URLhaus Database

You are currently viewing the URLhaus database entry for http://208.67.105.179/mrjohnzx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2482441
URL: http://208.67.105.179/mrjohnzx.exe
URL Status:Offline
Host: 208.67.105.179
Date added:2022-12-23 04:36:04 UTC
Last online:2023-05-17 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2022-12-23 04:37:07 UTC to abuse{at}serverion[dot]com)
Takedown time:4 months, 25 days, 7 hours, 22 minutes Bad (down since 2023-05-17 11:59:53 UTC)
Tags:exe SnakeKeylogger link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-03n/aexe af10de17679edaafbafc491a53558d88cc61f4ec8e487d5c96463a235a52aeabn/a 
2023-05-03n/aexe 8dbb674f65eeaca616987620acb28f6c576ce2ac16fffd5538688ca6dc210263n/a 
2023-01-19n/aexe 77a8dd63bb9b99da6daa8291b894e4a1dc05d8476abd943d728798760fb1422bVirustotal results 18.31%SnakeKeylogger
2023-01-17n/aexe dd39b4b8ed5092bfd590f6a175d78a59ffebbafeee05b47d909b9321ac336d46Virustotal results 28.57%SnakeKeylogger
2023-01-12n/aexe dab37a069356983008d299beaf6dd2dd5d8eae3f71c92410de37e64014942b7cVirustotal results 29.58%SnakeKeylogger
2023-01-10n/aexe 2ee3a3b3bb2755d3dbd5a438bd7bd731201a16996a8aa249d50675e13a96131dn/aSnakeKeylogger
2023-01-10n/aexe 971fa2ed128f50036addbec8c360f50ceb498d6e4da5aec1e420f569a516bd76n/aSnakeKeylogger
2023-01-10n/aexe c311d7bb48a8076e141608660d414516d535948c93ff903969208adc8bd09c4bn/aSnakeKeylogger
2022-12-23n/aexe 622cc8e52c54af2da4ff1c114f71c6949b3d0f900c83931a9141bc7f91937166Virustotal results 19.12%SnakeKeylogger
2022-12-23n/aexe 4c7059dcdffb85c6a3cad9b231e71307befedaf71c007e708d17d2190114d23aVirustotal results 19.30%SnakeKeylogger