URLhaus Database

You are currently viewing the URLhaus database entry for http://103.153.77.78/__cloud88save/vbc.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2071266
URL: http://103.153.77.78/__cloud88save/vbc.exe
URL Status:Offline
Host: 103.153.77.78
Date added:2022-03-02 18:59:06 UTC
Last online:2022-03-04 00:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2022-03-02 19:00:09 UTC to abuse{at}vnn[dot]vn,abuse{at}vdc[dot]com[dot]vn)
Takedown time:1 day, 5 hours, 12 minutes Poor (down since 2022-03-04 00:12:12 UTC)
Tags:exe Formbook link opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-03n/aexe 78c5b80e5c2e95405901d353a169d19c5fd03014681fc3768ef13e42a78c5467n/a Formbook
2022-03-03n/aexe 08718d3ca66bdc26647e8e664986e5cab713024776c5752d24ff1a737b846595n/a Formbook
2022-03-03n/aexe 7a92ff14c89c1941fbd29d4ecaa2a66bc7b8b2c0f89fdead79aa11036fd9f4d3n/a Formbook
2022-03-03n/aexe 63c80143bd1a7a36db27eb99762a5ca125a087995185ba5d583859e1bd93c62fn/aFormbook
2022-03-02n/aexe 7bd7078e492274101be1289e00a8c17c84a33a836257fe5038149d9e7ab3564eVirustotal results 41.43%Formbook