URLhaus Database

You are currently viewing the URLhaus database entry for http://193.233.20.3/puta/rocku.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2528642
URL: http://193.233.20.3/puta/rocku.exe
URL Status:Offline
Host: 193.233.20.3
Date added:2023-02-03 05:49:03 UTC
Last online:2023-02-06 14:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2023-02-03 05:50:08 UTC to shinomiya[dot]hosting{at}gmail[dot]com)
Takedown time:3 days, 8 hours, 30 minutes Bad (down since 2023-02-06 14:21:03 UTC)
Tags:32 Amadey exe RedLineStealer link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-02-06n/aexe 66e93e6252ac9c8f2a02c121abc6b4749c67b131ba0d21b39ef917e695ac84ceVirustotal results 32.86%RedLineStealer
2023-02-06n/aexe 29cc22cd2167fcc12eb0f555d6f7b4ec0be43c76d03ea53e35ecf3464c5e4efaVirustotal results 34.29%RedLineStealer
2023-02-06n/aexe b7e899976d3623c9de25a73f0fd57d963f12af9b0cacc952f1ce5aa14b93f920n/aRedLineStealer
2023-02-06n/aexe 1d51e0964268b35afb43320513ad9837ec6b1c0bd0e56065ead5d99b385967b5Virustotal results 35.29%RedLineStealer
2023-02-06n/aexe b9592f7616249ff910d601c0680932abf55a8b4af511bf18d42ad55835f422d4Virustotal results 34.78%RedLineStealer
2023-02-06n/aexe caf51bbc26408a0d9e3b24595b0318e128b9bc98ce713fa936ffbaadea6a33adn/aRedLineStealer
2023-02-06n/aexe 3cdb7553fb4a23c8a8fbe15269794d9883fc0db9cd2b77eb440c1ea33c32aea6Virustotal results 35.71% RedLineStealer
2023-02-06n/aexe 78e0bd6f6f984f93324e7fc13359b35d59c2d5359e0d2db23f70a755ff194769n/a RedLineStealer
2023-02-06n/aexe a3af214de879fc88752f01ca10aaf3cc40520c9399dfdf2c3c08e5b32552dec9n/a RedLineStealer
2023-02-05n/aexe 2852017fa9168dd8b26a3bbbed8c750a28076e889bccd4226cf267fe673a10een/a RedLineStealer
2023-02-05n/aexe 615e36dbe9874f7b7041dadb7a122a9dbc00f0947765871f307911a5bbfce001n/a RedLineStealer
2023-02-05n/aexe e78f29c232a31be2cfeb1404baa9a81da5238eed2d370ab7ed7cbd085ca93b90n/a RedLineStealer
2023-02-05n/aexe d60408c309f25d07c45565304f4a7d147a78a8c4d93d3d6b1a000f9e2819a6abn/a RedLineStealer
2023-02-05n/aexe 552b187499c19ec8d2229df9157c54dbc286731075d3b3b393088a2a0afd8732n/a RedLineStealer
2023-02-05n/aexe e34c3ee8ef3716d87092670793c8cdb6174a0184f6817637639101dd7e2b246an/a RedLineStealer
2023-02-05n/aexe e5bf02384db391b42deedfd4a5a4ddc5cf7e5777448b69f41e3872f618305368n/a RedLineStealer
2023-02-05n/aexe 15019e74fe93e132d60d4f7fa7f2b23967c6bf0675936c0874117663067f8874Virustotal results 37.31%RedLineStealer
2023-02-05n/aexe 7becab35b4300ad3c0be8e7dc12f311b140cb8a7b5338e0102fcf6f71c97157dn/aRedLineStealer
2023-02-05n/aexe d52ccdf8ff0f75d337167b63b736c3a908c48caf6bbd39a2434e0baac41eef6fn/aRedLineStealer
2023-02-05n/aexe cdfdc2becd5e3531a967dc8356ea89d087826f53e320c98bb569dcfed1b2cae5n/aRedLineStealer
2023-02-05n/aexe 2fc20c39599a1a7f6d4bfda33562581622c15a3a7a92db8185b6de41eba56ed1n/aRedLineStealer
