URLhaus Database

You are currently viewing the URLhaus database entry for http://45.83.123.128/css/avicap32.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2355192
URL: http://45.83.123.128/css/avicap32.exe
URL Status:Offline
Host: 45.83.123.128
Date added:2022-10-10 14:10:04 UTC
Last online:2022-10-13 09:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2022-10-10 14:11:09 UTC to abuse[dot]itweb{at}yahoo[dot]com)
Takedown time:2 days, 19 hours, 48 minutes Poor (down since 2022-10-13 09:59:41 UTC)
Tags:exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-10-12n/aexe 135e3c344b74bed9c18fdb9749a9bff77e7925501d33acec9fbe49495cb56b8dn/aAllcomeClipper
2022-10-12n/aexe 95de56b7b27bfdfae1c741a5f02a42d1a4f7a23286ca8b292e85132b8b87bb57Virustotal results 31.94%AllcomeClipper
2022-10-11n/aexe e785766c481cd42dc89e666939c3c0890a4322e28ddc2944c16e043b1a90be66n/aAllcomeClipper
2022-10-10n/aexe bf00a990eb93a4696f6b5d6029d654ce3e2959b14db849c6630c17256c7aa31bn/aAllcomeClipper
2022-10-10n/aexe ac1ee2ae3f9d02314391ea2cf5931325da346f5d40ea7cf12f4fb86e62fe1e89Virustotal results 40.28%AllcomeClipper