URLhaus Database

You are currently viewing the URLhaus database entry for http://87.121.221.212/mazx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2676882
URL: http://87.121.221.212/mazx.exe
URL Status:Offline
Host: 87.121.221.212
Date added:2023-07-05 06:07:07 UTC
Last online:2023-07-26 07:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2023-07-05 06:08:06 UTC to abuse{at}des[dot]capital)
Takedown time:21 days, 1 hours, 35 minutes Bad (down since 2023-07-26 07:43:18 UTC)
Tags:exe Formbook link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-07-11n/aexe 571890d2bedd6cc0cdf6cccc2e6fc4e19c7489adc30328c24d21e3631d24661en/aFormbook
2023-07-10n/aexe 893275fb1e069e0fab29d6dcfe9c169227737b6e57ddb317213a6682ae2b6fa5Virustotal results 28.17% Formbook
2023-07-06n/aexe aa0c2b613d4f715142f0075b82d6cc18d718a480942303521ed534b297a8318en/a Formbook
2023-07-06n/aexe f5faa1f9d476120a03f1a187f2f9814adf698fa9c0123ed44a2b5ce9ad8055bdn/aFormbook
2023-07-05n/aexe e165bef062d93e5a4fd31d8f369fd8144d2158b5c8dcb85be3e06826cb5f81e6Virustotal results 35.21%Formbook