URLhaus Database

You are currently viewing the URLhaus database entry for http://23.106.122.198/accid5db.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2076755
URL: http://23.106.122.198/accid5db.exe
URL Status:Offline
Host: 23.106.122.198
Date added:2022-03-04 22:21:11 UTC
Last online:2022-03-05 13:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2022-03-04 22:22:11 UTC to abuse{at}sg[dot]leaseweb[dot]com)
Takedown time:15 hours, 34 minutes Good (down since 2022-03-05 13:56:23 UTC)
Tags:32 DanaBot link exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-03-05n/aexe 0b4784972468b114e8fb957769af4aa76d1f050ef4913296f1a3c412afa5b49en/aDanaBot
2022-03-05n/aexe c025fab76e053df6abc1c6a5186920f5c34e2cd7d3a650998983dac479c8f4d8n/aDanaBot
2022-03-05n/aexe b7a5e33f49be015b0ae053167f2883fe4f4b487ea9989592b157e3280b97bd53n/aDanaBot
2022-03-05n/aexe 9ff6891ef4465e0a3ee08520c57c133ea47ea72c408c165d2aab578b007fadf9n/aDanaBot
2022-03-05n/aexe 90ac445f282c66552b08d176d123635537170009fa83988ce5011aef18ba5fb9n/aDanaBot
2022-03-05n/aexe 97a1dadc6e1ccaa807240649c63f175169b0badaf65be530e98ad7790d69fc1en/aDanaBot
2022-03-05n/aexe d5faba20007266314cf176b9e49ccbc35c3fd2b0982fcd73f7b5794539b42e89n/aDanaBot
2022-03-05n/aexe 7782973168ebc1e96e96c738cbf64cbe23075034e4ce06a03c5e0120615d855an/a 
2022-03-05n/aexe 73a5bdcf6304c9590aa5f859f1f901cc7c923ad835e911e7b1707c62f64e89f5n/a DanaBot
2022-03-04n/aexe 1079cfa2fab716c5fbac8431e83c3cea87eb3ed13dab386cb9dd90da38115cb1n/a 
2022-03-04n/aexe 576ddf77b8b7a0685f8619125f16bbaebd35b38caf08c5ef6ea19be5a080125bn/aDanaBot
2022-03-04n/aexe 0a73dc9afe941c483b9896ccd6ef0aa0012bbfc2c67029dd3471dc5902e9c9e0n/a