URLhaus Database

You are currently viewing the URLhaus database entry for http://222.211.72.29:35641/bjd.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	1814205
URL:	http://222.211.72.29:35641/bjd.exe
URL Status:	Offline
Host:	222.211.72.29
Date added:	2021-11-24 21:50:06 UTC
Last online:	2021-11-27 16:XX:XX UTC
Threat:	Malware download
Reporter:	zbetcheckin
Abuse complaint sent (?):	Yes (2021-11-26 05:12:05 UTC to anti-spam{at}ns[dot]chinanet[dot]cn[dot]net)
Takedown time:	2 months, 4 days, 10 hours, 29 minutes (down since 2022-01-28 08:20:40 UTC)
Tags:	exe Gh0stRAT

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2022-01-04	bjd.exe	exe	8d69aa842c3f6828f6ba7c200ed6e67a04329a301843ae6653afa2869ccda6b0	83.82%	Gh0stRAT
2021-12-02	bjd.exe	exe	ea5e1ff5ef06f841a7b995a045836797837ad28f14b7c508c4eed872cafe64c2	n/a
2021-12-01	bjd.exe	exe	8c9407d653787d0d3dc4a7b67bbdba0554f7f737987f00bfa2fc82b49cb14963	n/a
2021-12-01	bjd.exe	exe	a38a296164d87d133952be1dcdfe8eb3fc038d003653f5476c6577daca6f2e70	n/a
2021-12-01	bjd.exe	exe	8e762987ae14eeb4a5adb59e63c3b5a288162b45da0314d02ca18190f3d75f77	n/a
2021-12-01	bjd.exe	exe	3932aa428e2b3ba829733ff447943f37dd4bc00e60a1e217432e9f960b0f5b11	n/a
2021-11-24	bjd.exe	exe	4b4c466ee72c0d623339564402175b47d68189d129bc9c3e61d0a8a504265acc	80.60%	Gh0stRAT