URLhaus Database

You are currently viewing the URLhaus database entry for http://biurorachunkowe24.waw.pl/templates/ruralidyll/css/messg.jpg which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:122528
URL:http://biurorachunkowe24.waw.pl/templates/ruralidyll/css/messg.jpg
URL Status:Offline
Host:biurorachunkowe24.waw.pl
Date added:2019-02-12 15:03:17 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Abused domain (malware)
SURBL:Blacklisted
Reporter:@de_aviation
Abuse complaint sent (?): Yes (2019-02-12 15:04:02 UTC to abuse{at}ovh[dot]net)
Takedown time:6 days, 8 hours, 23 minutes Bad
Tags:exe Ransomware Shade Troldesh

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-14n/aexe1c06b518a94ad6db106d7d31626f2a7c80bd03f0dcd6d0bc450ffac1750cdf79n/aRansomware.Troldesh
2019-02-14n/aexe43a904fe985dd66b08b16ad02dbfc6b3f5c1d5a0f5cf509e379a7f01510541a6Virustotal results 14 / 70 (20.00)
2019-02-14n/aexea8c452946e291216b7bba41b8e7f9a3eb5ee9178c9559e4b5017ed832d90b94fVirustotal results 18 / 67 (26.87)
2019-02-14n/aexec5df817bc91377b869ee81f704e266f0899ec04164b6beab945cba7a12d31706Virustotal results 23 / 70 (32.86)Ransomware.Troldesh
2019-02-14n/aexe6072ef4d17f6bdc3bc0a659bcdac8a17dcd857e973babffc67f5af417d539919n/a
2019-02-13n/aexefa54c4e34732b611921820be56dd690a4de98285828e4be487b904679a855a92n/aRansomware.Troldesh
2019-02-13n/aexebf32e333d663fe20ab1c77d2f3f3af946fb159c51b1cd3b4b2afd6fc3e1897bbVirustotal results 19 / 71 (26.76)
2019-02-13n/aexed7b9facf6a9d331a8a15b27d10148da869b094807dd6550aa87f7e45dc88b9f9Virustotal results 15 / 70 (21.43)
2019-02-12n/aexe0833f35702aedd845cf070c74401b10c4ae40e6fa6307b23a50254f3c5a998can/a