URLhaus Database

You are currently viewing the URLhaus database entry for http://93.159.219.78:60842/.i which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:252819
URL: http://93.159.219.78:60842/.i
URL Status:Offline
Host: 93.159.219.78
Date added:2019-11-09 07:00:04 UTC
Last online:2019-12-10 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2019-11-09 07:02:02 UTC to mva{at}intersat[dot]ru)
Takedown time:1 month, 1 days, 16 hours, 12 minutes Bad (down since 2019-12-10 23:14:05 UTC)
Tags:elf hajime

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2019-12-05n/aelf c15725cc8fb195f9b5eedd3561363c50ab2c8b299f21d921f891d358654010bcn/a 
2019-12-04n/aelf 2d42101f19608f544d7108e985148aab385d2ec5894798bd07a868e306316b70n/a 
2019-11-28n/aelf 4a8519dd4750352b145548cbdd90f1eb3442eef14b71d6d1a5f1941b731aaf3fVirustotal results 3.57% 
2019-11-28n/aelf 590eda88497801fccb323d620fbeea4c2f47e70b8c07ba91f2ad12c5309cd05aVirustotal results 1.89% 
2019-11-28n/aelf 5ed4d712255fd864b947c8cb11ad508bbcbc6f8b06dc053669522350010b085dn/a 
2019-11-09n/aelf a04ac6d98ad989312783d4fe3456c53730b212c79a426fb215708b6c6daa3de3Virustotal results 60.34%Hajime