URLhaus Database

You are currently viewing the URLhaus database entry for http://107.172.206.118/45/vbc.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2346133
URL: http://107.172.206.118/45/vbc.exe
URL Status:Offline
Host: 107.172.206.118
Date added:2022-10-03 13:53:05 UTC
Last online:2022-10-06 08:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2022-10-03 13:54:11 UTC to abuse{at}colocrossing[dot]com)
Takedown time:2 days, 18 hours, 44 minutes Poor (down since 2022-10-06 08:39:05 UTC)
Tags:exe opendir SnakeKeylogger link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-06n/aexe 521e9db681ade0e368a3e99d735333c0d18df6087aa1f2fe6984c84ce1e4a1d8n/aSnakeKeylogger
2022-10-05n/aexe a3465cca56d61a376078e6ac2d7466fae46bf7d073b9145b768f77ff33a3da0dn/aSnakeKeylogger
2022-10-04n/aexe beb581aaec97ca8d00d79699577849cd46a8e25561e29e906a1adb254ffc2549Virustotal results 16.90%SnakeKeylogger
2022-10-03n/aexe b31ee35f8f256fce872b0ae8904c8b53efb6b5aa1d502367eb6c3ce41fa2bed5Virustotal results 18.57%SnakeKeylogger
2022-10-03n/aexe b94831b748e93b5d0b1e43c7ab1014d4f78e9d8064b233b414f80103e9d9cc88n/aSnakeKeylogger