URLhaus Database

You are currently viewing the URLhaus database entry for http://ddl8.data.hu/get/201266/13240020/Bfhk.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2115112
URL: http://ddl8.data.hu/get/201266/13240020/Bfhk.exe
URL Status:Offline
Host: ddl8.data.hu
Date added:2022-03-25 11:05:41 UTC
Last online:2022-03-25 12:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2022-03-25 11:06:11 UTC to abuse{at}telekom[dot]hu)
Takedown time:10 months, 1 days, 23 hours, 4 minutes Bad (down since 2023-01-21 10:10:33 UTC)
Tags:bitrat link exe rat

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-04-23Bfhk.exeexe 2eb7ce7820ba85785970f8b68924c74fe7a1854d429c6a101c0ea3aff23481b4n/aBitRAT
2022-04-23Bfhk.exeexe 57697d221220dadafac621db5e0a41c30d22a8946d175bf3ffdfb34cc961e06dn/a 
2022-03-25Bfhk.exeexe 3d58c755f0efeca62d97434a48be98578a3843bee4183a35854a80c3db62c426Virustotal results 50.72%BitRAT