URLhaus Database

You are currently viewing the URLhaus database entry for http://198.12.91.134/win/vbc.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1489223
URL: http://198.12.91.134/win/vbc.exe
URL Status:Offline
Host: 198.12.91.134
Date added:2021-07-29 06:16:04 UTC
Last online:2021-08-09 08:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2021-07-29 06:17:02 UTC to abuse{at}colocrossing[dot]com)
Takedown time:11 days, 2 hours, 35 minutes Bad (down since 2021-08-09 08:52:10 UTC)
Tags:exe GuLoader link LimeRAT opendir rat

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-08-03n/aexe 6f40242247db00eea1922d0c2a38337ddea49d9da02693679d2e4bfb19e6c088n/aGuLoader
2021-08-02n/aexe c0d3da1cefd1a979c8b8ce102fd5d3ff090779f72f4d1098eb383cbbb3480been/aGuLoader
2021-08-02n/aexe d32cf33f8f64824f799ca44e9988ddc517e88db1235f93792d3ed2ddaa48e35fn/aGuLoader
2021-08-02n/aexe 55fd5769df0df23d4140a34d07dc2c833b43ac1060f4d0992bdd27316041c69an/aGuLoader
2021-08-02n/aexe f06e4c96e86c0f36c82d38de0627c0b81995656c4dcbc136c0fedda868ed8ea0n/aGuLoader
2021-08-02n/aexe f2d2638afb528c7476c9ee8e83ddb20e686b0b05f53f2f966fd9eb962427f8aaVirustotal results 0.00%
2021-07-29n/aexe 7d900c842228164a450c070b49db71709f73aab97f548167e79742f505e2edc7n/aLimeRAT
2021-07-29n/aexe 53684bdcc56108ddbdcb9533411b44ec0eac752858a65129bbaef23fba530053n/aLimeRAT