URLhaus Database

You are currently viewing the URLhaus database entry for http://ocab.simongustafsson.com/wp-admin/css/colors/blue/pik.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:147305
URL: http://ocab.simongustafsson.com/wp-admin/css/colors/blue/pik.zip
URL Status:Offline
Host: ocab.simongustafsson.com
Date added:2019-02-26 09:29:20 UTC
Last online:2019-03-13 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2019-02-26 09:30:18 UTC to drift{at}binero[dot]se)
Takedown time:15 days, 4 hours, 35 minutes Bad (down since 2019-03-13 14:05:35 UTC)
Tags:RUS Troldesh link zipped-JS

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-02-27n/azip 9cdea8b762be05329245e61d38b28e0453e8ec571d180d6a9de0852f163bdd17n/a 
2019-02-27n/azip dd56ecdd437588ece9255e0db4df4f3c415d13bc365a556370119bb536b12ed4n/a 
2019-02-27n/azip 68d3916543e2a1bea6103f60ad936263a70e5ef79921a6f588fb6581377faebdn/a 
2019-02-26n/azip dbb1df647786dcaef36064af0f87d14378052053a43b22e808913136277abecen/a 
2019-02-26n/azip 38a75ee77f502dd357040883546d024a9cb7af09548417916461dad498d11afen/a 
2019-02-26n/azip 45077488107ebc6ca97e1858e51fe73d39ff6ca1b0534a924096ec6b7eab5958n/a 
2019-02-26n/azip 13663658c97d7abb932eed41002675dfa38e6614e0af2ac418a93a9cd0a7ca61n/a 
2019-02-26n/azip 4e7b6d767682fa695885e4f84f43dcb02cb09cd1198b08205a20d0add1f59f04n/a 
2019-02-26n/azip fc2fa167953795371032843459ddc5cbeb41224914d2a64de7e60ef217457513n/a