URLhaus Database

You are currently viewing the URLhaus database entry for http://208.67.105.179/oluwazx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2259320
URL: http://208.67.105.179/oluwazx.exe
URL Status:Offline
Host: 208.67.105.179
Date added:2022-07-20 13:51:04 UTC
Last online:2023-01-19 16:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2022-07-20 13:52:05 UTC to info{at}serverion[dot]com)
Takedown time:6 months, 3 days, 3 hours, 5 minutes Bad (down since 2023-01-19 16:57:59 UTC)
Tags:32 exe Formbook link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-08-15n/aexe b6ccf5b8aaa04d50be27a3328039465e65df1347f79f44d9e952014a967b9cf8n/a 
2022-08-10n/aexe 3f0c88460fec19fbaa01b6daf6af28accfd3c921ad007874594a4c9937550cefn/a 
2022-08-10n/aexe 46bbfe087bb81dd0b199bdb140282512d7eb65fa60abc01d460f83881d3beb15n/aFormbook
2022-08-10n/aexe 684780ecc4471b543c5336bac78377d4749d35ac5c46432b5e3ae2fa43a2a40an/a 
2022-07-20n/aexe 73a8edb10431e28b5accb188cfc72d781112cc710b0b5fe80e1a913bc6022030Virustotal results 34.29%Formbook