URLhaus Database

You are currently viewing the URLhaus database entry for http://host-file-host9.com/files/2876_1637671333_8896.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:1809827
URL: http://host-file-host9.com/files/2876_1637671333_8896.exe
URL Status:Offline
Host: host-file-host9.com
Date added:2021-11-23 18:00:06 UTC
Last online:2021-11-30 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2021-11-30 14:19:03 UTC to noc{at}baxet[dot]ru)
Takedown time:6 days, 21 hours, 27 minutes Bad (down since 2021-11-30 15:28:21 UTC)
Tags:exe RedLineStealer link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2021-11-28n/aexe 7af8dfff989e93cecb80f229135edb9a3915fb345d5b3a45df2eedd49066ef55n/a 
2021-11-28n/aexe 1e74d4c4c18b0d1144c1c36dcc28f9b9020db5043b04a5a4ac3c24046e4da89bn/a 
2021-11-28n/aexe 1393e8a3dd071111a173a376deae8f0a43f84639d8838a41e73cb1e2705b30a3n/a 
2021-11-27n/aexe 5747e4d11faefe42da85b9bdb3ec9280d52be110d189616a394c940e32d90780n/a 
2021-11-27n/aexe 1c47908082bd2a1f555dfeec2d1142bb6f70ca90adb90c2a75aedefa24f9003en/a 
2021-11-27n/aexe eed39323eb5932b0a7abea605637d659b0d50f4495e6079ec69d597face9fb95n/a 
2021-11-27n/aexe 35eaa81130ebc5870568935d39dc72db949e447a832acb1ad67b2f1c1f65902dn/a 
2021-11-25n/aexe e5e3915ec00f532caff19804739403415b2a4c55f325e60292eefc37bb78c5d4n/a 
2021-11-25n/aexe 8e8f77903e79c3b77bca6085277b4b1ab164bba8269293ece169b158ca15e9ddn/a RedLineStealer
2021-11-25n/aexe 622d6cc6ab97bb9a3e45607b89dc8565e12e2d73e27172cb76460dab11767c6dn/a 
2021-11-25n/aexe f041e0e23cca8b398b355a47377d4472f66de715ab8e2d48dde58d27e3b116f0n/a 
2021-11-25n/aexe 737146096beec9e02ab7369ad071d1ff6a0a3dbaa5e27371b796314ca308a295n/a RedLineStealer
2021-11-25n/aexe 9d4a921273bf652dff17c6497ba944053f50fe7ca79c154351904228f5d7c263n/a RedLineStealer
2021-11-23n/aexe 9f25264d954d82b3ef3dd1ab336bd7dad2ca7132b90c20128de327e1fb02f9cfVirustotal results 24.19%RedLineStealer