URLhaus Database

You are currently viewing the URLhaus database entry for http://host-file-host9.com/files/764_1637401684_7958.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1802207
URL: http://host-file-host9.com/files/764_1637401684_7958.exe
URL Status:Offline
Host: host-file-host9.com
Date added:2021-11-20 14:10:05 UTC
Last online:2021-11-30 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-11-30 14:19:03 UTC to noc{at}baxet[dot]ru)
Takedown time:10 days, 1 hours, 13 minutes Bad (down since 2021-11-30 15:24:35 UTC)
Tags:32 exe RedLineStealer link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-11-28n/aexe f38c0d0349de32f7e40da0c9b19b11b53b2be9e327e44a397d8c64a9632af9c2n/a 
2021-11-28n/aexe 13a84ea3f4bd74d48bb145bbaf754612a3c4c568fa32a76719fb396f6547b148n/a 
2021-11-28n/aexe ec85491133023c36feab39ac042630665a24faf21985160c28db8f5940716262n/a 
2021-11-27n/aexe c7d9b20fa2c37c7c5122566051156ac950c2e94a03fe9ca176c23d5e3a31d851n/a 
2021-11-27n/aexe cb6e468ce5b38364de57ae8ff47fd6a240772752f7f2290447ec8895bc2baac7n/a 
2021-11-26n/aexe ce2258dc7f7816cfaf5aec8d360452f35611a3e72a9d52b2afd14fb41815a1f5n/a RedLineStealer
2021-11-25n/aexe 69a4dcff821eac950609cf2aca754b9b6ed1a9e0502cf8b8a6bf17741d53b3f0n/a 
2021-11-25n/aexe 45df0bd186da8ead84c9d2c9507c608708156cb216e680483a368e1678dd2c72n/a 
2021-11-25n/aexe 899f040c1cb4878cd7c19d8bbb4a89e1cb81e689bc26f900fd51c960fb692860n/a 
2021-11-25n/aexe 741e80969d9741630347daef5caef30c0c6c85b91e184fd97867c5bf57960495n/a 
2021-11-25n/aexe ce73c71c89b5f09f7a6049ac143d3baa2b2b557b5e6ff7b4f1bbd3c43947a169n/a 
2021-11-25n/aexe f4c4df538a30e2cbd50f95b69475a2b8125ad10117edcce7453615bc1fcb5ddfn/a 
2021-11-25n/aexe 764a144879ff4e10f79dfdebcce347226018c959964a0a0f4b65df1f6caab4a0n/a 
2021-11-25n/aexe ca88bd1b99c6eb19395080d7c8cafe64740ea95007f39c01e8c322a699437659n/a 
2021-11-21n/aexe 27885b47bc7ffe10adff0cc9f855e12279959c73efcf4739b7dca27e93168e5fn/a
2021-11-21n/aexe b8fb87aef4f7b61523be843bd4f4ffe66a3a075724c5154f21292941dedc271cn/a
2021-11-20n/aexe 451b570a7464fabe22a1e96f448f43915bd9bb391ebfe1678968e8e35d6d29bfVirustotal results 40.30%RedLineStealer