URLhaus Database

You are currently viewing the URLhaus database entry for http://proxy.amazonscouts.com/yuop/66d9de22f231f_crypted.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3223466
URL: http://proxy.amazonscouts.com/yuop/66d9de22f231f_crypted.exe
URL Status:Offline
Host: proxy.amazonscouts.com
Date added:2024-10-07 19:11:36 UTC
Last online:2024-10-22 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-10-07 19:12:10 UTC to karina-rashkovska{at}ukr[dot]net)
Takedown time:14 days, 21 hours, 0 minutes Bad (down since 2024-10-22 16:13:00 UTC)
Tags:RedLineStealer link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-16n/aexe cde690a2c6e511666954f43126d2ed5c9a0f1c0c8de16853f07556fd9968a8d7n/a 
2024-10-07n/aexe 65bb6281d63ad091f8b6b4d0c460d9d6c1631fe141fe15b23dc6d23a41e094adVirustotal results 84.72%RedLineStealer
2024-10-07n/aexe 2ca6e5776188da9ce05168b8793f3f8a50ad980fc652cf81aef47d954bdd1003n/a