URLhaus Database

You are currently viewing the URLhaus database entry for http://carbinz.gq/modex/angelx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1188010
URL: http://carbinz.gq/modex/angelx.exe
URL Status:Offline
Host: carbinz.gq
Date added:2021-05-03 12:33:04 UTC
Last online:2021-06-09 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2021-05-03 12:34:02 UTC to abuse{at}serverion[dot]com)
Takedown time:1 month, 6 days, 22 hours, 41 minutes Bad (down since 2021-06-09 11:15:15 UTC)
Tags:AgentTesla link exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-05-25n/aexe 1450c4baccb631a99f86fb23a60ba29847959c5827daaf23e110bcb6ce69f097n/aAgentTesla
2021-05-14n/aexe 6121521b122210807d3c2a1dcb56739b387e9e1495e3a3a2104e1a966ec4182en/aAgentTesla
2021-05-12n/aexe b892edf8bc98bf50d4979e163bb47e2b3bece4034350228e47d0164859911259n/aAgentTesla
2021-05-06n/aexe 9842fa0c335043fd411cce338b46b32438f86b2ee76c454f29bd3355f729ee77n/aAgentTesla
2021-05-03n/aexe ddcf7dc656f8ac2165462e1099333cf3330717f0a90a2f44ed584c987b2a2326Virustotal results 27.14%AgentTesla