URLhaus Database

You are currently viewing the URLhaus database entry for http://39.108.182.78/AV.scr which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2888264
URL: http://39.108.182.78/AV.scr
URL Status:Offline
Host: 39.108.182.78
Date added:2024-06-14 11:30:58 UTC
Last online:2024-09-23 17:XX:XX UTC
Threat:Malware download Malware download
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-06-14 11:31:18 UTC to anti-spam{at}list[dot]alibaba-inc[dot]com,abuse{at}12321[dot]cn,abuse{at}alibaba-inc[dot]com)
Takedown time:3 months, 11 days, 6 hours, 18 minutes Bad (down since 2024-09-23 17:49:49 UTC)
Tags:av.scr CoinMiner

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-08-16n/aexe cfac51d7fe6b6a7206f123b5d795230b89d6e7d1e9f7f2f26da7503f757b77b7n/a CoinMiner
2024-08-09n/aexe ebcdf536447cba219a13756c00c97b4ed5fea47f2cbf2283ea86e80216d3822eVirustotal results 82.67% CoinMiner
2024-07-28n/aexe 943d63298ecbbaac74f51615d3910dd84eecbcc6776ee63aa7723122f8b85e5fVirustotal results 65.71% CoinMiner
2024-07-26n/aexe 42e39038516730236cd51cb7bb880d838efd742c8a7a850cf08b62bb4d95fab4n/a CoinMiner
2024-06-24n/aexe 74dbf4ec444dde3528f8998723d1f67f80fe96c535e3ee2a5d99c6f210f06840n/a CoinMiner
2024-06-24n/aexe 707448876201f7dcaa37b7a1425847937c984b78657caa967302cbc9946ff42cn/a CoinMiner
2024-06-16n/aexe 5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fcaVirustotal results 81.08%CoinMiner
2024-06-15n/aexe 3fde84a46aea58ba4ddb5fb0473fc756ff209ba96b1a63a2759d13b8adc01a69Virustotal results 79.17%CoinMiner
2024-06-14n/aexe af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4cVirustotal results 79.45% CoinMiner