URLhaus Database

You are currently viewing the URLhaus database entry for http://147.45.44.104/yuop/66d32ff81a663_lump.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3174226
URL: http://147.45.44.104/yuop/66d32ff81a663_lump.exe
URL Status:Offline
Host: 147.45.44.104
Date added:2024-09-15 12:56:56 UTC
Last online:2024-10-22 18:XX:XX UTC
Threat:Malware download Malware download
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-09-15 12:57:08 UTC to karina-rashkovska{at}ukr[dot]net)
Takedown time:1 month, 7 days, 5 hours, 20 minutes Bad (down since 2024-10-22 18:17:50 UTC)
Tags:LummaStealer

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-22n/aexe d3475455fe7cc813cf613e60f48e44ab106888034d4a907b01112438e62c93abn/a 
2024-10-18n/aexe 0a3587509a6944fcdc123380fc1c8e58150b107edd506928cfc7774419335536n/a
2024-10-17n/aexe 36c9290476a8f845d2b47934e4fe39cd2e22806cf147d29b8bb11912bdc782cfn/a 
2024-10-05n/aexe 37fea45cbdd65c1fa9c773fc60965a6a8213555bf13241ea2121fafcf7f45868n/a 
2024-09-28n/aexe a64a4eb05915d0d45d6aae01b358ec4bb7a93648696f5f8bdf845e265993dc41n/a 
2024-09-26n/aexe 25bb197281a65228f25fa30d9eef985aceda86601ff97b6762d4c6eb31ddfee1n/a
2024-09-18n/aexe c16daf9a982076c565dad550a28f17de08ba24ecb50c7a37acd3f9507ba46dafn/a 
2024-09-15n/aexe c283cfee5706e6a4a88f851882719751516656aefab8d80fe9a34351ea98a648Virustotal results 66.22%LummaStealer