URLhaus Database

You are currently viewing the URLhaus database entry for http://bomx.xyz/assadzx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1518998
URL: http://bomx.xyz/assadzx.exe
URL Status:Offline
Host: bomx.xyz
Date added:2021-08-09 11:40:04 UTC
Last online:2021-08-11 10:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-08-09 11:41:03 UTC to abuse{at}serverion[dot]com)
Takedown time:1 day, 23 hours, 1 minutes Poor (down since 2021-08-11 10:42:46 UTC)
Tags:32 exe SnakeKeylogger link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-08-11n/aexe 474f66d3344f0a29d6484ab7de9e11e6a293a5d5c719508c91b9bc7d673ce545n/aSnakeKeylogger
2021-08-10n/aexe 334573b5d45dae9447050cc038264568ae3309ee64904d11ebeffeba2027cc53n/aSnakeKeylogger
2021-08-10n/aexe 2f884ea5e0db8834637e6a97e1a3835d6b205f084b482a15c618989d777a1231n/aSnakeKeylogger
2021-08-09n/aexe aacc4ffd4879c92125c613f8a8abd7ab81789581d2305e162efbca3ce23ac180Virustotal results 29.41%SnakeKeylogger