URLhaus Database

You are currently viewing the URLhaus database entry for http://103.125.190.6/explorer90/dllhost.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	1705801
URL:	http://103.125.190.6/explorer90/dllhost.exe
URL Status:	Offline
Host:	103.125.190.6
Date added:	2021-10-21 18:13:06 UTC
Last online:	2021-10-24 21:XX:XX UTC
Threat:	Malware download
Reporter:	abuse_ch
Abuse complaint sent (?):	Yes (2021-10-21 18:14:12 UTC to abuse{at}vnn[dot]vn,abuse{at}vdc[dot]com[dot]vn)
Takedown time:	3 days, 3 hours, 27 minutes (down since 2021-10-24 21:41:25 UTC)
Tags:	exe Formbook opendir

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2021-10-23	n/a	exe	0366673a2a85919a9419b85f9f552a2c9713edda8319dc9046f271ee024816ad	n/a	Formbook
2021-10-22	n/a	exe	d9db7f117e5fc750e78b0178003bca82684a2a36f951fa0d3a59a58bd178a302	n/a
2021-10-22	n/a	exe	7b5e02a2a7012cbdb1e2588740896860081c0044da0cc697db7839ae8d5d6a8e	n/a
2021-10-22	n/a	exe	2d21e970df7a629322de2c466d276d3a36f5bc742800459a76a12a7d71575f88	n/a	Formbook
2021-10-21	n/a	exe	3c4aa39e200cb4303a3e5970bbedb5a1bb1baa656c3fc2286f82392a91e4a4ea	n/a	Formbook