URLhaus Database

You are currently viewing the URLhaus database entry for http://csdstat14tp.world/crot777amx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:243637
URL: http://csdstat14tp.world/crot777amx.exe
URL Status:Offline
Host: csdstat14tp.world
Date added:2019-10-11 07:24:05 UTC
Last online:2019-10-11 19:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: JAMESWT_MHT
Abuse complaint sent (?): Yes (2019-10-11 07:26:02 UTC to abuse{at}colocrossing[dot]com)
Takedown time:11 hours, 55 minutes Good (down since 2019-10-11 19:21:37 UTC)
Tags:QuasarRAT link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-10-11n/aexe f5fc5306c60d3c8c3ec11b472628537fd2e3f705e311ea0437e600f25c8820f2n/a QuasarRAT
2019-10-11n/aexe 0dbc919d0c77bbf41deb3e397cea83038e00cb0e06c678df9be1f592ad303697n/a QuasarRAT
2019-10-11n/aexe 94b2a1317bc4dea577b6250f23aa8ebed78d74ec0aeb3dbf8eb5c6cddb55d9f0n/a 
2019-10-11n/aexe 9fc0101ab83cb6b9a7e606e8b64e3bdefe3e54c365edc3628686107bdb5c9b06Virustotal results 25.71% QuasarRAT
2019-10-11n/aexe 3a49741dd62963bc52f9863880b6fe4bbe3802a5f8319561e79eb2c86e9f8a00n/a 
2019-10-11n/aexe d8fbc272e5e9b75b5a89c660a85064ddd577ce5d6b441dee3c01bb2a16f8b7f5Virustotal results 26.09% QuasarRAT