URLhaus Database

You are currently viewing the URLhaus database entry for http://77.91.97.131/333/Eliz.bat which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	2715464
URL:	http://77.91.97.131/333/Eliz.bat
URL Status:	Offline
Host:	77.91.97.131
Date added:	2023-10-01 13:36:14 UTC
Last online:	2023-11-07 22:XX:XX UTC
Threat:	Malware download
Reporter:	JAMESWT_MHT
Abuse complaint sent (?):	Yes (2023-10-01 13:37:05 UTC to abuse{at}sap-dedic[dot]ru)
Takedown time:	1 month, 7 days, 8 hours, 43 minutes (down since 2023-11-07 22:20:47 UTC)
Tags:	77-91-97-131 bookinggoogledrive RedLineStealer

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2023-11-07	n/a	exe	e9a6a5fd0e01a4ee1cf6d4c9474c92743db087361ffac9637b747cb13970af4c	n/a
2023-11-04	n/a	exe	089bfa34ea929e90906e6e642f57aca8606d80320f6d7fe12b2fadef3c8ce19a	n/a
2023-11-03	n/a	exe	bf0fef7e1d6df9f592621ed02e47b98f1abc1eea57aa70414526a46eb83512e0	n/a
2023-10-30	n/a	exe	825dfdbd6fab9abb796efb4eb85d2ae909dc84065fcf0958d250fc129f5247e9	n/a
2023-10-30	n/a	exe	90afc1f10d3da7da3a7a7cb1e99fd8b99fc367c6cf2f02979b50dd180f69987e	n/a
2023-10-28	n/a	exe	eb5969c9af7ce7c8abed1d79371e0807a0f6442c24669517df62049afc1edf96	n/a
2023-10-26	n/a	exe	3bb4c9561c9a297b626cdbf6b0e6b7d63fa8daf4325aa38becbdf581fea77eb9	n/a
2023-10-23	n/a	exe	f20b032c18a6fd4c039eaef1e93b9f48213e3e0bc014613f99b99c11bd41c72c	n/a
2023-10-21	n/a	exe	f686aa61af201b23d5482790dae31f85f9dfaa3cc1502aa6079b6c8171b327f5	n/a
2023-10-21	n/a	exe	bb408563d5078aed3a3c8a22fe27f1c7db6ab5b1c2eb01c0c4a6a0c6c2cc663f	n/a
2023-10-18	n/a	exe	9fd466e52c5f7d4bf825039f1f6d019125aefd105988ae316e7c0f76250a58bc	n/a
2023-10-18	n/a	exe	42e29ac600d233dbd9c9a1d2957943c09141250d2c077faed6e5541a50bae9eb	n/a
2023-10-16	n/a	exe	cf1d9dd6fde66993c41a5a767f2a3959fee1cdc0abaab21baf5e7b7b5b594a17	n/a
2023-10-13	n/a	exe	92ac28e8d77c38645808ab7485fab68cbbc80d802306156ff2e98ec973665bc6	n/a
2023-10-12	n/a	exe	c8d0da897b1387a596daf77386aab30dedbd801b569ddf0413b27de4c666d216	n/a
2023-10-11	n/a	exe	b4fb5c683f9d2edd20f31cbe8239459e71c2a2643d63b3fb3902572418ae431c	n/a
2023-10-08	n/a	exe	d112dbe17e8f8c6a8a7223d743f80fdc5d4e798f2389722e27fd66a5ead1e188	n/a
2023-10-08	n/a	exe	6f2afbd74d4f51bf33cf25e67afa8f39efd9636d9f4d14a216959fc825635c9d	n/a
2023-10-07	n/a	exe	1aa08521ab98380055c798609654d53b35a0c8ced70b18217bb6646275c1887f	n/a
2023-10-07	n/a	exe	fcb476bb305fc3487a7979e72a538be8de93af5d2f6592da6e6572eda831b58a	n/a
2023-10-07	n/a	exe	4ddf131c40a1d43a710245f5217725bcc279bf8396f4d640690b60d5483b62c7	n/a
2023-10-06	n/a	exe	126fe4b793273c3cf79f883308ef8f30abc284a34e540a9ee08f7241104a382c	n/a
2023-10-06	n/a	exe	7a43fe0b8a4ca78e40e002d2d1e21269b7610bedd9046a64ac6f6f4169be73b6	n/a
2023-10-05	n/a	exe	56f0f13bd919b8bd9c89868d0808ddc4d1f018995bb6600ff3ba8b496f518cc6	n/a
2023-10-05	n/a	exe	7171bc88e1eda14767efb89c9ff8da5b8bb8ef65a1daa4d8c71d11026936278e	n/a	RedLineStealer
2023-10-01	n/a	exe	549215a7b9832f2cdb44be0692842ee2bf3042a84073e53d1081ca2663db37ba	76.39%	RedLineStealer