URLhaus Database

You are currently viewing the URLhaus database entry for http://tg8.cllgxx.com/hp8/g1/rtst1077.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2202463
URL: http://tg8.cllgxx.com/hp8/g1/rtst1077.exe
URL Status:Offline
Host: tg8.cllgxx.com
Date added:2022-05-19 13:51:22 UTC
Last online:2022-09-08 09:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2022-05-19 13:52:21 UTC to abuse{at}scalabledns[dot]com)
Takedown time:3 months, 21 days, 20 hours, 7 minutes Bad (down since 2022-09-08 09:59:58 UTC)
Tags:exe fabookie

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-09-06n/aexe 8028cb06a9ba657f0579ca30c303316102b0ee122932c617e2b3f322f7036466n/a Fabookie
2022-09-05n/aexe 9ff1b5d7f891691be5790285f6023eae5d450771e6d68bf775b8936b10944ffan/a Fabookie
2022-09-04n/aexe bd10c3f4ec0b78d2d38b2592c9e028b3b1634c86b345a0c5af0c4f72f37713fcn/a Fabookie
2022-09-02n/aexe c18f93be61a80bf0679a70759fa81437dafa2c0dfcd504da955ff455a9a5f437n/a Fabookie
2022-09-01n/aexe a7017f99e4ac5323877f881cfe12787fc3f140a35fcf507c9de94368936430b5n/a Fabookie
2022-08-31n/aexe 0318fff5d503be7be66e602f7323676feac5d13e30ae88bfb3247e34e23f1f2bn/a Fabookie
2022-08-30n/aexe 524faed148c7d981bf7c79f234ef968be87ab50502ce6c51152c961322abf115n/a Fabookie
2022-08-29n/aexe bfcd2e65acc13c9a97f45c6d2feb870d9e13d0160e26d319f30b395e3452bf12n/a Fabookie
2022-08-28n/aexe 6edab5d6c2783655148b2820a0a1f7015ba779ebf4f16e8a1a525958bf2e4322n/a Fabookie
2022-08-27n/aexe 27dac924212dce5aaadbcdf456d1367055a1d09add389d08602541501309f9dfn/a Fabookie
2022-08-24n/aexe bd44c3900607b2500615048afa62377cfd46711d7d2a3d29dc7d447a5e8b6e67n/a Fabookie
2022-08-21n/aexe 6b11659854c8f5af95592a0e1ca5deef4a905c092a9114a9e45a873dcf5f654dn/a Fabookie
2022-08-16n/aexe dfb08493a6a9aec0e0229e2ae71423635f3f60fdf66315aff4f76d8a54c0d4a5n/a Fabookie
2022-08-15n/aexe 3f350bbc4a369d8c9778d9099309960492fffeda8ee980211a49d86ad4c9fee9n/a Fabookie
2022-08-13n/aexe 5eee959518156c4b0d5471ffa7ef6f4c9a5bb7be0872c577cfb529cae5043b2en/a Fabookie
2022-08-02n/aexe 4ddb71a5cfe398f2a961871112e304956d852f0d89bcc3ff121529899b927a52n/a Fabookie
2022-07-19n/aexe 469da81699b7ec19e8f54f74dafd213933825202f6d282eeeb43c0eee9c0f4afn/a Fabookie
2022-07-15n/aexe c8e4e15ab56293e0f7a2033600ff45b7dced43f8d1270d323b76b08742ce8626n/a Fabookie
2022-07-15n/aexe f957db170777aae3d0ead1c16980a012171c927b61ae5bdc1b32292c00185cb3n/a Fabookie
2022-07-14n/aexe 7399381194aea72fdbc246128dd9c67ad903d24cc471828c255d850df479a06bn/a Fabookie
2022-07-09n/aexe f69fb8ffb1b306f76dbbbba681d980d555e7698099d9e56956927912d650364en/a Fabookie
2022-06-28n/aexe 079237a24f83ba1a26347e8b16c013119f4597dadc7f04eee2becd27fc658cc1n/a Fabookie
2022-06-20n/aexe f43d9a5d4fe4c23b715f54ae483e884e1e7060147df82a8b3ceb2733fcb7a665n/a 
2022-06-13n/aexe 6f9ac17334a124e3d3598d6adadd8dbc9e6fe26bacf5811bb5d91803b0afb234n/a Fabookie
2022-06-06n/aexe ca80b4fc0484df786370bf2f9526d4eebe2660444a7b97f1f7185a83c3f80742n/a Fabookie
2022-05-30n/aexe ff9fb92db97de8798e62a24e3d4b488147f98ec275f80f7a640fbb2add2a7f09n/a Fabookie
2022-05-23n/aexe 38979d5caae2cdeef923e150863c99f26bb8d9638b8773d5b1c29a2dd092b018n/a Fabookie
2022-05-19n/aexe a8c4e0531d28c260bf642f8dae04024cb6f5ea92ab7291d30e8b61f3c9859777Virustotal results 40.30%Fabookie