URLhaus Database

You are currently viewing the URLhaus database entry for http://194.169.175.118/traffico.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2730289
URL: http://194.169.175.118/traffico.exe
URL Status:Offline
Host: 194.169.175.118
Date added:2023-11-13 14:16:06 UTC
Last online:2023-11-24 15:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2023-11-13 14:17:06 UTC to admin{at}211760[dot]net,netops{at}211760[dot]net)
Takedown time:11 days, 1 hours, 27 minutes Bad (down since 2023-11-24 15:45:03 UTC)
Tags:32 exe RedLineStealer link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-11-24n/aexe d5a0e92c56a349b8096fe3fe2639ab082d02d85a539ad9fbdc0332e21b92f4f9n/a RedLineStealer
2023-11-23n/aexe b75e4a6e4bdb038aaa2f2e9801adff521b40e2b7875aff1cdcd9ff6cc4899091n/a RedLineStealer
2023-11-22n/aexe eacefda15af74c54cd5686705116e45b26ad02eba739d40b13c4789eab562ff1n/a RedLineStealer
2023-11-21n/aexe 2d8f2a977d7eb27de7ecfe5631b53a3fb663c930d33c9fd7a8081f128c4c808bn/a RedLineStealer
2023-11-20n/aexe 29565a9bd84c62eb1f0d7d1210476b5564eaeba5aee5e4379eed74da7d31a42aVirustotal results 37.50% RedLineStealer
2023-11-13n/aexe 478835ca1137267822d1caee2fa8aa278badedb7f0a73e3d12c93805a33ec4d6n/aRedLineStealer
2023-11-13n/aexe bc3ce9adeb97d068e11f11fe6219ff29fd6e17ed2e5c175a19bbd5071fc32358Virustotal results 38.89%RedLineStealer