URLhaus Database

You are currently viewing the URLhaus database entry for http://208.67.105.179/nwamazx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2265588
URL: http://208.67.105.179/nwamazx.exe
URL Status:Offline
Host: 208.67.105.179
Date added:2022-08-05 09:35:04 UTC
Last online:2023-03-08 21:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2022-08-05 09:36:06 UTC to abuse{at}serverion[dot]com)
Takedown time:7 months, 5 days, 12 hours, 14 minutes Bad (down since 2023-03-08 21:50:20 UTC)
Tags:32 exe Formbook link SnakeKeylogger link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-12-23n/aexe c88beff5f311d635b3eb58354bc735e80ae26303d6d5dd22cc071d4fc10df760Virustotal results 30.56%SnakeKeylogger
2022-12-22n/aexe eb21cc14cb0d9bc52e92751e2b646b43dbb2049e12279a68909aa0d27355a6e1Virustotal results 24.29%SnakeKeylogger
2022-12-22n/aexe efb60e1e37e9f3508f738f1b01476321d02674165691667e33b6b41365b9218fVirustotal results 29.58%SnakeKeylogger
2022-12-21n/aexe d6ebb31214579d556f30e368e728e8b25e762934d6647f93c6a35a6539a1ee8bn/aSnakeKeylogger
2022-12-21n/aexe acfa2ec9e7b521e3aae1a16715236d47e1f999a29e889f8d7cd03d2e195b7bb1Virustotal results 19.72%SnakeKeylogger
2022-12-21n/aexe 6dfb08f100d0eb2f4a72565099169b7e10db0f64e936777b820d45a1500526f5n/aSnakeKeylogger
2022-12-20n/aexe f56dcde7d06b05096835f277eb1e597526745b7f7607627855a56fd6f1fc3f50n/aSnakeKeylogger
2022-12-20n/aexe bf971472203bac3c25c15c18e70f1703fe11dbbfdd9a85a1603e1c9d38eef0b9n/aSnakeKeylogger
2022-12-20n/aexe 4abedfc34ebfc3f6dd481918937d4303062547b42381bb7cb488ccca36d5171fVirustotal results 22.86%SnakeKeylogger
2022-12-20n/aexe 849614b51d921924596ea7120a79a8cdc4c49165e804ef136b35694a4a6cde01Virustotal results 18.57%SnakeKeylogger
2022-12-19n/aexe 5ea5baa76e56e7f96fc470ff3b0a6d9b3ba0d0460b2228ab334e0048de21fe90n/aSnakeKeylogger
2022-12-19n/aexe f728d0c1eba159e1535a3272394af94ce9d7cd7b60f3b17d4c3540614d0aa49bVirustotal results 19.72%SnakeKeylogger
2022-12-19n/aexe 33dd3092ba0e081814596cd014ff5c6c992fa90a7a7c481fee025cdbcf0fb3d0Virustotal results 14.08%SnakeKeylogger
2022-12-18n/aexe 0dd996545ef3178719d3a8253b674b1fedfcf0ea1d9bb6af1409f6a47000dc1dn/aSnakeKeylogger
2022-12-16n/aexe fb27645c5ba18a9e7e61876df54e4220c89cfdea419892dc08c32a9a7fe9b443Virustotal results 15.49%SnakeKeylogger
2022-12-15n/aexe 5914d93dc7fd61a69548c983248d5464fb820d7de9d069de47d254e96148905cn/aSnakeKeylogger
2022-12-15n/aexe a326ca76e1b9e2eb9f2c83fff2805d5ddad2c79e2b5d45d9417ecc0dd2befa31n/aSnakeKeylogger
2022-12-15n/aexe 283d8db5483e1b59b3c548b1ee6df96e0d645165106ddaf2c743893819e1efc4n/aSnakeKeylogger
2022-12-15n/aexe 4fe6695fa1fb3fe9d7d1732efea242c81a222a48620456245575e932e118e761n/aSnakeKeylogger
2022-12-15n/aexe 026e8dc5532aca1e2a3b4d90081139519f11eb08eb63d5180b0ab57fde9ab4d6Virustotal results 29.17%SnakeKeylogger
2022-08-05n/aexe d264b5217f8fa50ddb89b02a6b8b00e17619fd5298318b445bae4e6f6aa92e8dVirustotal results 37.14%Formbook