URLhaus Database

You are currently viewing the URLhaus database entry for http://ring1.ug/files/cost/5.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:248954
URL: http://ring1.ug/files/cost/5.exe
URL Status:Offline
Host: ring1.ug
Date added:2019-10-27 20:15:06 UTC
Last online:2019-11-18 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2019-10-27 20:16:06 UTC to intl-abuse{at}list[dot]alibaba-inc[dot]com,abuse{at}alibaba-inc[dot]com)
Takedown time:21 days, 10 hours, 47 minutes Bad (down since 2019-11-18 07:03:58 UTC)
Tags:ArkeiStealer link exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-11-17n/aexe c772d3cc812cd0cd7bb62b002df3be654574098a3ef4683cb5c807bcbbe8b861Virustotal results 18.84% ArkeiStealer
2019-11-17n/aexe 25ae21623bc8f9b7788ac0cad7ff89dea59435e7819144173a61a0561897e42bVirustotal results 19.40% ArkeiStealer
2019-11-15n/aexe 12ec970a6ba2519765a72a3ab4a832290c98ed143cbf26af698db0a93d475f10n/a ArkeiStealer
2019-11-14n/aexe eaff887788222e481f3f1c494a638e60988827a3e665be6ab59daef68843b779Virustotal results 30.99% ArkeiStealer
2019-11-12n/aexe 18334bf61f0a168c1a7246f188daf650d24b6c53f76db3685cabaf1d106da448n/a ArkeiStealer
2019-11-09n/aexe 36213f57ceabe23ef76ec56f006c6fc1a1f03a6c94949b0f14b8e6dec26af98bn/a ArkeiStealer
2019-11-06n/aexe b00195d06350161758241dd77bbff9c8fd9ae927b1455c9ac31b36df5e3e7ad9n/a ArkeiStealer
2019-11-04n/aexe 62b057020008025fdd1b9d5fe788487ef5c312b8dcae31b8edea1f41882a03f1Virustotal results 32.39% 
2019-10-30n/aexe c84f1d6b8acb9807baf2a16dd480f64b307ade9b57b7a2d387a033e85cf5d83en/a ArkeiStealer
2019-10-30n/aexe 6c85336356050bf7000958c5f9be85bed2f10d5bbf8d1bb7ed1974fcfc41e9d9n/a ArkeiStealer
2019-10-28n/aexe cc0d8e673a5e37b4ab405225ec313e928a1750622500884dfe0e3642a9a297acn/a ArkeiStealer
2019-10-27n/aexe 7baebcacdcb750d2bb2b8e7ccc404e673a63eac7f4eb6bf48c7b787663a1094bVirustotal results 71.01% ArkeiStealer