URLhaus Database

You are currently viewing the URLhaus database entry for http://tb.ostroleka.pl/templates/siteground12/css/msg.jpg which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:143848
URL: http://tb.ostroleka.pl/templates/siteground12/css/msg.jpg
URL Status:Offline
Host: tb.ostroleka.pl
Date added:2019-02-23 23:50:19 UTC
Last online:2019-03-12 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: shotgunner101
Abuse complaint sent (?): Yes (2019-02-23 23:52:07 UTC to abuse{at}home[dot]pl)
Takedown time:16 days, 10 hours, 11 minutes Bad (down since 2019-03-12 10:03:52 UTC)
Tags:compressed exe javascript payload Ransomware Shade link stage2 Troldesh link zip

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-11n/aexe d90ec97536d204fb27b2804ff5a5e2f62db2e56727b0d871e95548e2f41de41eVirustotal results 18.75% Ransomware.Troldesh
2019-03-11n/aexe 504e6455b92f3b343dc8e67318fe98b75e3d07d968f1ef43a81cdf1abc370527n/a Ransomware.Troldesh
2019-03-07n/aexe 4d00ce6c7237134b00cde4b24f1c6dfaffb031cf84845a8bae2a5e5ece8f5434n/a Ransomware.Troldesh
2019-03-06n/aexe 2710580e6191bfdd72494a6e00548c6a697ad2f88bccc3cc73fc1100b4e60782n/a Ransomware.Troldesh
2019-03-06n/aexe 30d669292e320768336dc681940b8faf931679a78df6343867a9bfe163e01110Virustotal results 20.90% Ransomware.Troldesh
2019-03-06n/aexe e2d68719518b874cc838f96397c6e273be171c4f6f51edccf6b84a51ca682b14n/a Ransomware.Troldesh
2019-03-05n/aexe 388e56393ae6b4d2ad4c434721060000f6782c412aea274f3465757a114efe04n/a Ransomware.Troldesh
2019-03-05n/aexe 4d2b8abe7b2d79eb3cd44171a73a645d2d2370d64e51734208b7ef261b8e21ceVirustotal results 22.73% Ransomware.Troldesh
2019-03-04n/aexe 400295a3f7672579a747ee9d78dd601e023d1d5fffef4358d1473b82eac6cd92n/a Ransomware.Troldesh
2019-03-04n/aexe 70bedd8eddd7b0a1d49fdfe8ab46e1f95b3d62c54432b29c9ed7a6f03884902an/a Ransomware.Troldesh
2019-03-04n/aexe df4a138c802d091e14fa70817b569b2c9a242350f89adabc5677cc605bd342c5Virustotal results 17.46% Ransomware.Troldesh
2019-03-04n/aexe a1271c366e91dbc3a7f0d6b4b2c1873019056786219c14ad12185ad115771632n/a Ransomware.Troldesh
2019-03-04n/aexe 9fd117a49c72a3a351a8ebdb81b4a4d112884fc2fcf2506910c3e353f4237f8dn/a Ransomware.Troldesh
2019-03-01n/aexe 391a3defc2f9ec2de3e163e6f5655e5580d8390bcc156075b6fbc7caefe131e0n/a Ransomware.Troldesh
2019-02-28n/aexe 80febde88e93687893fee2cc8f25b95873a6c7ea673f2cd13fa0bbbab5f7d4dfn/a Ransomware.Troldesh
2019-02-28n/aexe 5013dc9e2ddbe9ddd90af638466379f876b70ebe504d62e72ed166480a4d4f83n/a Ransomware.Troldesh
2019-02-27n/aexe d7931e0573af3f962f7e10ee48996ddf33b3491a99da031a67426825a8c2d62cn/a Ransomware.Troldesh
2019-02-26n/aexe 73c904d658efa66370dfe8ec83a39c3038343b03e5509fa3280c85bd76790b32Virustotal results 26.09% Ransomware.Troldesh
2019-02-26n/aexe 3b8606c2e270388e7b3643768bf085e98bf0bea992531de17e57e6c7cb4da347n/a Ransomware.Troldesh
2019-02-25n/aexe 701d3db21920f78b8ed2eb6b4286f858277928f50d567c9c6594bd1971e9c07en/aRansomware.Troldesh
2019-02-25n/aexe 8c9b5e458aa1d4733ab5f826029721e5ab4b45e3ffff369ae022d4a67fa45267n/a Ransomware.Troldesh
2019-02-25n/aexe 09a565dce01f29ed644e74679d1bc674c1adbebeb7c9602cda62eb9c468669e3n/a Ransomware.Troldesh
2019-02-23n/aexe aa130fb22d7a8b354d0588858583bd29a2a0efa8a3f0b9830aa6e57f3a49558cVirustotal results 54.93% Ransomware.Troldesh