URLhaus Database

You are currently viewing the URLhaus database entry for http://54.169.166.69/list/list.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1631109
URL: http://54.169.166.69/list/list.exe
URL Status:Offline
Host: 54.169.166.69
Date added:2021-09-18 19:25:05 UTC
Last online:2021-09-22 16:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-09-18 19:26:04 UTC to abuse{at}amazonaws[dot]com)
Takedown time:3 days, 21 hours, 16 minutes Bad (down since 2021-09-22 16:42:05 UTC)
Tags:32 exe Formbook link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-09-22n/aexe b438197380888791997705ce5dfb8eadc354f559f9ec8f00629c9ef56b7589d1n/aFormbook
2021-09-21n/aexe e911d332af82b2e6fe66b7d2df23b5a9ba0443ea8f83500ae17c6af1f65d401bVirustotal results 20.90%Formbook
2021-09-20n/aexe 6a031ff99c704ce956ff83791f0face2196fef52ee2672d860dce78e917b8f77n/aFormbook
2021-09-20n/aexe 7ed2e1a088d8af23bee0d7b23fe435a181f597991cebfffbcc1ed43f31198f87Virustotal results 8.47%Formbook
2021-09-20n/aexe 16e9e1b6560d4566dc705cf7504391ae585affc16a7cd70fc8c881e25eb230d4Virustotal results 22.06%Formbook
2021-09-19n/aexe bb913402040958a639d6c22b1df958de0aa304d51c00eb5aaa106077edb85310Virustotal results 20.59%Formbook
2021-09-18n/aexe 9e5d79a5c4d56511b27b25b7c4ddb73e8c10c15168676b90291b8ba66a6239c4Virustotal results 30.43%Formbook