URLhaus Database

You are currently viewing the URLhaus database entry for http://62.204.41.90/sarda/fular1.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2522538
URL: http://62.204.41.90/sarda/fular1.exe
URL Status:Offline
Host: 62.204.41.90
Date added:2023-01-30 10:36:05 UTC
Last online:2023-01-31 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2023-01-30 10:37:05 UTC to abuse{at}gorizontllc[dot]ru)
Takedown time:1 day, 7 hours, 30 minutes Poor (down since 2023-01-31 18:07:54 UTC)
Tags:exe RedLineStealer link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-01-31n/aexe 8d9cc932a8c8d0d59b03f6ccfe063c57a47534b7f56ee95be4701f2dcc4359fdn/a RedLineStealer
2023-01-31n/aexe 45816853564f3cb2f53bc215ff6cfa4454205cf49f60615ec6c862b07ba470afn/a RedLineStealer
2023-01-31n/aexe 3e8c02b2f79b5bcde41ed274f3701758572fadf8d46d26220ea71f6140ba87c4n/a RedLineStealer
2023-01-31n/aexe 6efd958606ec90cc6f25465df9b2c8e5fc57cf8273f625575072184c45056d3cn/a RedLineStealer
2023-01-31n/aexe c00bfc39058a4aea98fa37af55a1f8e184963c0a8009cb5af70698c7ce710fcfn/a RedLineStealer
2023-01-31n/aexe 0202f9d47b918598cb9bf91c19f91b6d673e8546b7a342f9412ec33ebb08dd3fn/a RedLineStealer
2023-01-31n/aexe 043bbb47e714983e34511ddfdf954ebb8b7ff83db41636a4fd13c0a5ecc912c5n/a RedLineStealer
2023-01-31n/aexe a304fc511b913e65ba0dcfd2caea58f967f455cb3436e6b6275bb051749a0d73n/a RedLineStealer
2023-01-31n/aexe 98f051c829cc863561995a46c07bb5e7c043a318bc2a4b5e6d1558c4dbe8de80n/a RedLineStealer
2023-01-31n/aexe 23471129d64141ddb76aa5dfda8bd159e0674d87b9ae7a5b0d503caa2c7145een/a RedLineStealer
2023-01-31n/aexe 0ad8974967e5b040c9f112adf9ab7ad5ea091d0abd3d59972f4abe7fd3cf0e38n/a RedLineStealer
2023-01-31n/aexe 7225159bcc0e1bd185cc9ace6c79b51ed90015553feb36b1266abd9744518265n/a RedLineStealer
2023-01-31n/aexe ab7655834ed8de755fd0e542ecfe3e7cfb33d033f156260fd3783b369825a766n/a RedLineStealer
2023-01-30n/aexe ffdac5f06d01a215a72ac718af799d9cd5c3a37ef9579e6d52ddeedf3371be6en/a RedLineStealer
2023-01-30n/aexe 887b308094e75dce34e38e52860010e8ce22c78f87bbe3735f4cfbf57366e993n/a RedLineStealer
2023-01-30n/aexe 6d47c4f3aa896e3c81f097337159c6b0ddbe231d1226fd9c9b833638adb2b056n/a RedLineStealer
2023-01-30n/aexe c0ac1f32d94c24588592f1e48e50618661141b9c8d3b33a942603b46baf7edf1n/a RedLineStealer
2023-01-30n/aexe e131d969329ac28bb0b5bf9e4d0ab500950958f0ef5a28c8af14c25d3afe4923n/a RedLineStealer
2023-01-30n/aexe bfce4ceceb39988f6fa4e9b498673ccc20f6e9b9ad4a803ec38fbfd6bebaf12en/aRedLineStealer
2023-01-30n/aexe c656768d580da10ebec5cd4d211da1fb70a2e40be23dcd6897faf5070274dcebn/aRedLineStealer
2023-01-30n/aexe 548a2a81d9aa6b91f0f7fb44f1e5a5fc8febd68134d73a3d191753083cf289ffVirustotal results 42.86%RedLineStealer
2023-01-30n/aexe 18dfa886e69641bb8e681733a3be42d153d734e1e103910cde2143fe9fd5c09bn/aRedLineStealer