URLhaus Database

You are currently viewing the URLhaus database entry for http://45.9.74.80/toolspub2.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2659567
URL: http://45.9.74.80/toolspub2.exe
URL Status:Offline
Host: 45.9.74.80
Date added:2023-06-13 20:36:07 UTC
Last online:2023-10-09 21:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2023-06-13 20:37:08 UTC to abuse{at}lethost[dot]co)
Takedown time:3 months, 28 days, 1 hours, 6 minutes Bad (down since 2023-10-09 21:43:11 UTC)
Tags:Amadey exe Smoke Loader link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-09-12n/aexe f342950ea78a3910911df852de530912090acea09b895e299d4ba0132ee146eeVirustotal results 42.25% Smoke Loader
2023-09-09n/aexe e0c0dad38a7b96cd4bd4049a100b4c483b5f6cdf8d44c005f6039d294debfec8n/a 
2023-09-06n/aexe 967c80b7d05b0030a11c69713e7fa82f7cfe0a9fde485744c4d368bd29826eabn/a Smoke Loader
2023-09-03n/aexe b9d5f28e9a2202320f803f236b5f4a1d73a5bc6330ac210020136b50180c71f9Virustotal results 50.77% Smoke Loader
2023-08-30n/aexe 0a43bc29b96992aaec01af4c1a83318e1db149f8d8f216425c371b3a1400bf8en/aSmoke Loader
2023-08-27n/aexe 10d5acaf335351c394065caea772a79d686fab672649cb94315342fe0a9e4df4Virustotal results 44.62%Smoke Loader
2023-08-19n/aexe 9c0d4c8b4e95b4920afdd0cf7ba6c76e7d6c35cefa90b0f1a28a99c0d463b09eVirustotal results 48.48% Smoke Loader
2023-08-11n/aexe a3b9b231eedc6701cd76d624ed7dbfab8614e8a07088512b5e6ef3aa44235f50n/aSmoke Loader
2023-08-04n/aexe d8bdb32cb558ab6bfac8f7b3525475297e90779b55e437222ccd77ff15b8b8cen/a Smoke Loader
2023-08-01n/aexe 441fbf58d14f9381ed674e403b617decbb3f09246304781e1bcad9b7f35f1016n/a Smoke Loader
2023-07-30n/aexe ad468c7b32bd7818c718fa67c0b775e6a60958f47e700f2baacdccc3aa39e2a4n/a Smoke Loader
2023-07-24n/aexe b50e9756050929c7b6852cd1fb9ced19227f70a7e6f75532d8a7d92d222ae415n/aAmadey
2023-07-19n/aexe 73b174c6316230888f3cef2a93ac3f4ba3d35897fa82181cd83beceda6fa7606Virustotal results 59.15%Amadey
2023-06-15n/aexe 025cab29299661c914b2244e247bb2b91d3b3e6e490222e106f34bb63da8481dn/a Smoke Loader
2023-06-15n/aexe 678ab5a721c348ab0ede9f9b2a03033577b1d5eead6761eb516c647acf2e34c9n/a Smoke Loader
2023-06-13n/aexe cb3bc1b8b740f2b21baf6567c68cc9aaf7038b7e5394385a8c5d4b45cd433af4Virustotal results 64.52% Smoke Loader