URLhaus Database

You are currently viewing the URLhaus database entry for http://thu-san-world-challenges.org/wp-admin/css/colors/blue/messg.jpg which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:114576
URL: http://thu-san-world-challenges.org/wp-admin/css/colors/blue/messg.jpg
URL Status:Offline
Host: thu-san-world-challenges.org
Date added:2019-01-31 12:56:09 UTC
Last online:2019-05-06 04:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: lovemalware
Abuse complaint sent (?): Yes (2019-01-31 12:58:07 UTC to abuse{at}alibaba-inc[dot]com,intl-abuse{at}list[dot]alibaba-inc[dot]com)
Takedown time:3 months, 4 days, 15 hours, 46 minutes Bad (down since 2019-05-06 04:44:46 UTC)
Tags:exe Troldesh link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-04-15n/aexe 3d9c515eb36bbf6930b0e8dc5961d1823556025c1866326c4124a6cd781724e3n/a 
2019-03-31n/aexe 3a7566a06f5a64a23a70f361dab9f644ac134d858390665a47ee5d861325bd68n/a 
2019-03-30n/aexe a9ca641e4c83579dc5ac7fb41efe555679ae9df1c680fb66f01ecd1b71070b4cn/a Ransomware.Troldesh
2019-03-27n/aexe 10da0496e1dd10f9803cb087729bd510724d5ac0bd8f8705d8d2aa5c879ba09fn/a 
2019-03-26n/aexe 063c0a6e19eaada8b8a3b947f17eed3b7cefc399931f84bbfca9d3b465ffabecn/a 
2019-03-24n/aexe 7468a261408d6be69b6bf16afb7355ae3223ced9221ab6372f5a698fe04e7a2bn/a 
2019-02-14n/aexe 1c06b518a94ad6db106d7d31626f2a7c80bd03f0dcd6d0bc450ffac1750cdf79n/a Ransomware.Troldesh
2019-02-14n/aexe 43a904fe985dd66b08b16ad02dbfc6b3f5c1d5a0f5cf509e379a7f01510541a6Virustotal results 20.00% 
2019-02-14n/aexe a8c452946e291216b7bba41b8e7f9a3eb5ee9178c9559e4b5017ed832d90b94fVirustotal results 26.87% Ransomware.Troldesh
2019-02-14n/aexe c5df817bc91377b869ee81f704e266f0899ec04164b6beab945cba7a12d31706Virustotal results 32.86% Ransomware.Troldesh
2019-02-14n/aexe 6072ef4d17f6bdc3bc0a659bcdac8a17dcd857e973babffc67f5af417d539919Virustotal results 23.19% Ransomware.Troldesh
2019-02-13n/aexe d7b9facf6a9d331a8a15b27d10148da869b094807dd6550aa87f7e45dc88b9f9Virustotal results 21.43% 
2019-01-31n/aexe dfaa49c45c94ed1e0f333bf36aba29b525ceaa7ccb8be1928a16c579e2de4706Virustotal results 59.15%