URLhaus Database

You are currently viewing the URLhaus database entry for http://ji.jahhaega2qq.com/m/p0aw25.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2644855
URL: http://ji.jahhaega2qq.com/m/p0aw25.exe
URL Status:Offline
Host: ji.jahhaega2qq.com
Date added:2023-05-29 19:17:11 UTC
Last online:2023-05-31 07:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: andretavare5
Abuse complaint sent (?): Yes (2023-05-29 19:18:08 UTC to abuse{at}cloudflare[dot]com)
Takedown time:29 days, 11 hours, 20 minutes Bad (down since 2023-06-28 06:38:51 UTC)
Tags:dropped-by-PrivateLoader fabookie

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-06-26n/aexe b9330114e7f162342fb1f2f6c9e31d90abadd045392a11225c9854fa08f46106n/a Fabookie
2023-06-25n/aexe 4f2f8e8f530beb89c23e7a43a6a82498bd44739688e273f3ea4e4dde4aea38edn/aFabookie
2023-06-24n/aexe 9dc587c94f7b46e3349882a66a837832cfab8bd122a8c6bccf09332321943d53n/aFabookie
2023-06-23n/aexe 8f47e7ee32200f46096d4cf165ca71fffdbee5b8cf85b8dcd690bba888848538n/a Fabookie
2023-06-22n/aexe cf4c10732e1ed55669890820b459236dc32f8df82c3246be778a327c0192b349Virustotal results 12.68%Fabookie
2023-06-20n/aexe bceba3b1d8dd231a77a017f46c807b30e50e1244f29628e09be6518598b1fb8fVirustotal results 8.45%Fabookie
2023-06-19n/aexe 77d4b9f29fed9e1b5bddcd894e5f99d0dd6f22083374a4e598bec6dc05080ae8Virustotal results 11.27%Fabookie
2023-06-18n/aexe 17e82209518cce274c965110945fb6d4641ba0e950ebcea59d3c1d809a4a817eVirustotal results 8.57%Fabookie
2023-06-17n/aexe 8864d8f7f148c66afd1d7949abc041310d8b8837249a817c57f74a68e9c320acVirustotal results 15.49%Fabookie
2023-06-16n/aexe 85b2316619510cb5e482c62b27714f9e8f83bdd8d73ea530d29e48bfafb509f7Virustotal results 9.86%Fabookie
2023-06-15n/aexe 0f0ea5ccca24f01452b2f7bada2ab9b591971d50e2b5274c91ea90660465982en/aFabookie
2023-06-14n/aexe 5b9c530caaf6fd3bfc8244985d1e88c03042a73c55dd97745ea749c32ca6b8e0Virustotal results 9.86%Fabookie
2023-06-13n/aexe 5f2e2a92401ea7488c47caffc88acce66e4e66c6c631ff44a35859ff8a4b66acn/aFabookie
2023-06-12n/aexe 4c13c5e91071a1faccee2edca76cc7080670df634b373fab9ed258d75bca705cn/a 
2023-06-11n/aexe 9d4bf2fa222c2fa818ed73796f639d7138d2065616ee126c38b8145723164a94n/aFabookie
2023-06-11n/aexe 33f93086c8ad0c614e01c503d5c299b5fc86c480007597756de02884bccc5e67Virustotal results 9.86%Fabookie
2023-06-10n/aexe 6c9138c779f43b2369ef368217fc39640ed6478e1fdbbd05f80d9e5b54a3bc34Virustotal results 12.12%Fabookie
2023-06-08n/aexe e3d9fe1d6d23c0641c40e3b3eeda4b08f47f6b93e4afad127436fbaf61a7df4aVirustotal results 11.43%Fabookie
2023-06-07n/aexe 2d1e1df8c47d769710d33fef1981beec393f2ee426c7cb621f1d6ce0f8a3eec4n/a 
2023-06-06n/aexe 4f86a5f66aa050873db8997baf44ed06320a0b32f66d7266814cf78bcd220c60n/a 
2023-06-05n/aexe a913b2046e7d919cc02f7fe509eb50d674cdf21be7122295fcaf9e5acdcfc3acVirustotal results 10.00%Fabookie
2023-06-04n/aexe f1c89c1085ed01fc56fe12cc23d1a98f5c9b0029fe45cb425f5ffb62d8e71176Virustotal results 18.31%
2023-06-03n/aexe 107c9c7d4ae2a5116eb395a8a5fc6e4de7b9fe60bf7ccadcbb7c14ae1049cdacVirustotal results 11.27%Fabookie
2023-06-02n/aexe 64d45bc38d4a4e60a23bb5fa06a2b99ec40bd86c8f0cdd7c68736ab192569e49Virustotal results 4.29%Fabookie
2023-06-01n/aexe a47a44fa64fb011abca6e81d17646153861e56c5f4d5c3f798e5d5399b569b97Virustotal results 9.86%Fabookie
2023-05-31n/aexe 49ca0f0aff36c0315c4ef4634fe1b9ecccfc2044675b82d6f4b7cca7d3222c76n/aFabookie
2023-05-30n/aexe d80d8918642110a3d2d808ace0de5ff05525baa28dd89cfa68287cc56f490002n/aFabookie
2023-05-29n/aexe 642431ee850811f23e1ac8ab13524a669d4c6ebe1704792879621e2746c05939Virustotal results 12.68%Fabookie