URLhaus Database

You are currently viewing the URLhaus database entry for http://diavyu07.top/downfiles/lv.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1641940
URL: http://diavyu07.top/downfiles/lv.exe
URL Status:Offline
Host: diavyu07.top
Date added:2021-09-24 06:14:09 UTC
Last online:2021-09-27 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: Cryptolaemus1
Abuse complaint sent (?): Yes (2021-09-24 06:15:05 UTC to audit{at}ihor-hosting[dot]ru)
Takedown time:3 days, 1 hours, 14 minutes Bad (down since 2021-09-27 07:29:15 UTC)
Tags:DanaBot link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-09-24n/aexe c70065fd9c7c6c59e0c27ad699f46466e8e1c261a89a689237ee51995868af2fn/aDanaBot
2021-09-24n/aexe 5f377b98e0249019768632cbb967d9a4a678059ff13b9420d207c4ce2aa3e497n/aDanaBot
2021-09-24n/aexe 27dafacac9139a5ff6c8d220b4d5882f2118a7b2cef742c58881f9d6c073269cn/aDanaBot