URLhaus Database

You are currently viewing the URLhaus database entry for http://147.45.44.104/yuop/66f5a53dda014_crypt.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3207763
URL: http://147.45.44.104/yuop/66f5a53dda014_crypt.exe
URL Status:Offline
Host: 147.45.44.104
Date added:2024-10-03 10:39:03 UTC
Last online:2024-10-22 16:XX:XX UTC
Threat:Malware download Malware download
Reporter: NDA0E
Abuse complaint sent (?): Yes (2024-10-03 10:39:11 UTC to karina-rashkovska{at}ukr[dot]net)
Takedown time:19 days, 6 hours, 19 minutes Bad (down since 2024-10-22 16:59:09 UTC)
Tags:exe LummaStealer

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-22n/aexe 322aaa8eb1edcb4f9945279a1b8a76c4c4f016ed23c4e06c42c0d374eb346d04n/a 
2024-10-19n/aexe c4220cc907c00283f62650e772e2731d61e02b29df2255750ac97a8d65168507n/a 
2024-10-19n/aexe a6e6a9a9db26587a17754de74c19614f15ea260840e24179b557e54ae4f98c14n/a 
2024-10-17n/aexe 4104f4fbc71cd19bcca16e42ce9529b847296ade7c949a6d0ae3d98074ab1a8dn/a 
2024-10-16n/aexe 27e61cf5cfbedd10f664b238da96d885d4b8acc3455cef0e087661b058634635n/aLummaStealer
2024-10-14n/aexe 568f61fd030f0164b6cd5e481b01bcc10134ee36e01bfd43b656106a1863af00n/a 
2024-10-03n/aexe e2a2430866d3186a75e84da8443e4b306aaa91527e4e8856c1a7f7e217aade81Virustotal results 68.57%LummaStealer