URLhaus Database

You are currently viewing the URLhaus database entry for http://91.121.235.127/new/bb.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2071299
URL: http://91.121.235.127/new/bb.exe
URL Status:Offline
Host: 91.121.235.127
Date added:2022-03-02 19:12:03 UTC
Last online:2022-03-09 17:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2022-03-02 19:13:06 UTC to abuse{at}ovh[dot]net)
Takedown time:6 days, 22 hours, 23 minutes Bad (down since 2022-03-09 17:36:49 UTC)
Tags:exe Formbook link opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-08n/aexe 7bcbf56053c133b1e92640bbd6ba32fc7bfcb202e4e0867b67518a75293c5d03n/aFormbook
2022-03-07n/aexe 72e08d0769edfe48701e4062646bba120a9bdc02a9f0d9e85997fefcdff7503en/aFormbook
2022-03-07n/aexe 364a65622f9ab68618b6c02c0145ffcfbff81f9c12cf7e9718975b1e1196c8fan/a Formbook
2022-03-07n/aexe ca4eb95f12fcda56c69500770b84ee5719a88bf1fda06a8bcf9536ffc1440c8cn/a Formbook
2022-03-07n/aexe 9a91373525f37ef83077dd61a265961697d27cda2d8e9027b9a894b7cb2b9e92n/a Formbook
2022-03-05n/aexe b134ea31888ab5ab523e7aa34ce702c461b24cfc22abb2ae8946d0b4e1621ed0n/aFormbook
2022-03-05n/aexe 04f02788e4ea8c82ee19b5205a7fb91dab83590d9290ed21b2bb2e00a2a18162n/aFormbook
2022-03-04n/aexe 2eaed26372d31a289db21c2dc6f82a9b6c3742e1c072bd7eab68c1774e2e847dn/aFormbook
2022-03-04n/aexe 0389b2ed0501439fc18ad9ee1234d0b2ec06dc0818a1abf7c0322958a7329f1en/a Formbook
2022-03-04n/aexe 0581160998be30f79bd9a0925a01b0ebc4cb94265dfa7f8da1e2839bf0f1e426Virustotal results 0.00% 
2022-03-02n/aexe 65ae1f1e2a2f90253d2e2a241514f2dfc3b5570f2ecf3df750281dca01879c7eVirustotal results 30.00%Formbook