2023-02-05n/aexe 103f1c25aaac16c39aca36ca629b1ab3b1226170753074ae924f27c0326aff1bn/aRedLineStealer
2023-02-04n/aexe e22263bcc3bad9a4f3b0529461bbd2dd222e9aec73bb36678f0289dea0dde4can/aRedLineStealer
2023-02-04n/aexe 17db67516ce4d053d70f35bc427af16a5b11e3a7fbe215ff3dee70632b7e7fefn/a RedLineStealer
2023-02-04n/aexe 7264b4bf4517ed0567dda8ebbcd992384a67f37d1d9f9c9eb8e93d6c99a8227bVirustotal results 32.84% RedLineStealer
2023-02-04n/aexe d410bb2728b8da8f392cf73c7dff7a5b4854c3297d2a41e1e7014ae9ba1f8a52n/aAmadey
2023-02-04n/aexe 02341b4bb63ad4f99261e12c7f70fb9f503ef094ed14ab308d7e8aa4d015a4f0n/aRedLineStealer
2023-02-04n/aexe 3d018554a07f3eaee1ba0bf79ad5d01c601cae9daf01f901f92ca633db19ac84Virustotal results 34.33%Amadey
2023-02-04n/aexe 25ea96abd59cfd5a1773b73dcd925f242df0865e17bf71eb04f7972244556c4fn/aRedLineStealer
2023-02-04n/aexe ef837e4549085f90fccd5b3a25082480ea20102458889ea8576c2714404086ean/aAmadey
2023-02-04n/aexe 6fbf44183c6ed6ebe3f188f187afe712574c34d9787cdf40c5bcbb07f6d50fb7n/aRedLineStealer
2023-02-04n/aexe 09b749cb035fd17bc749c1738d1f35f35500df7b157552f26f7570d80f8acde1n/aRedLineStealer
2023-02-04n/aexe 317618ef12fa752d88f9de1c08291231f2496e33094329501d9a1e56b468be2cn/aAmadey
2023-02-04n/aexe 85b23d055ec1ed780b24ab997ebe9c42f6bd601d74443cf551553de74709299fn/aRedLineStealer
2023-02-04n/aexe 7834f71c64d4fae1c1bfbc20683f95c7cc768a590a9951ef6a98805b2d0d226en/aRedLineStealer
2023-02-03n/aexe e004f13f7dbaafd32ff65dab33d2022bc1616903c9e71b17810978ba07ed7eden/a RedLineStealer
2023-02-03n/aexe 1a046c1f90dc038d7ed54cd9f37e456ea4f5ff927fba8ec327733ade25981e4fn/aRedLineStealer
2023-02-03n/aexe f3deee627b07f716348e99e7a4af565621b83bccd793709b972c093ef21bec39n/aAmadey
2023-02-03n/aexe ee5f153d746b367e98ec49a499e8829a5844ae8f386a13e83c4535675e2a6b3dn/aAmadey
2023-02-03n/aexe d5e68fcd0bede7400aee8e16cf3b3938c3a403e68ef6d3e49215cab5429c3565n/aAmadey
2023-02-03n/aexe fff54c811ef576b7d2fd2b38bf764776f669ff11e1cccd4932275570e0043894Virustotal results 30.00%RedLineStealer
2023-02-03n/aexe 121338e806a7572ef0380f109151859c033b08413b3bdaeb0e28aeeb9df8b539Virustotal results 26.15%RedLineStealer
2023-02-03n/aexe 5c5dca2dc8a0c0772521ac9a66cc35e48289361f17935372f4f832b0a78ddda5Virustotal results 29.23%RedLineStealer
2023-02-03n/aexe 9ac4be38637f17483f3b54a09a1a5af0e753b394546621337c7dd1d3613f9b45Virustotal results 31.34%RedLineStealer
2023-02-03n/aexe f66323bf68bc898f32c22e815e4f36bb350c2e62b291577e389f8fe087267296n/aRedLineStealer
2023-02-03n/aexe 0fcb22b5f80a849c4000fbf88d6f80dfc4a5e337cd612c46e13f7eb54d69beeen/aAmadey
2023-02-03n/aexe 1ba028487eb5211d096b9b0966eab10dc167735fdaa955b2009e867331ca4797Virustotal results 27.14%RedLineStealer
2023-02-03n/aexe 9a05f1021284e27e2213e3b90515dc72414cd142c3ea7e19955cc80e20c4e931n/aRedLineStealer