URLhaus Database

You are currently viewing the URLhaus database entry for http://108.62.118.31/hostads.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2149925
URL: http://108.62.118.31/hostads.exe
URL Status:Offline
Host: 108.62.118.31
Date added:2022-04-16 02:24:10 UTC
Last online:2022-04-16 08:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2022-04-16 02:25:07 UTC to abuse{at}us[dot]leaseweb[dot]com)
Takedown time:6 hours, 4 minutes Good (down since 2022-04-16 08:29:30 UTC)
Tags:32 DanaBot link exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-04-16n/aexe 173b82157a494d32d8f940491c83f91f118c124bc77bb62f91f95d98b98f8455n/a DanaBot
2022-04-16n/aexe 5ddd99e29124b4d53e2601159dac900506af9ecb753950adf336d1fa8b96d4ccn/a 
2022-04-16n/aexe cfb04c54f0c8648d9b43d05803f1816769fa8a37aff362141f939c001c361907n/aDanaBot
2022-04-16n/aexe 2650817e2703b15c7e6fbf4d4caace2066f50db88fc96862190c4daf32d186e7n/aDanaBot
2022-04-16n/aexe b40e6537a52981f980ab811a63c1c8bb751d5ddc5b64668a342dddf24bcbeb94Virustotal results 32.86%DanaBot