URLhaus Database

You are currently viewing the URLhaus database entry for http://sagami-suisan.com/wpBK/msg.jpg which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:148090
URL: http://sagami-suisan.com/wpBK/msg.jpg
URL Status:Offline
Host: sagami-suisan.com
Date added:2019-02-26 21:05:02 UTC
Last online:2019-03-13 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2019-02-26 21:06:08 UTC to hostmaster{at}nic[dot]ad[dot]jp)
Takedown time:14 days, 11 hours, 51 minutes Bad (down since 2019-03-13 08:57:29 UTC)
Tags:exe Ransomware Troldesh link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-03-04n/aexe 400295a3f7672579a747ee9d78dd601e023d1d5fffef4358d1473b82eac6cd92n/a Ransomware.Troldesh
2019-03-04n/aexe 70bedd8eddd7b0a1d49fdfe8ab46e1f95b3d62c54432b29c9ed7a6f03884902an/a Ransomware.Troldesh
2019-03-04n/aexe df4a138c802d091e14fa70817b569b2c9a242350f89adabc5677cc605bd342c5Virustotal results 17.46% Ransomware.Troldesh
2019-03-04n/aexe a1271c366e91dbc3a7f0d6b4b2c1873019056786219c14ad12185ad115771632n/a Ransomware.Troldesh
2019-03-04n/aexe 9fd117a49c72a3a351a8ebdb81b4a4d112884fc2fcf2506910c3e353f4237f8dn/a Ransomware.Troldesh
2019-03-01n/aexe 391a3defc2f9ec2de3e163e6f5655e5580d8390bcc156075b6fbc7caefe131e0n/a Ransomware.Troldesh
2019-03-01n/aexe 80febde88e93687893fee2cc8f25b95873a6c7ea673f2cd13fa0bbbab5f7d4dfVirustotal results 24.19% Ransomware.Troldesh
2019-02-28n/aexe 5013dc9e2ddbe9ddd90af638466379f876b70ebe504d62e72ed166480a4d4f83n/a Ransomware.Troldesh
2019-02-27n/aunknown d7931e0573af3f962f7e10ee48996ddf33b3491a99da031a67426825a8c2d62cn/a Ransomware.Troldesh
2019-02-26n/aexe 73c904d658efa66370dfe8ec83a39c3038343b03e5509fa3280c85bd76790b32Virustotal results 26.09% Ransomware.Troldesh