URLhaus Database

You are currently viewing the URLhaus database entry for http://147.45.44.104/yuop/66afa0d3934d8_ultfix.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3100097
URL: http://147.45.44.104/yuop/66afa0d3934d8_ultfix.exe
URL Status:Offline
Host: 147.45.44.104
Date added:2024-08-10 16:53:33 UTC
Last online:2024-10-22 16:XX:XX UTC
Threat:Malware download Malware download
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-08-10 16:54:08 UTC to karina-rashkovska{at}ukr[dot]net)
Takedown time:2 months, 13 days, 0 hours, 0 minutes Bad (down since 2024-10-22 16:54:37 UTC)
Tags:exe GoInjector RedLineStealer link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-21n/aexe 243bd43223dca884d79b4c3fa0f17f1f58a06986cf3670df4dda847398078153n/a 
2024-10-18n/aexe 9a35dcfe0952e63f8ac7dd88d738e27d83a43c1980a6862c77d1498800b24b1en/a 
2024-10-14n/aexe 1e51284dea11cfbcccf13a9e13f70418b811d4722ef4c077f590f2df92d49a47n/a GoInjector
2024-10-11n/aexe d680abc5ad848e76fd7183bd608d2aeed24c9a0cce72ce50e3c4d9ff420c7fb0n/a 
2024-10-10n/aexe 8438cb58ecfbc79935139fb55f9f38bde264e835d301228d548abf0e03450029n/a 
2024-10-03n/aexe 5fb7920e46cfa339da3e457b2b02e1de78693ff9923ef523ac8bc82e893832a7n/a 
2024-09-19n/aexe 08c0f2b3273c39603513cc179b3a7a6cd4c9d733a9b671c2437f2a06a9a004d1n/a 
2024-08-21n/aexe 8f93c94ab742ab1ef087076ac824c49ecb030839ede4878111b41dc552f69f15n/a 
2024-08-19n/aexe 78f9c4643dc082ae0e0eb71c493cc1260c3a8b57eff4caeb6a8687253a0c14d4n/a 
2024-08-14n/aexe 82bdd62528816df4281174ce8f1318c8f83e412e30e139b677449df32f517697n/a 
2024-08-14n/aexe 0d0fd75e40329e1401d73f0ffb00cb92161d36b390369854b9506e04cfab7db5n/a 
2024-08-13n/aexe 70fd7cd5e8015e0f207e84fe8814cde1c16f626145cb3738172b5523dd66f857n/a 
2024-08-13n/aexe 9ddb073ef58eae98cea3dfe5409bee1ebefd0d963319940da929e8bcc8c033ben/a 
2024-08-10n/aexe 376e2bf5b6e33141d5cf41f0428cf55b0aa49ec2b583d8dcebf46b18b47c933cn/a 
2024-08-10n/aexe a0906077d04dbccf4fdcaa15f49f5d214bfdb2baf845126d44ff638f620681bfVirustotal results 16.22%RedLineStealer