URLhaus Database

You are currently viewing the URLhaus database entry for http://194.55.186.147/images/joshzx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2412764
URL: http://194.55.186.147/images/joshzx.exe
URL Status:Offline
Host: 194.55.186.147
Date added:2022-11-15 11:36:04 UTC
Last online:2022-11-26 00:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2022-11-15 11:37:11 UTC to abuse{at}des[dot]capital,abuse{at}serverion[dot]com)
Takedown time:10 days, 13 hours, 16 minutes Bad (down since 2022-11-26 00:53:30 UTC)
Tags:exe opendir SnakeKeylogger link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2022-11-25n/aexe 3ca281f64c837dc8bbee64ae5936d802aeb5899d900efc3265e3a57b3bd2b3f1n/aSnakeKeylogger
2022-11-24n/aexe 01856301804ce957c8ad34242cc6616a26fb17a245e65f7507d36aea4d54692fn/aSnakeKeylogger
2022-11-17n/aexe 1d60a5327938b43221143648d5cc423e8962e88c269eac87db52df8bea141f84n/aSnakeKeylogger
2022-11-16n/aexe 9aade5a05dc88e4e48630d86d043c842664c7bbed4db05277d6a47eea00f6895n/aSnakeKeylogger
2022-11-16n/aexe d1de506ad87c404246d7513bc0c1fec253ca06183741553f245f9fa49c5664ecn/a
2022-11-15n/aexe ba0f2bf7248cea3c02252babbff583a8d5ddfb362027a8fc765da01eec3f710an/aSnakeKeylogger