URLhaus Database

You are currently viewing the URLhaus database entry for http://185.28.39.18:7777/185.28.39.18/arinzezx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2712413
URL: http://185.28.39.18:7777/185.28.39.18/arinzezx.exe
URL Status:Offline
Host: 185.28.39.18
Date added:2023-09-19 05:19:05 UTC
Last online:2023-10-28 22:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2023-09-19 05:20:08 UTC to abuse{at}des[dot]capital)
Takedown time:1 month, 9 days, 17 hours, 8 minutes Bad (down since 2023-10-28 22:28:51 UTC)
Tags:32 AgentTesla link exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-10-12n/aexe 56d8f0df66db808a471212b1255be712064e5fddcb5102e280118fa40154506cVirustotal results 22.22% AgentTesla
2023-09-29n/aexe dfba4399135411a957312b2dd3f743d93adb849a72126f15637f5dc960d39edfVirustotal results 27.78%AgentTesla
2023-09-28n/aexe a03f61df8c3751262c68a16b3b7a39d2523bd78b7c719c31de119c134a341575n/a AgentTesla
2023-09-28n/aexe 2091183db00054d0dc8504468cdf15c10f9a4172dd36afa1d18123e59155dcdcVirustotal results 31.94% AgentTesla
2023-09-27n/aexe e9cd9d70f8062b0525cd506f100d7b7ffa446cfab6c5222c6e1425a0859afb89n/a AgentTesla
2023-09-27n/aexe f6714e172dd2e1c3df19c4f2253cc786df5f88599beb87daa914ee35bb30136an/a AgentTesla
2023-09-26n/aexe d8adff43a2a1683b04d784d5f4b7718051f949267cd387bb46f9c89ee8df59e0n/aAgentTesla
2023-09-26n/aexe f11a15b7da0864c52818f7d5d19a24a216ba5ac5ccc68b13c2c51a46bbdeb547n/a AgentTesla
2023-09-20n/aexe af4458dcaccca4a71479eccc4601fe13cd6a9be0c30e793cb6efa2f11b72a2fcVirustotal results 30.00%AgentTesla
2023-09-20n/aexe 90d2b2209116dcc2dd5b6a821cba52145bb024ce613a4fbed9e5d178298643bbVirustotal results 27.14% 
2023-09-19n/aexe f582440966060341e9ec22f54f0b8285bb7a833f1c56258de32bf4b49c26ebf6Virustotal results 30.00% AgentTesla
2023-09-19n/aexe 9f1328fa230383c7e126d5e7b20896476d36a4dd0ba7c2e8cb5c2474b8bb0141Virustotal results 26.76% 
2023-09-19n/aexe def920207a8b0b441f3744dac84c6f67c8f1ba6d84d31a3beeda75ccdf510d85Virustotal results 40.85%AgentTesla