URLhaus Database

You are currently viewing the URLhaus database entry for http://13.212.176.2/bless/cc200.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1310550
URL: http://13.212.176.2/bless/cc200.exe
URL Status:Offline
Host: 13.212.176.2
Date added:2021-06-01 06:46:06 UTC
Last online:2021-06-03 08:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2021-06-01 06:47:04 UTC to abuse{at}amazonaws[dot]com)
Takedown time:2 days, 2 hours, 12 minutes Poor (down since 2021-06-03 08:59:53 UTC)
Tags:exe Formbook link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-06-03n/aexe 161ce90a5dbcb52a305aec3d3372c4a35880a7626d0b4e4c927558d4ebae010aVirustotal results 8.70%Formbook
2021-06-02n/aexe f1e32b25727ce5ba6c5790aa6b8ba7c5e561a49c0df747ceed15e08cce9b73abn/aFormbook
2021-06-02n/aexe 2e5709f12673cffcf4d3f5109303de822626c3a2a608f9c78a853c0c6d58edd1n/aFormbook
2021-06-01n/aexe 780555ffbda34b2fe63790a38a7c3e4df0b437d17c22fe7c886fcd2ee72684d0n/aFormbook
2021-06-01n/aexe 5a77d7c7c407337a3900bc0b58f0e27a6ba71a35a5ae92a85861e6b020ea8496n/aFormbook
2021-06-01n/aexe 146f5b2544e98818cbe9813068d6f08037df0e29a3b83d4d2fce3e1bfc444f2an/aFormbook