URLhaus Database

You are currently viewing the URLhaus database entry for http://proxy.amazonscouts.com/prog/66df4cfda9a79_software.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3223759
URL: http://proxy.amazonscouts.com/prog/66df4cfda9a79_software.exe
URL Status:Offline
Host: proxy.amazonscouts.com
Date added:2024-10-07 19:16:28 UTC
Last online:2024-10-22 16:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Status unknown
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-10-07 22:18:09 UTC to karina-rashkovska{at}ukr[dot]net)
Takedown time:14 days, 18 hours, 29 minutes Bad (down since 2024-10-22 16:47:48 UTC)
Tags:Sliver

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-21n/aexe 02f1974214a80686807dd9881ef47d1e24f09b02a35d588162d475b758a51d5fn/a Sliver
2024-10-20n/aexe 5fd7f4a63114912b88d52c29a0302ed7e01e659f613259e2d6f83ca075c88309n/a Sliver
2024-10-18n/aexe 4bf5859d28fe881c28e131f343f2906b9458ca27a177213ab096c5efa38dd9d6n/a Sliver
2024-10-18n/aexe 52b242df24db7544ce678e99d058a6a3c9e78977a718f5a296716b4e15bb60d2n/a Sliver
2024-10-13n/aexe d31f82e23c50cd3169d321799803639ec909e3a5a975bcb7b64acd8bc319ef4an/a Sliver
2024-10-11n/aexe caedc9d4ad24f842dd9b11beb0766316514b962cb4b257742a292c794fe18f4en/a Sliver
2024-10-10n/aexe ea20bf9b1c2cdcaaffe173e617f9a3b9ac655fe6e9fa4e60fc72fabcfd5bfe2dn/a Sliver
2024-10-07n/aexe d1dd535854368f8445b62566c7e3c8c9299df68c5e5d7813d71f90d1a6cec5eeVirustotal results 69.01%Sliver