URLhaus Database

You are currently viewing the URLhaus database entry for http://fachowe-remonty.com/wp-content/themes/gaad-wp-template/css/pik.zip which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:147361
URL: http://fachowe-remonty.com/wp-content/themes/gaad-wp-template/css/pik.zip
URL Status:Offline
Host: fachowe-remonty.com
Date added:2019-02-26 09:30:56 UTC
Last online:2019-02-27 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Blocked
Reporter:Anonymous
Abuse complaint sent (?): Yes (2019-02-26 09:32:36 UTC to abuse{at}home[dot]pl)
Takedown time:1 day, 2 hours, 4 minutes Poor (down since 2019-02-27 11:36:57 UTC)
Tags:RUS Troldesh link zipped-JS

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-02-27n/azip 02bbd03cca80776a9b20be66b725176eca91270541ffd9b56d5c2e1a4c11017cn/a 
2019-02-27n/azip 8ffab19e977abd237ad1f5d6db014f707a53dac961406b2a8a366d163634d4f5n/a 
2019-02-27n/azip 90c41bc34cec2841d9edda2038d074bc8149d74af8c7168e3cbca91bfef9d643n/a 
2019-02-26n/azip 84143e37bc9b41091a774a592d5a5c07f3445d7620723ee029469dcd00950d22n/a 
2019-02-26n/azip 032dc93c685e11fa17bdb09b737b17da1cd33e253f28dea120ed49e439ff49fbn/a 
2019-02-26n/azip 222b52adeab85449fde79e3bd76d78ded73f8d10d995b8acd66850f8e4776543Virustotal results 29.31% 
2019-02-26n/azip 9cf283e6d9d91234c28837d658996a004dabfd7241a0f2cbfb984545e43b2b06n/a 
2019-02-26n/azip 8d8165a00b3634f37de6f5c01b45b0b6bf22a5838e9f5c22d44307a7a0ca02c7n/a 
2019-02-26n/azip e4aa68a8bf4f7bd7948eeb6751eaaf6858cd73b687422ee97326ed9bec23ae6an/a