URLhaus Database

You are currently viewing the URLhaus database entry for http://93.157.63.213/filename.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1121005
URL: http://93.157.63.213/filename.exe
URL Status:Offline
Host: 93.157.63.213
Date added:2021-04-15 12:14:04 UTC
Last online:2021-04-15 16:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-04-15 12:15:04 UTC to alexx[dot]person{at}gmail[dot]com)
Takedown time:4 hours, 36 minutes Good (down since 2021-04-15 16:51:22 UTC)
Tags:CoinMiner.XMRig exe RaccoonStealer link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-04-15n/aexe 4dbf3dd9c478b503dbef1a7239ad9293cbedd300e94c9b48381371aa9410bbe2n/a RaccoonStealer
2021-04-15n/aexe 41818f178e3901d42cd6a2567a9e9c5924538e30f812175454d72dee82bbef78n/a CoinMiner.XMRig
2021-04-15n/aexe f2bfd95f29d81121ec225a9043bf6dfe2f4ad7e5b9d64154b48e728fa01d753bn/a CoinMiner.XMRig
2021-04-15n/aexe 1cf375fc2caa68f520a626542f6b285bcd8ad66f93cac008bd9d2226e5641fcfn/aRaccoonStealer
2021-04-15n/aexe 7beacccd4af720832723442f9afae77c52095ff5990de1352bb3a8ae1059304eVirustotal results 28.79%RaccoonStealer
2021-04-15n/aexe 989e4609ad4bd5440c6b27c7cf27078f775efa0a1eb7173ae82f668ab7362cd2Virustotal results 32.84% RaccoonStealer