URLhaus Database

You are currently viewing the URLhaus database entry for http://45.147.228.77/socks777amx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:250972
URL: http://45.147.228.77/socks777amx.exe
URL Status:Offline
Host: 45.147.228.77
Date added:2019-11-02 16:36:03 UTC
Last online:2019-11-03 10:XX:XX UTC
Threat:Malware download Malware download
Reporter:Anonymous
Abuse complaint sent (?): Yes (2019-11-02 16:38:05 UTC to abuse{at}combahton[dot]net)
Takedown time:18 hours, 2 minutes Good (down since 2019-11-03 10:40:35 UTC)
Tags:exe MedusaHTTP link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-11-03n/aexe 80e5b509d44691eb89563eafbdf53da696d53c1ea44880dc457682a537854fcen/a MedusaHTTP
2019-11-03n/aexe d26595c25afcbb57895b85321741eb925d92e0638e88797914f1e5dad4e67cdcn/a MedusaHTTP
2019-11-03n/aexe 79d89186a13c6a72bef41cff7e167a7d1878c58e023f78befdab04055ef70032Virustotal results 27.78% MedusaHTTP
2019-11-03n/aexe 918f02a93a629deab73b0e2add3fd38ac432256fe20b779ef62dc8c0d83c9a11n/a MedusaHTTP
2019-11-03n/aexe 8634036f052796156c30d88739eab226966b0b3873e1c0611d81747d6b27752cn/a MedusaHTTP
2019-11-02n/aexe 615d31edfa6536708501c6854f451fbb16612156ae2c0f5c6aa82c7137de2eb8n/a MedusaHTTP
2019-11-02n/aexe af449dca43d2633a40f78eb7baf9d3db46416d6f5ab9300424a068f7cac110a3n/a MedusaHTTP
2019-11-02n/aexe cdc8cd3da823120fc9a69851f3f83fc75217c58b56bb5e3c97485994b21f8e5cn/a MedusaHTTP
2019-11-02n/aexe 32a85f0a90c82217cbe3bd111401a29159f2eb5dbfb0709a76809ff9b1447f4dn/a 
2019-11-02n/aexe 1d6101058a9b3f0fe447a565bdb486dc9ee895e9bcebb9b95b293420e50d4a62Virustotal results 31.94% MedusaHTTP
2019-11-02n/aexe a6552cd05918852cb25eb5c2e5e4347921d629d3f390765f79462d157afccd4cVirustotal results 35.71% MedusaHTTP