URLhaus Database

You are currently viewing the URLhaus database entry for http://107.172.93.57/400/vbc.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2186979
URL: http://107.172.93.57/400/vbc.exe
URL Status:Offline
Host: 107.172.93.57
Date added:2022-05-09 14:33:04 UTC
Last online:2022-06-05 15:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2022-05-09 14:34:06 UTC to abuse{at}colocrossing[dot]com)
Takedown time:27 days, 0 hours, 28 minutes Bad (down since 2022-06-05 15:02:48 UTC)
Tags:exe Loki link opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-06-02n/aexe f2d2638afb528c7476c9ee8e83ddb20e686b0b05f53f2f966fd9eb962427f8aaVirustotal results 0.00%
2022-05-10n/aexe 8116cbb4df4ee4bb16670039400e53305fa7084b29463a8d541e308cfd0b7950n/aLoki
2022-05-10n/aexe 493fec71a20becefae761219d18fd3b3c63c5d6ed7c3a998e97a1a1b3c1511e4n/aLoki
2022-05-10n/aexe 7c79a61d6bc2a13c372c68567ea0cb7162cc9a6ca9285abe9def70255490f653n/aLoki
2022-05-09n/aexe 4fdc3536cb342008ee5a453f308afafc8a34d005b3883ede76eb746356213d97n/aLoki
2022-05-09n/aexe 1492c0e4ee79d6417b749a82c453357ea8a072aaa87ca6184b4d6a33920cb7fen/aLoki