URLhaus Database

You are currently viewing the URLhaus database entry for http://partadino.ac.ug/ghjk.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2758177
URL: http://partadino.ac.ug/ghjk.exe
URL Status:Offline
Host: partadino.ac.ug
Date added:2024-02-08 05:47:06 UTC
Last online:2024-04-20 00:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2024-02-08 05:48:04 UTC to abuse{at}pro-spero[dot]ru)
Takedown time:2 months, 11 days, 18 hours, 39 minutes Bad (down since 2024-04-20 00:27:47 UTC)
Tags:32 CoinMiner exe Rhadamanthys

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-04-18n/aexe e2a99dc4a24688a9d82636facf87db1eb5b18fed0b5d40f785db479360ae95cbn/a 
2024-03-27n/aexe 432747c04ab478a654328867d7ca806b52fedf1572c74712fa8b7c0edb71df67n/aCoinMiner
2024-03-18n/aexe 4dc4a5731364b47800189b82f0fe51fa1bda5ea828af59b57f22c88b7b13894eVirustotal results 42.47% 
2024-03-18n/aexe 6f07f3f96d5804e87e9e4f83140033c414ce5da4d9ef7b06a19f35598cbb0f66Virustotal results 58.33% 
2024-03-18n/aexe a77859e55618cb649960e12077066c9150b5daca80a222e2718833b1504f2c32n/a 
2024-03-17n/aexe f4c244c2a8008049ef112eb4807161606f7efbd343d2eca5aabb62ba3e97878dn/a 
2024-03-17n/aexe be73738191878fdc49c8994b60069df39e835b6bae6a4a8ded041c87b8514e1dn/a 
2024-03-15n/aexe 759dd2f2e365748ba550f61510c9f1957ed24e4b393de98e7b779076b5a38946n/a 
2024-03-15n/aexe d616adca150dfe2196fd372bbdb92b8cd84e5422c07a4f1895262d7664dac38fn/a 
2024-03-14n/aexe e724bc6df0ebb8c6abad0b5eac762d4f9126e40e6ce5cdf02d9b1135460c4207n/a 
2024-03-14n/aexe 9aaab72f7ab965df62a5efc9210b7e86834ba404f3c80183645d9846bc023aabn/a 
2024-02-08n/aexe 217fbf967c95d1359314fcd53ae8d04489eb3c7bdc1f22110d5a8a476d1fc92eVirustotal results 79.17% Rhadamanthys