URLhaus Database

You are currently viewing the URLhaus database entry for http://nsdm.cumpar-auto-orice-tip.ro/ldms/f2e7fcb20146.exe#sp_sl which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3219203
URL: http://nsdm.cumpar-auto-orice-tip.ro/ldms/f2e7fcb20146.exe#sp_sl
URL Status:Offline
Host: nsdm.cumpar-auto-orice-tip.ro
Date added:2024-10-07 15:21:05 UTC
Last online:2024-10-09 11:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: Bitsight
Abuse complaint sent (?): Yes (2024-10-07 15:22:07 UTC to karina-rashkovska{at}ukr[dot]net)
Takedown time:1 day, 20 hours, 0 minutes Poor (down since 2024-10-09 11:22:14 UTC)
Tags:dropped-by-PrivateLoader LummaStealer Stealc

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-09n/aexe ddf3c590d0cd0bf3f871c5baa3a84e14428cecf3a929fd2c40d483e3252d45ffn/aStealc
2024-10-09n/aexe 2d249b028faa0303e3fe89f2576ce24d53e6763b4545fe91bfc950ab261637f2n/a 
2024-10-09n/aexe 20d347c984cc29d7bc7de25c5170e7e7d0ce69636bc21bfbc06f6fbe9713c053n/a 
2024-10-09n/aexe a5d3f4eb5f1b7c5b6158de4cf0890711018581e4b914a0644af76e2abcdf749en/a 
2024-10-08n/aexe 48c1073f759732f8f5618c041fc702b6ab0c55aa2470710587ff98237ae801dcn/a 
2024-10-08n/aexe 86ba832d528bd45408e0cf0561c91c193f16cd60d3d7997db9b62d7f3cab3befn/a 
2024-10-08n/aexe dcbae6355c7cefa0c340c805cd628a0b03b63a769f2c469e62a37f67959c69f4n/a 
2024-10-08n/aexe dcfd1ffd6098558a62e54890ddc019227f9973676712142c1dd50ba9e4996f39n/a 
2024-10-08n/aexe 889baf05ac65ac43001c29854019a6583474d2a020ee340440eab42c2ac201a7n/a LummaStealer
2024-10-08n/aexe a4b5361cda81bce7f77a089946579e55c5e7f4d3490eeb717a24b2df5046b240n/a LummaStealer
2024-10-08n/aexe 38c1660d5da12df35c15a642266247923cdc4c564e80f6d1d729f216554d991an/a LummaStealer
2024-10-08n/aexe dbb939fb8b11e194fc8b03ca72644397e99ed91ecf03995eb7b9e0d6ac3c907dn/a LummaStealer
2024-10-08n/aexe e274d51ea7826fd0eb19f2b12fdf5f6baa720d599229ddf9aac7e802a059a4e6n/a LummaStealer
2024-10-07n/aexe 08c820a89d527454157dc1d5921e66679f6c99cccf86b2ddb9af45c56636bbc0n/a LummaStealer
2024-10-07n/aexe 865f7d5debef700e7c9c3f0ef5b8f419d45b20af8610a9db5b1a98cca57b85cen/a LummaStealer
2024-10-07n/aexe 33105a1685207694a3de20a03c82524fe8cd7f0f19fa85ba5d88d6b4d8457660Virustotal results 38.89%Stealc
2024-10-07n/aexe 9714d301c8b96c7263dea4a36ddbdf74896d31f648d2836fa2d2642dccca17e8n/aStealc