URLhaus Database

You are currently viewing the URLhaus database entry for http://proxy.amazonscouts.com/yuop/66eff9f890580_appSetup.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3223637
URL: http://proxy.amazonscouts.com/yuop/66eff9f890580_appSetup.exe
URL Status:Offline
Host: proxy.amazonscouts.com
Date added:2024-10-07 19:14:25 UTC
Last online:2024-10-22 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-10-07 19:15:15 UTC to karina-rashkovska{at}ukr[dot]net)
Takedown time:14 days, 21 hours, 11 minutes Bad (down since 2024-10-22 16:27:05 UTC)
Tags:LummaStealer

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-16n/aexe 4ae4648f04bf19dca1e3cc4f34fbeee9db0d032c73315355ae639ff003e05f83n/a 
2024-10-15n/aexe 9f675f7cb66357239070d37c09d8d638a2091e8378ea44edb6f766751d5e5002n/a 
2024-10-09n/aexe 86fae0b91a3f2574cd12d85204b3e9b9e7e3e75c4ce6f6a75c5292ddba793dffn/a 
2024-10-07n/aexe 350b72b192ad0cef2708a199ae5e89572b3a2a868488d9cc97785ed5f4d9c5d2Virustotal results 76.27%LummaStealer