URLhaus Database

You are currently viewing the URLhaus database entry for http://193.233.48.64:20001/bot/cache/57994709.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2071982
URL: http://193.233.48.64:20001/bot/cache/57994709.exe
URL Status:Offline
Host: 193.233.48.64
Date added:2022-03-03 03:29:05 UTC
Last online:2022-03-19 20:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2022-03-03 03:30:07 UTC to noc{at}baxet[dot]ru)
Takedown time:16 days, 16 hours, 57 minutes Bad (down since 2022-03-19 20:27:07 UTC)
Tags:32 ArkeiStealer link exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-11n/aexe 8860ea573d5feae4a267aaa8cb8bf8c47f9c2c50e18ab3fc73d785afc89516ccn/a ArkeiStealer
2022-03-10n/aexe e46ffbc8a86c14827324c36f26ef2fd865027135b0d985161d9b81845ab33b73n/a ArkeiStealer
2022-03-08n/aexe 5344dfd605a4ef3e28022fdadfc1f4ecb99c94371238244f78ae2b9e3f15b515n/a ArkeiStealer
2022-03-03n/aexe dfa11feceee8ccba3c361bd547626842b812f95a509f5e8131a31e78a324abd2n/a ArkeiStealer
2022-03-03n/aexe 33ac0ea43c425209053f9360bd243e68deca0eb5cb4e638c6da557eb36f78935Virustotal results 42.25%ArkeiStealer