URLhaus Database

You are currently viewing the URLhaus database entry for http://103.232.54.88/spaceX/vbc.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2503641
URL: http://103.232.54.88/spaceX/vbc.exe
URL Status:Offline
Host: 103.232.54.88
Date added:2023-01-10 19:11:13 UTC
Last online:2023-03-15 21:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2023-01-10 19:12:06 UTC to hm-changed{at}vnnic[dot]vn)
Takedown time:2 months, 4 days, 2 hours, 1 minutes Bad (down since 2023-03-15 21:13:24 UTC)
Tags:exe Formbook link Quakbot link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-03-13n/aexe c31db5aec9add40498b70fadc64eecb0b036cc0d894868ecd365213bd23dd064Virustotal results 78.26%Formbook
2023-02-14n/aexe 87b9b70549d830766e29b5045be0d08677e80ccbc3d1df65964f0324127c68acn/a
2023-02-13n/aexe efd586fdc04eae13911a3f2638cb478edb6c952716e3279d854c4d855a9a70c1n/aFormbook
2023-02-12n/aexe 736330aaa3a4683d3cc866153510763351a60062a236d22b12f4fe0f10853582Virustotal results 2.82%Quakbot
2023-01-10n/aexe 11b7ed15ae6b1bb53ad3eeff567acb939f794bfdf067b6c3c07c19a15a02fb8fVirustotal results 28.17%Formbook