URLhaus Database

You are currently viewing the URLhaus database entry for http://getindication.top/mslink1.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2641260
URL: http://getindication.top/mslink1.exe
URL Status:Offline
Host: getindication.top
Date added:2023-05-26 05:29:08 UTC
Last online:2023-05-28 03:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: andretavare5
Abuse complaint sent (?): Yes (2023-05-27 11:38:05 UTC to info{at}iqhost[dot]ru)
Takedown time:9 days, 3 hours, 17 minutes Bad (down since 2023-06-04 08:47:17 UTC)
Tags:dropped-by-PrivateLoader Stealc

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-05-30n/aexe f5915d3efdd31d03fdcd84c9ea109232417c4861996a3e6eda16c7156fb59042Virustotal results 40.85%Stealc
2023-05-30n/aexe bfdfda675bfc0d09a0ae2ab2fba41f9cad1599a1a31f0d38f7728675c6a1f20dVirustotal results 45.07%Stealc
2023-05-30n/aexe 7b2acf4e50455c57cfd5ec624c1655e3ca4c5fc4fcafed3ff2ff2e4fd75a2894n/aStealc
2023-05-30n/aexe f5f1893062f88beb22773850b6e330ac082f319a36098574b402033dd18c4800Virustotal results 40.00%Stealc
2023-05-30n/aexe 17652d33f21e1d3b977e02389d90e796e3b3e0fce1e910f2e9a8fb14b4548ed1n/a Stealc
2023-05-29n/aexe e19e9a6f9e0536be43920fc3661266c58093eaecf32444a873848a7957487e67n/a Stealc
2023-05-29n/aexe f669626004a4679616cc2de2841fe2ce29da7466720871ebd91a0eedf1bc6ff4n/a Stealc
2023-05-29n/aexe 4dd6fde9841930dedc4eb00d48403ab5e836bec4dd9f7c7f76dc46b1cfdb65a0n/a Stealc
2023-05-29n/aexe 4553f7fec69849b55236be3786be17ccd50b2186f177520e94861f172a44a691n/a Stealc
2023-05-29n/aexe 59ef476d22088d1d523706cd72593913c35a0b7f52e6793aaf63619d3867e526n/a Stealc
2023-05-29n/aexe f60e7a1e0a377541a526d1562fcda507503126c9b044fe71b31940899ab9ed19n/a Stealc
2023-05-28n/aexe 7fda535e57d4fb87f4bfb17ed6305f1c9992c0c44341729a5b19c0eafb7e48d9Virustotal results 43.66%Stealc
2023-05-28n/aexe 5a6823a6b8582a3496d7140d2ccd0bb70caef2d8440d5de944cd5c002fdfff12n/a Stealc
2023-05-28n/aexe 24089814a99edccddb1a0b87184bb27b1838fb78c91becfb5735b2f187c48f6cn/aStealc
2023-05-28n/aexe 0a5f7f10516e05fbfc7efc3d0111b6f2389bb81d24fbdde09a9144c4d7160881n/a Stealc
2023-05-28n/aexe 9612ab6db78ba241b0135bc1aead97acf9e4815bbd7b85089c0abe3796e602a9n/a Stealc
2023-05-28n/aexe 5beed029e9207864a75a9a3cb8aa8c23b28a459b3701019a83370be336953d0cn/a Stealc
2023-05-28n/aexe 9aeecaee4cbc0cd2d7f8be2a80bf2d82377b19b69a882861a07191ed848e3588n/a Stealc
2023-05-28n/aexe 6f28787c6a58408fb89df58ce6fa6384bd5239c7d990b4c70f99e446d8846a7en/a Stealc
2023-05-28n/aexe 34d81fa01e7570ee734e04e8d2be5c2d54c3a343ad3340b26105627b6124a2dbn/aStealc
2023-05-27n/aexe 5da7c2a4b3b0cb14cccd91ab7d3495945204eb705664dc764a54f23717e87b6bn/aStealc
2023-05-27n/aexe 8cd748b1cc76a501254b9b130c4193efc7882493b750a5ee07a50b2443b6383cn/aStealc
2023-05-27n/aexe cb7f4e286a4a8fdfa525168591131d37019090d94040feb13c8078c4a7ae4b37n/aStealc
2023-05-27n/aexe 3e1e3a8cf5efe616591c7b6b91265b3adf8b9bc594ec7ea9a06e7d20cde4a2caVirustotal results 38.57%Stealc
2023-05-26n/aexe f253eee093537bcb88aa0b3b3706e6b689662c287db95c850b483e71b2af9d03Virustotal results 38.57%Stealc
2023-05-26n/aexe 6a6f27d9c66eaedf0caaf0e480c369679c266a4e9e4b6725bfa872518d2902b5Virustotal results 40.85%Stealc
2023-05-26n/aexe fc8a4cf4cdbd2de468b872d65acc55ed3e0664ada77d3d98f105127a780b7584Virustotal results 49.30%Stealc
2023-05-26n/aexe 0001b57cef8afca136cd082f12ffa26635dc73e5d2c8dee60097e11e3fdab1dfn/aStealc