URLhaus Database

You are currently viewing the URLhaus database entry for http://193.142.59.152/wp-blog/pics/nbfile.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1577094
URL: http://193.142.59.152/wp-blog/pics/nbfile.exe
URL Status:Offline
Host: 193.142.59.152
Date added:2021-08-30 08:40:03 UTC
Last online:2021-08-31 05:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-08-30 08:41:02 UTC to abuse{at}hostshield[dot]net)
Takedown time:20 hours, 40 minutes Good (down since 2021-08-31 05:21:56 UTC)
Tags:32 exe RaccoonStealer link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-08-30n/aexe 3bc47d4589eb3794742c4e76bbbf869f3c81c78482fcad92efffd5c03044b9a4n/aRaccoonStealer
2021-08-30n/aexe a8e17e50ed79099367282e36eaab695483f1be3dbd94a478f5a7ab020512df1cn/aRaccoonStealer
2021-08-30n/aexe 3cf104c27b5007b0fe8c8fad732edffe08789ab9235a8b8491694c7c4317f8c0n/aRaccoonStealer
2021-08-30n/aexe da0985789b0077b3988e868e9fbf85f46b61451b4a4edc138c0ca419cf9acf68n/aRaccoonStealer
2021-08-30n/aexe d3a5b777c6bf05953b2aecb511a605e268a5de26659d1b044fc03cc5700e2e09Virustotal results 44.12%RaccoonStealer
2021-08-30n/aexe 0402179d19f4016e6c1788d1f65f44b180a6abbe1dd151f785a9bfd77588057aVirustotal results 34.33%RaccoonStealer