URLhaus Database

You are currently viewing the URLhaus database entry for http://hans.uniformeslaamistad.com/lopsa/66f40fe9d79af_Screen.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3211421
URL: http://hans.uniformeslaamistad.com/lopsa/66f40fe9d79af_Screen.exe
URL Status:Offline
Host: hans.uniformeslaamistad.com
Date added:2024-10-04 18:50:03 UTC
Last online:2024-10-22 15:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Not blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-10-04 18:52:09 UTC to karina-rashkovska{at}ukr[dot]net)
Takedown time:17 days, 20 hours, 13 minutes Bad (down since 2024-10-22 15:05:30 UTC)
Tags:exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-22n/aexe d534e3fb4b8574513f83c395ffcc41e15ba3f334c676ed38304c31f0d4094c14n/a 
2024-10-17n/aexe 4c4aa8978adb7407935769123621495a7cbad977bf06f1055f7b5e845bd5afb8n/a 
2024-10-15n/aexe fd25a8037d3105d85aa96ed199c068b8246517d69fef99444d50610b82217e9dn/a 
2024-10-13n/aexe fa8d6e327d405748620924e5f4645b17fdf4f89d79bb7a7a856e304d6d94ef2fn/a 
2024-10-07n/aexe 94f3e803b8cfe42b8dfb506a8b9f4bd3ef0c47582a154c3376b8e9509645dc1an/a 
2024-10-04n/aexe aed9ff38a0ed96ca781aa31ba4a6c5d9ad091ea9994b47a902f5b7999614267cn/a 
2024-10-04n/aexe 316f810411d65ef8ec37277aa80e2e63a4952a59a463549fe34d85cf9b773395Virustotal results 63.89%