URLhaus Database

You are currently viewing the URLhaus database entry for https://cleanpcsoft.com/race.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2515879
URL: https://cleanpcsoft.com/race.exe
URL Status:Offline
Host: cleanpcsoft.com
Date added:2023-01-23 07:22:18 UTC
Last online:2023-01-24 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: andretavare5
Abuse complaint sent (?): Yes (2023-01-23 07:23:06 UTC to abuse{at}namecheaphosting[dot]com)
Takedown time:1 day, 6 hours, 46 minutes Poor (down since 2023-01-24 14:10:00 UTC)
Tags:Amadey drop-by-malware PrivateLoader

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-01-23n/aexe 1ee855d883a22a4f5111978f4ea589fc43f1556815460f1cc0302339447596e8Virustotal results 58.57%Amadey
2023-01-23n/aexe 590e81a847fe5bf4bf4e23ce70b49fb27ec3048ffd8b02e360b757d26e2eac6cVirustotal results 60.00%Amadey
2023-01-23n/aexe ba36d04cdfbdd729450db17a6f0b8b953ca8b91aefb9d56a71e58864c8e0fb61Virustotal results 69.12%Amadey