URLhaus Database

You are currently viewing the URLhaus database entry for http://107.175.218.12/m/fmv.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2186133
URL: http://107.175.218.12/m/fmv.exe
URL Status:Offline
Host: 107.175.218.12
Date added:2022-05-09 01:45:05 UTC
Last online:2022-05-30 06:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2022-05-09 01:46:06 UTC to abuse{at}colocrossing[dot]com)
Takedown time:21 days, 5 hours, 3 minutes Bad (down since 2022-05-30 06:49:40 UTC)
Tags:32 exe Formbook link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-05-10n/aexe 6524fb6e8bc4b9899da689754b08646d7d1c00187b63df52665b39dae5578b21n/aFormbook
2022-05-10n/aexe 32168efd2d3be2a5825ed55e428752af9da707bf5eb60aabea4654352e1a2f8cn/aFormbook
2022-05-09n/aexe 31b57c8bdc8e2a57aab3585b53904eb130fe155c96f095951eccec5a02a6451dn/aFormbook
2022-05-09n/aexe b675c1a510216f6acc1a5b67fd8861eb4ce7793af5a885e719c92fedf959f7b9n/aFormbook
2022-05-09n/aexe f3795e8438d78333d6c4636837c023dff79aeddbb8d981407bec9f5ba2dc8d0dn/aFormbook
2022-05-09n/aexe 7549b54cf11b85fd90163933c0ba384119890a3955ee26ea5fb7f5bf7267fdcdn/aFormbook
2022-05-09n/aexe 520f7cca2676f2ce7142e200ea8b52a4e441e59ab44778e513203c1f4429efe4Virustotal results 18.84%Formbook