URLhaus Database

You are currently viewing the URLhaus database entry for http://proxy.amazonscouts.com/yuop/66b274e0e1b95_shapr3D.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3223640
URL: http://proxy.amazonscouts.com/yuop/66b274e0e1b95_shapr3D.exe
URL Status:Offline
Host: proxy.amazonscouts.com
Date added:2024-10-07 19:14:28 UTC
Last online:2024-10-22 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-10-07 19:15:15 UTC to karina-rashkovska{at}ukr[dot]net)
Takedown time:14 days, 21 hours, 22 minutes Bad (down since 2024-10-22 16:38:06 UTC)
Tags:LummaStealer

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-21n/aexe ea6357285cfc579cc24158cabf3de07c0edc36a7b55674b0c7f3ab9e0096fdf0n/a 
2024-10-19n/aexe cb2d532a18c5e575bd29bace8ca4f83a71274769c40a225f777819d25346ff68n/a 
2024-10-19n/aexe 2188884322807ca6c283423620e9352e78fa8beb3180127d4c7eb1d7abf837cen/a 
2024-10-16n/aexe 12c5912dacbbb1c2c7aaeb317c52459a117b7b029a9f0ebef61d7f63aa2af94dn/a
2024-10-12n/aexe 39feaf013df932b5451ce232992f21847e557a3c4b9afd05b3074bbefa013898n/a 
2024-10-07n/aexe fc678f0540da23c49928f774b88856d297ae5732f48e154279a78da2ff4af566Virustotal results 76.39%LummaStealer