URLhaus Database

You are currently viewing the URLhaus database entry for http://176.111.174.74/lot.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1281662
URL: http://176.111.174.74/lot.exe
URL Status:Offline
Host: 176.111.174.74
Date added:2021-05-25 07:21:18 UTC
Last online:2021-06-15 14:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-05-25 07:22:09 UTC to abuse{at}sayda[dot]ru[dot]net,admin{at}sayda[dot]ru[dot]net)
Takedown time:21 days, 7 hours, 14 minutes Bad (down since 2021-06-15 14:36:54 UTC)
Tags:exe RemcosRAT link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-06-15n/aexe 8aa535da988d7da6f518ab54c4275aa511116a5b4854374e179180ec19dbd85bn/aRemcosRAT
2021-06-14n/aexe b0117821767ebc6e59c525dcb3477d24f8518262418f9b4f99be37e47e797fb1n/aRemcosRAT
2021-06-13n/aexe 9d54a7d0775a7a0e62f3db4a9af517a8253865c259f6a082a0a46046fde5624cn/aRemcosRAT
2021-06-12n/aexe 8cdec76d97a727661fa3f3ab5eff68b7be5e13f2ff024e4ab69cc6097ee2390cn/aRemcosRAT
2021-06-11n/aexe ac525cd0d590a1aa88554cb292245b53c65cdee7103647929a4c235694a4c782n/aRemcosRAT
2021-06-10n/aexe 3757916ed7256d3103f25e7416ad4268032a71fb0de2e8be126a563c0d54b65bn/aRemcosRAT
2021-06-10n/aexe 059683bd8243f48593d29ec0c67f7e168366e68248e0965fd81dc56e0210bbccn/aRemcosRAT
2021-06-09n/aexe 003ce2185b3ac778e30dc053f8f1e21bee6e627895e52b6d764c66eb41990bc9n/aRemcosRAT
2021-06-08n/aexe 01d28734442e0a373e558ce82a34dc36c73950e607fd3fd539e541c306e8c8f7n/aRemcosRAT
2021-06-07n/aexe d9a2bae91dc7c6bdedddca6e60908a1fbf177700bb2041c2931c0cb556a1f077n/aRemcosRAT
2021-06-06n/aexe 6a53aac557f743f8c3975d1471a69b60af5cae74d211a004fdaab00f30d6e151n/aRemcosRAT
2021-06-05n/aexe c8c92410c030de47f8b8f3e45d063b2d48031b80933f8e590fd1d17122d076a5n/a RemcosRAT
2021-06-05n/aexe 6a1a791a6321192d99d03ed46718a0a96869473461e3575d23d63ecb64cdbf9fn/aRemcosRAT
2021-06-03n/aexe edacb9ce365031b86ad1c3eedc43d903ecaa38e7904539de21d45eda78a4286en/aRemcosRAT
2021-06-02n/aexe 8d412a4c1f64570ac98ccb0ec55d80ae36e97b8c5d6ab544b0802f9e91458449n/aRemcosRAT
2021-05-30n/aexe 91cdc7aaff5c03de5146f91473320e88a930706ddb306f3e0724989dea612d26n/aRemcosRAT
2021-05-29n/aexe 72008754051624f741da1756ab4f5ffecca2713875fc7cb429fd225775ade951n/aRemcosRAT
2021-05-28n/aexe feedd6efd7f0f971d6b9da9033e8c062180b2e613fb10c55e019aa6c2a6c353an/aRemcosRAT
2021-05-26n/aexe 6ba4b19d55da2bb560922e8325ce044b622635d936403c7cd9bd80c1f76418efn/aRemcosRAT
2021-05-25n/aexe ddcd88b517ea06605fb2353580d34f502499588f25066487ebd5fa0d8c7e3683Virustotal results 38.46%RemcosRAT