URLhaus Database

You are currently viewing the URLhaus database entry for http://77.91.77.81/cost/num.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2903968
URL: http://77.91.77.81/cost/num.exe
URL Status:Offline
Host: 77.91.77.81
Date added:2024-06-24 10:01:08 UTC
Last online:2024-07-24 13:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2024-06-24 10:02:07 UTC to abuse{at}sunhost[dot]ltd)
Takedown time:1 month, 0 days, 3 hours, 24 minutes Bad (down since 2024-07-24 13:26:52 UTC)
Tags:32 exe Stealc

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-07-22n/aexe 3c2245fb7f3d374d8685a573a6cafbe79b5807f0f8cbd52f0cf4a203b785ab06Virustotal results 56.76%Stealc
2024-07-21n/aexe e9e8387e07a0b20cd448abc1fb9654c2188de5e10c074e71030c8dda74e5701cVirustotal results 56.76%Stealc
2024-06-26n/aexe e6c76393ad6b5516ed6e84adbd0687f981bf3c419e99d9c235a6948e63d383d4Virustotal results 41.10%Stealc
2024-06-26n/aexe 76244ccdd68ec711ddc966da515332d391487bf9f25d4e115963fb20969f4e9fVirustotal results 41.89% Stealc
2024-06-25n/aexe 2e1662bc8b93a8cea652f916afa628ce5646e3b62d15cf584188f7df066dca73Virustotal results 37.50%Stealc
2024-06-24n/aexe 99dfe8a4454f28c944e3c749150aecdaa97e19bcc5a9cf644a509b7eb1d4e50fVirustotal results 54.05%Stealc
2024-06-24n/aexe c4c0310bc779bb4ba051be5fe124c783a101e9d0ba03e530292e69ab00cd9ceaVirustotal results 51.35% Stealc