URLhaus Database

You are currently viewing the URLhaus database entry for http://lastimaners.ug/ghjk.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2758154
URL: http://lastimaners.ug/ghjk.exe
URL Status:Offline
Host: lastimaners.ug
Date added:2024-02-08 04:17:15 UTC
Last online:2024-07-15 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2024-02-08 04:18:06 UTC to abuse{at}pro-spero[dot]ru)
Takedown time:5 months, 8 days, 7 hours, 39 minutes Bad (down since 2024-07-15 11:57:15 UTC)
Tags:32 CoinMiner exe Rhadamanthys

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-07-08n/aexe 33682e861b76b0ae22b7361f5b59bb7e69b95e69480156714f01e7044408b546Virustotal results 18.84%Rhadamanthys
2024-06-29n/aexe 893d772df3fa2baa5977dfce6f27f1df6d9ddb925ff8aad75cb8693556ceb563Virustotal results 13.70% 
2024-06-27n/aexe a2e4f1eead7d430cf08d33e04c48adb2af23b71ec4c633bc6b88d870c1d61a56Virustotal results 11.94% 
2024-06-26n/aexe 07445b196288e616e539c775b87265d10341c0c644558ba94a8525a70536e871Virustotal results 12.50% 
2024-06-26n/aexe 24f6c1b06912c2d8d46c6ac10737fd8efaaf7d18b227279f9dae584a5625c0c6Virustotal results 12.33% 
2024-06-26n/aexe 8491781afed15ad4fa80b176c3516cd3b44e7880a559ab22899b216be74cec48Virustotal results 13.70% 
2024-06-26n/aexe 8c13fdcfeb87abd390f487e9d51d7edcdd6073951a5f96e5c0b1f7d899874932Virustotal results 12.50%
2024-06-26n/aexe f567eb23dd95fe66f925bce074253f46263b0916de62d8850dd8c3ac35efc72eVirustotal results 13.70% 
2024-06-26n/aexe 47a817f85453e16e52d201810fd5a719a1fcb01c49dfd350a2fc36fef42ac442n/a
2024-06-26n/aexe a31d2bd866d61f88043596ef2723271f53f79d8f584c3fd1cae625d23772d256n/a 
2024-06-23n/aexe 7ccfae8644c3bc7439b88f2dc0de06bb5082de09b0bf5e143de17487ff252224Virustotal results 32.43% Rhadamanthys
2024-04-18n/aexe 18f614c346da012571471375643be7de20e05990649f64c7161c4e4fa2952326n/a 
2024-03-27n/aexe 432747c04ab478a654328867d7ca806b52fedf1572c74712fa8b7c0edb71df67Virustotal results 29.17%CoinMiner
2024-03-18n/aexe 8c4318b1ac3612aeb03ed9525d7fa3eb3c910b57cf1b9ba5a664c432791f9e9bn/a 
2024-03-18n/aexe 4dc4a5731364b47800189b82f0fe51fa1bda5ea828af59b57f22c88b7b13894eVirustotal results 42.47% 
2024-03-17n/aexe 4e019920140b78a5800147b77ac10b1806ef816e785283199460535d2c53f53en/a 
2024-03-16n/aexe 7fad6065eecb093a46c069185f7c35949e683ac803bbcfeb59e46ef7f19cb210n/a 
2024-03-15n/aexe e68511f1b38aabfb75225ba93f82140c763f646b27389b546eaed93f2064b6b4n/a 
2024-03-15n/aexe f064424f89f795f2e829237ba3a9277fc368305d9188887bcb0106b27b0d7ba2n/a 
2024-02-08n/aexe 217fbf967c95d1359314fcd53ae8d04489eb3c7bdc1f22110d5a8a476d1fc92eVirustotal results 79.17% Rhadamanthys