URLhaus Database

You are currently viewing the URLhaus database entry for http://91.209.70.174/Corona.sh4 which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:171875
URL: http://91.209.70.174/Corona.sh4
URL Status:Offline
Host: 91.209.70.174
Date added:2019-04-05 13:44:03 UTC
Last online:2019-12-01 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2019-04-05 13:46:02 UTC to alexx[dot]person{at}gmail[dot]com)
Takedown time:8 months, 0 days, 4 hours, 58 minutes Bad (down since 2019-12-01 18:44:35 UTC)
Tags:bashlite elf gafgyt link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-10-16n/aelf 2e7511928c2954b7d4b6e2646a95eec9bac0fabfb367037e59d082e403f30987n/a 
2019-09-26n/aelf 89f640ae12a2cfb76d36d4807ef3c815b1f1bdb67c7b3723b0f182bf4c6395dan/a 
2019-09-25n/aelf b605c1ad6164487415acb130d8ddedb379a272447ced9090461f204ddf37b8b1n/a 
2019-07-21n/aelf 72c590c1f3794c4adb3db79ea722385d2649587d56ca8fd544bff56c2891514fVirustotal results 35.09% 
2019-07-02n/aelf 4d36a1cd9bd7be69440f1ee55a7ad12bbc996ade7c6178ad43956a2a78fa4d35n/a 
2019-07-01n/aelf 7bedf2707ecd0a12686198603b09659f471591cf440f067c5e80cfd57299fbc1n/a 
2019-04-15n/aelf 68651378d22bd0eb77eeb8a63830a9740a78a092ec90fd2f144c3798940e151en/a 
2019-04-09n/aelf 6df41cf59cd698133017043e65acbd8f10880e24cf6eb263d56bfcca2d3f8bcen/a 
2019-04-05n/aelf 030ce2be9f441cec9f0ceb75104933cd0cf508d5b7b0aae8bf76726165f20a1aVirustotal results 18.97%