URLhaus Database

You are currently viewing the URLhaus database entry for http://92.63.197.153/ahrghk.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:116498
URL: http://92.63.197.153/ahrghk.exe
URL Status:Offline
Host: 92.63.197.153
Date added:2019-02-04 06:13:15 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Unknown
SURBL:Not listed
Reporter:@Sec_S_Owl
Abuse complaint sent (?): Yes (2019-02-04 06:14:05 UTC to hvfopserver{at}protonmail[dot]com)
Takedown time:4 hours, 54 minutes Good
Tags:downloader exe GandCrab link Ransomware.GandCrab link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-04n/aexe 529c3ec491838acf81f8cbbc9cc6b4a7af5d6bdf2f4101acf85d1421c73305adVirustotal results 66.67%Ransomware.GandCrab