URLhaus Database

You are currently viewing the URLhaus database entry for http://45.83.122.242/css/avicap32.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2350834
URL: http://45.83.122.242/css/avicap32.exe
URL Status:Offline
Host: 45.83.122.242
Date added:2022-10-05 10:19:06 UTC
Last online:2022-10-08 21:XX:XX UTC
Threat:Malware download Malware download
Reporter: vxvault
Abuse complaint sent (?): Yes (2022-10-05 10:20:13 UTC to abuse[dot]itweb{at}yahoo[dot]com)
Takedown time:3 days, 10 hours, 58 minutes Bad (down since 2022-10-08 21:18:21 UTC)
Tags:DarkTortilla exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-08n/aexe dbcee8a639b1a627378deddf43ad27b78c86b4f74ca848bf880e17328797e882n/a 
2022-10-07n/aexe 729c7829cb055679d29b496693a55814c1a493c7c4a68ab7c121ee5e4745c430n/a DarkTortilla
2022-10-06n/aexe 1b301ece76f0b0c19c780ea91d23a4e5bb60d77c4356ce840824c0ebee11dd42n/a 
2022-10-05n/aexe a4c7425d4048848b51c036ee99ed5c755b0c914e7a0d5e850179e29279b54bc6n/aAllcomeClipper
2022-10-05n/aexe e4c58ca4fe487845e33f4976a92f5d1cab56f3ccfad3aaaeba9ad036dea592fbVirustotal results 23.61%AllcomeClipper
2022-10-05n/aexe 37611974a3ee8ab0a2a0849f4421ed44e3b51ee3fb7a24e12111340c9ec15402Virustotal results 51.39%AllcomeClipper