URLhaus Database

You are currently viewing the URLhaus database entry for http://79.137.192.18/31839b57a4f11171d6abc8bbc4451ee4.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2703985
URL: http://79.137.192.18/31839b57a4f11171d6abc8bbc4451ee4.exe
URL Status:Offline
Host: 79.137.192.18
Date added:2023-08-11 23:42:09 UTC
Last online:2023-10-09 22:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2023-08-11 23:43:04 UTC to abuse{at}lethost[dot]co)
Takedown time:1 month, 28 days, 22 hours, 18 minutes Bad (down since 2023-10-09 22:01:40 UTC)
Tags:32 exe glupteba link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-09-09n/aexe 27026282d2170cd2dc30551e302b4615e8a66ba719333fd1b02d2259603bacc7Virustotal results 80.28%Glupteba
2023-09-03n/aexe a09d7d79ba4e1177ee17cc8f10e21508b3b69cf2a29c0f8b3bb478a65ad60846n/a Glupteba
2023-08-30n/aexe 63cc4816ad2c1aef24453c1455da828fff06962b36bc33dab7e2b9005465ef4an/a Glupteba
2023-08-27n/aexe 3c3765a39069b1f6dbcaafb23721a289df7c3e1b540e2de3c76facb867bba7dfVirustotal results 46.77% Glupteba
2023-08-19n/aexe f9d21597eb2b1e91e51ceee8864d7ff32b901ed05490d3c6003745c35d124e73n/a Glupteba
2023-08-11n/aexe f2d0f2dac71c7ee35134c60db2f50514005e58832b2dedc388080c71dad6f411Virustotal results 38.03%Glupteba