URLhaus Database

You are currently viewing the URLhaus database entry for http://asx.sunaviat.com/data/pdf/august.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2769084
URL: http://asx.sunaviat.com/data/pdf/august.exe
URL Status:Offline
Host: asx.sunaviat.com
Date added:2024-02-24 09:01:13 UTC
Last online:2024-02-24 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Not blocked
Reporter: spamhaus
Abuse complaint sent (?): Yes (2024-02-24 09:02:13 UTC to abuse{at}cloudflare[dot]com)
Takedown time:6 days, 3 hours, 24 minutes Bad (down since 2024-03-01 12:26:49 UTC)
Tags:dropped-by-SmokeLoader Socks5Systemz link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-03-01august.exeexe 61826519e9a43e2c36997679879492a5eae6d46ea566c8540d947175b5cb744fn/a Socks5Systemz
2024-03-01august.exeexe 211afd222db6cdf18a96dec9a52c8701508f338f352ef7af0ab3636a91206fcan/a Socks5Systemz
2024-03-01august.exeexe e98174ac63f6328f3bfeb3663c81a2c0084de276cf602ec91db3065d17868135n/a Socks5Systemz
2024-02-28august.exeexe 81c0c425571cb09a0f4a5afe7ccc0870a9f18e3dcd97877f8dcfa97e2632a22bn/a Socks5Systemz
2024-02-28august.exeexe 63d2345210563a78e03aed9aa909b7a3ee727e6a75a93ccef4e6ee9cc5e385adn/a Socks5Systemz
2024-02-28august.exeexe 1f78ffc413e1efc75cd0f9b48888f8675ab026f704dd4eb72346e7c8ee471ebcn/aSocks5Systemz
2024-02-27august.exeexe a569e7c0c116cd5138ef145b67a6a0032fe2f55fd484e72becd248eee9bf88d9n/aSocks5Systemz
2024-02-27august.exeexe 960dce369bf0ee060ce3f5c32589a081075b9ae9123a23ebf69490f4d52f1f26n/aSocks5Systemz
2024-02-27august.exeexe 64eff7516ca3d56873cea7c8f907a595b6812f70353fa15cc253fe0c03e2248bn/aSocks5Systemz
2024-02-27august.exeexe 655ecd6b71115407178d8193ee58e389346ad0b7beeafb91f5a9314162261ea9n/a Socks5Systemz
2024-02-26august.exeexe 695488e7ebc10b758521dffa30261b4e02b3a022df0b96070ace0c05de3a4396n/aSocks5Systemz
2024-02-26august.exeexe db1ac327c445158505bfe7e0754f5b012b99998585de3a6e949da37f2e2ac93cn/aSocks5Systemz
2024-02-25august.exeexe 09259ccb51bf0b31e7515f444c5d250a445b28542bf15226f01563b2f2a5f23en/a Socks5Systemz
2024-02-24august.exeexe 3c2bf14000808bc2695ca822e72a5be83cc4f51640eb3f92633c36fd811b23d0Virustotal results 6.94% Socks5Systemz
2024-02-24august.exeexe 61e3cd393587fb708017b9bd103dbdef9817e07daefb727164a5532ae3775445n/a Socks5Systemz
2024-02-24august.exeexe f4c906588bd2f37981a38872dfb00325df3a7ada5d1f64439849555f8418c9d8n/aSocks5Systemz