URLhaus Database

You are currently viewing the URLhaus database entry for http://retracker.host/rvn.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1584839
URL: http://retracker.host/rvn.exe
URL Status:Offline
Host: retracker.host
Date added:2021-09-02 01:58:03 UTC
Last online:2022-01-10 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2022-01-10 22:20:09 UTC to abuse{at}cloudflare[dot]com)
Takedown time:4 months, 10 days, 20 hours, 21 minutes Bad (down since 2022-01-10 22:20:03 UTC)
Tags:CoinMiner exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-01-10n/aexe da7e905708586e76fa467923e8427a08b75027c5f7e2d7b7bec5d3e275b62489n/a 
2022-01-09n/aexe 85c893e564c961433f2c37609bff04390de3cddcb11d3e3e58cb7640711be7fcn/a 
2021-12-15n/aexe ed8e07379458a04bf8a65da9cb4d3fa7de2db16469f821795316bdb08b4dd71dn/a 
2021-12-14n/aexe df621fdd28d1857350102547b4fa0fdb6bc47d04c37b8d69968c0b41b45d8c34n/a 
2021-12-06n/aexe 12673fbfd6944349b6728438af2e0f091ee9641cf74c728cc6041707d32d2da2n/a 
2021-11-10n/aexe 1b675f560912f81f703d2037fa6d20360ed66db71f66865bae66ec8099a45eb6n/a 
2021-11-10n/aexe 7ed79e9b7c60152c2f0e4f8a0989a7f0c62ec88e0116175d4b6b36a709bf6490n/a 
2021-11-10n/aexe d1b8de764f5d4717a1effc094ff3cb040f31eb0cfadac82c327077d9bd7d35e8n/a 
2021-11-10n/aexe b82a9c29a8dad7cd674e7edf3282a0d85960fbd42a587bfcb21c728e35d263b4n/a 
2021-11-09n/aexe ae7dd486d3dd656f3d4c8060a35209b895067aa2f8edb211bbd06d82e3306596Virustotal results 18.18% 
2021-09-02n/aexe 99a4483312a49933b40f2ce227cdc2a820a595eb465bc488a97e5e59fd94843eVirustotal results 58.82%CoinMiner