URLhaus Database

You are currently viewing the URLhaus database entry for http://males.mugutu.com/ldms/7f3c2473d1e6.exe#sp_vid which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3216299
URL: http://males.mugutu.com/ldms/7f3c2473d1e6.exe#sp_vid
URL Status:Offline
Host: males.mugutu.com
Date added:2024-10-06 12:46:07 UTC
Last online:2024-10-09 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Bitsight
Abuse complaint sent (?): Yes (2024-10-06 12:47:08 UTC to karina-rashkovska{at}ukr[dot]net)
Takedown time:3 days, 2 hours, 1 minutes Bad (down since 2024-10-09 14:48:37 UTC)
Tags:dropped-by-PrivateLoader LummaStealer Stealc Vidar link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-09n/aexe 53e0a2da42ca576d96a70ce70f1b1817230456a4e66e6ae58ed4167c260be391n/a 
2024-10-09n/aexe 4306100cb31ae0fca779e56963ef5f327a428954a815d3b9424b608e6ec3a8fen/a 
2024-10-09n/aexe 6727476baca4acfa82920ef3bc360a300bf5137791ebcf6d195a852a37bceca4n/a 
2024-10-08n/aexe a0f1b9c4a6fba64a6f7be086ff71afbd8ee8151471884b8e0779f698f4bfb834n/a 
2024-10-08n/aexe d85f32606404c77998bb0eb875fbd5091159d823babbca22b3afd94335f0a0c5n/a 
2024-10-08n/aexe e1f6dec156086574076959eb94af6cad8ed9e335ede720e574170819bc6c6278n/a 
2024-10-08n/aexe ae4652c4433d845665b44f36ba2e4188ca5e33a1df4ea3183af5f3cfbc0d3614Virustotal results 21.92%Vidar
2024-10-08n/aexe c5c589750dd358e0a11d017551f4889665ccbff04cebbc5448f71b01416e143dn/a LummaStealer
2024-10-08n/aexe 85c5eb205bffaa98daaa261a17c8f38e13b0fb2fc0e012ffa19af3d4ab6b4813n/a LummaStealer
2024-10-08n/aexe 2c90b8d93d2a2cdfcbc024099dc866acd34a89c1f4aa597c4f21ab2061a5e2b2n/a LummaStealer
2024-10-08n/aexe efe009cccba55e069392a76e833c36984fcee4e86c16a48f0e4dbcfbb56852b5n/a LummaStealer
2024-10-08n/aexe c60e631b614e15e7c025f011836997fd34867ab89d3260b0b50727bf651c8c4cn/a LummaStealer
2024-10-07n/aexe 8bd9125f50c5d4050780972bbe7fc81253f866e902ab965a9412868138f5a7e3n/a LummaStealer
2024-10-07n/aexe 28e5db508bbc80a7d9e5900aeb15d8eab24e241dd1e9279abb618fe980672375n/a LummaStealer
2024-10-07n/aexe 0e0eef4dc62fa4388dbc40cd4d7738942abba54bd6808fb6ebb4926d4c0de390Virustotal results 23.61%Vidar
2024-10-07n/aexe f1bedbd519ad0e2f211b23fbed256dbf274e72c591d6133a77d712f6a894ea6fn/a LummaStealer
2024-10-07n/aexe a65dadd40bf16ea07c92d07b0cd602390866f4a9ffb6478b114bcf6ffd131d26n/a Stealc
2024-10-07n/aexe 094b2c3b591cd812b4890ea0e2c7c79658b6452f336925f1e3a1027f86b4e31cn/a Stealc
2024-10-07n/aexe a2c455eafbdf70154e8696e9a333994e7f3819e993b2fead43069783851f1570n/a Stealc
2024-10-07n/aexe 058ff02c16fc7e9f9af959170c7155c9d37ac723b824c1546e404734f535a3bbn/a Stealc
2024-10-07n/aexe cf080ecf1b49f41b41f504264e805887b80f739d596971093afeeb9254761da9n/a Stealc
2024-10-07n/aexe 998db1093fba6e39dd6baa067ac2981451947dda769312d43d1c6c1cadbda3c3n/a Stealc
2024-10-07n/aexe f655c42917dd0c1287bcf47561c4200cb79c6240f41492f675093077d7a2e350n/a Stealc
2024-10-07n/aexe f754c5c7f44951ec07e037b39af702849b07998f37edd249d54ead17fce888a6n/a Stealc
2024-10-06n/aexe c97981f98cede375ca3c46325450be958745ec0bb0d145ef95dc4fac450094b0n/a Stealc
2024-10-06n/aexe bb86fe00919919ed886033e7006607dd0180cdcb3a7a1bdf6da15810c19cd22an/a Stealc
2024-10-06n/aexe db30ea9c5367e95d5aa347e3c821b690343f593fdc257e7802fed7e14df4cdb5n/a Stealc
2024-10-06n/aexe 671191f9920d167f4f39d106093804de305c34e6853264dc8ccf1bcac6f6bc9bn/a Stealc
2024-10-06n/aexe cb521bcf0eedc08f1e79613098dea9380b2e8bb2d7a727b9f400c3dda1ce1dc8n/a Stealc
2024-10-06n/aexe 6951e56ee86f60d39de58fb2f898f079b6ee6cd202b62246d89167b94a4d8015n/a Stealc