URLhaus Database

You are currently viewing the URLhaus database entry for http://tool-api.elpix.de/files/msg.jpg which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:147615
URL: http://tool-api.elpix.de/files/msg.jpg
URL Status:Offline
Host: tool-api.elpix.de
Date added:2019-02-26 13:59:08 UTC
Last online:2019-04-27 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2019-02-26 14:00:07 UTC to abuse{at}tops[dot]net)
Takedown time:2 months, 0 days, 0 hours, 49 minutes Bad (down since 2019-04-27 14:49:24 UTC)
Tags:exe Troldesh link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-11n/aexe d90ec97536d204fb27b2804ff5a5e2f62db2e56727b0d871e95548e2f41de41eVirustotal results 18.75% Ransomware.Troldesh
2019-03-11n/aexe 504e6455b92f3b343dc8e67318fe98b75e3d07d968f1ef43a81cdf1abc370527n/a Ransomware.Troldesh
2019-03-06n/aexe 2710580e6191bfdd72494a6e00548c6a697ad2f88bccc3cc73fc1100b4e60782n/a Ransomware.Troldesh
2019-03-05n/aexe 388e56393ae6b4d2ad4c434721060000f6782c412aea274f3465757a114efe04n/a Ransomware.Troldesh
2019-03-05n/aexe 4d2b8abe7b2d79eb3cd44171a73a645d2d2370d64e51734208b7ef261b8e21ceVirustotal results 22.73% Ransomware.Troldesh
2019-03-04n/aexe 400295a3f7672579a747ee9d78dd601e023d1d5fffef4358d1473b82eac6cd92n/a Ransomware.Troldesh
2019-03-04n/aexe 70bedd8eddd7b0a1d49fdfe8ab46e1f95b3d62c54432b29c9ed7a6f03884902an/a Ransomware.Troldesh
2019-03-04n/aexe df4a138c802d091e14fa70817b569b2c9a242350f89adabc5677cc605bd342c5Virustotal results 17.46% Ransomware.Troldesh
2019-03-04n/aexe a1271c366e91dbc3a7f0d6b4b2c1873019056786219c14ad12185ad115771632n/a Ransomware.Troldesh
2019-03-04n/aexe 9fd117a49c72a3a351a8ebdb81b4a4d112884fc2fcf2506910c3e353f4237f8dn/a Ransomware.Troldesh
2019-02-26n/aexe 701d3db21920f78b8ed2eb6b4286f858277928f50d567c9c6594bd1971e9c07eVirustotal results 30.77%Ransomware.Troldesh