URLhaus Database

You are currently viewing the URLhaus database entry for http://77.91.77.82/chupa/leva.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2934723
URL: http://77.91.77.82/chupa/leva.exe
URL Status:Offline
Host: 77.91.77.82
Date added:2024-07-05 15:43:10 UTC
Last online:2024-07-06 17:XX:XX UTC
Threat:Malware download Malware download
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-07-05 15:44:12 UTC to abuse{at}sunhost[dot]ltd)
Takedown time:1 day, 1 hours, 18 minutes Poor (down since 2024-07-06 17:02:48 UTC)
Tags:exe Stealc

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-07-06n/aexe 8e75f2282e258d31a73291afe74878e0aac251beeed5163fe9031897e45517a9Virustotal results 57.53% Stealc
2024-07-06n/aexe 6bf4612c1b4d71558e998e0761e3e4b4481c89ae3827622e86a81f46c08d7332Virustotal results 47.30%Stealc
2024-07-06n/aexe 179f7c98dab9536a149dbbeee298e9153c3a01fc94a2c48377118231246200acVirustotal results 47.30%Stealc
2024-07-05n/aexe 60d7123cafb385bba287360f90d6f682c6397f8feb030ac0d36f4473b779ab3cVirustotal results 47.89%Stealc
2024-07-05n/aexe 441f614bb8a71a458b9f8274f807c33550d0a91304b7b1bc25c23c6cd8d9b616Virustotal results 47.95%Stealc
2024-07-05n/aexe 8e7963520355e4078e56aa0cbb4b38d6ca934a05ae11005a396ff917991116ffVirustotal results 47.30%Stealc