URLhaus Database

You are currently viewing the URLhaus database entry for http://marnersstyler.ug/asdf.EXE which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2202207
URL: http://marnersstyler.ug/asdf.EXE
URL Status:Offline
Host: marnersstyler.ug
Date added:2022-05-19 11:08:04 UTC
Last online:2022-08-19 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2022-08-18 22:06:04 UTC to info{at}kanzas[dot]msk[dot]ru)
Takedown time:7 months, 2 days, 8 hours, 45 minutes Bad (down since 2022-12-17 19:54:57 UTC)
Tags:AZORult link exe RecordBreaker link RemcosRAT link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-16n/aexe 4fe0e155f51fd5a1233deb5983f8c7e8d66e50c53794d3d23b7bbd0e9a26b184n/a 
2022-10-06n/aexe 599fa7fc07b1b8265ea936ce641733fcec03eb0fe8cc4822e5a752b6629e216en/aRecordBreaker
2022-10-01n/aexe 8e2d87f5f34b7764e66644f831467e469dcc18a30a17d02252880851f560783dn/a 
2022-09-16n/aexe 60e6da1143cb32a41ecc76952d3b4ae8a8910b790973473e61fc2eb147704af7n/aRecordBreaker
2022-08-18n/aexe 04fb5a1f6082a09a55bec26e0748918da0d1007e2a43c70723dc79cc7c413079Virustotal results 52.11%AZORult
2022-08-14n/aexe d81620ec69feb5e745b23dacc25b874cef4db7b0daeaefbdb739300838f4d343n/a RecordBreaker
2022-07-10n/aexe 28455b1a0b29240e95877cff96528b3a196f0cf3a63d9980dc70349cdc0e1e74n/a RemcosRAT
2022-06-25n/aexe 79103532395036c14b755d90f9cacfdec6b588f1b031a7cba936c1b9d2ef3b51n/aRecordBreaker
2022-06-20n/aexe 529586cbbd8586d7f33a3ea9bdd517b7ead617b4e12165106e81e4bfad859474Virustotal results 60.32%RecordBreaker
2022-05-28n/aexe 672fea64c92edc4d937d3132577b65813738bfddeab6a6b3ef35e6fa4b987009n/aAZORult
2022-05-19n/aexe df4876573295b4e7beb618db31a015ea617f61b811978bb168d432c4052f7731Virustotal results 75.36%AZORult