhaus database entry for http://greataccesstoserver.com/files/One.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1104391
URL: http://greataccesstoserver.com/files/One.exe
URL Status:Offline
Host: greataccesstoserver.com
Date added:2021-04-08 12:48:05 UTC
Last online:2021-04-13 01:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: JAMESWT_MHT
Abuse complaint sent (?): Yes (2021-04-08 12:49:02 UTC to abuse{at}digitalocean[dot]com)
Takedown time:4 days, 12 hours, 55 minutes Bad (down since 2021-04-13 01:44:57 UTC)
Tags:ArkeiStealer link glupteba link RaccoonStealer link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-04-12n/aexe 5417483d16a5334073fc7f9a05394879b616a6e4a51c25d4002fb15865ef27c2n/a 
2021-04-11n/aexe 50ec16d505a001d47148cbbee036b31f64099dadda7f3dfd19899548ba28f9d5n/a RaccoonStealer
2021-04-10n/aexe 27d456e93d13683ade6abb1cb6f73503d271138b6f7ce155d14c2675a9792734n/a 
2021-04-09n/aexe e940371b11d6b7c8a8324464ba73e872a23f7c0a0cdfff919903b301b2ce724en/a ArkeiStealer
2021-04-08n/aexe b1adf30c5cb4c1a7c06e877308d0f0e32f6ea1b21105de5db7583a889d089373Virustotal results 20.29%Glupteba