URLhaus Database

You are currently viewing the URLhaus database entry for http://bs-forum.com/pub3.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1715225
URL: http://bs-forum.com/pub3.exe
URL Status:Offline
Host: bs-forum.com
Date added:2021-10-26 09:36:21 UTC
Last online:2021-10-26 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: benkow_
Abuse complaint sent (?): Yes (2021-10-26 09:37:08 UTC to abusemail{at}contell[dot]ru)
Takedown time:10 hours, 5 minutes Good (down since 2021-10-26 19:42:38 UTC)
Tags:exe RedLineStealer link Smoke Loader link smokeloader link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-10-26n/aexe 8577213832eecf00f77003ddf49fb6630af4906b10b350f9dd88a899d9720a98n/aSmoke Loader
2021-10-26n/aexe 191e78371c86b9985b98712cd56c985ab9f1e4e678ae703995e0b15dd690f970n/a RedLineStealer
2021-10-26n/aexe aa623d934b75fe56b08d2fd34b3027cf76a888512e08a9dd7402a2bcee401958n/a RedLineStealer
2021-10-26n/aexe a8445ad207972262f1f77543a9619b3255e99e9207f05dbe4dc78e6823ff26dcn/a RedLineStealer
2021-10-26n/aexe 11a3c2f9bfa57c07f1a8fd8afe0071f775ccde87e3abdfb5f8f06caf3d18435fn/a RedLineStealer
2021-10-26n/aexe dbd6371e98b399d3bb27f8b822a1b2f588036b158922e29c40c70b7712282e97n/a Smoke Loader
2021-10-26n/aexe 09887a106b5bbd343d36559f9b3cb403a80c1d7c849630cea84e4bf2e5fab7ffn/a Smoke Loader
2021-10-26n/aexe 7a058c3bcbc137bd33b888b48e0a465aa14a908ef8fa69ce9c1731dd477d5768n/a RedLineStealer
2021-10-26n/aexe 55be4d57bbf956b6575bb81e90145321da60cf4c13879f6160505a5f638e1f97n/a RedLineStealer
2021-10-26n/aexe 6852f6a45606c34709a3713cf67836e53b44fb5832f6c94a94c74e80575706c4n/a Smoke Loader
2021-10-26n/aexe 97247f56010511a82492c3febbc0a1f2cbb0dae097178b76331373ed908a3434n/aSmoke Loader
2021-10-26n/aexe c2627a1344d6b428c0f47f4695c0fd7df2d8040015595ff5d149b81bebeae5a5n/aSmoke Loader
2021-10-26n/aexe 29cc5c140effd19120124fa46d42b27c474af45b8e31ee2de85ca9d18eed097an/aSmoke Loader
2021-10-26n/aexe 0c234eb09ebee0e484dca3d0f6bf3072843b89527ecd6cfa4680eb27f0b8f032n/aSmoke Loader
2021-10-26n/aexe 1581f37ce254b6ae489d3119533e69408d6236933cd2d3036f24500c6e03dcfan/a Smoke Loader
2021-10-26n/aexe 649c27ade517aa8c4a85d43cb8f5b40b8543c0305bc110eedb08dc70ec758738n/aSmoke Loader
2021-10-26n/aexe 93929f6eebae9f8d20b1807b0d49bd983d51ebd5b223bcefb8cfb1350906cba8n/aSmoke Loader