URLhaus Database

You are currently viewing the URLhaus database entry for http://hhind.co.kr/INTRA/IMIS.EXE which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:115283
URL: http://hhind.co.kr/INTRA/IMIS.EXE
URL Status:Offline
Host: hhind.co.kr
Date added:2019-02-01 12:50:07 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL :Not listed
SURBL :Not listed
Quad9 :Not blocked
AdGuard :Blocked link
Reporter:@zbetcheckin
Abuse complaint sent (?): Yes (2019-02-01 12:52:03 UTC to ip-adm{at}skbroadband[dot]com)
Takedown time:8 months, 25 days, 17 hours, 18 minutes Bad (down since 2019-10-25 06:10:07 UTC)
Tags:exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-05-30n/aexe 4128c9c8dfc37eccf231e6186e38f18348add5d4a18d4011982e8aaf6d4028d1n/a
2019-05-30n/aexe 6984f1512784006ca3e63aa64bb7da1a0c030e11e215e304c64072edb4c5e443Virustotal results 51.43%
2019-05-22n/aexe 96cb39835d49f99619d341b03394fbd3966f3d5b701818ea12bfed0758bd7bbdn/a
2019-02-01n/aexe 36735edaeaa16692edc9cb0cbff7c2387d82d6ef3cb52a186983dff0bcc7eec0Virustotal results 72.06%