URLhaus Database

You are currently viewing the URLhaus database entry for http://87.120.84.38/txt/Wiye6UdJ0SnCj7z.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3234787
URL: http://87.120.84.38/txt/Wiye6UdJ0SnCj7z.exe
URL Status:Offline
Host: 87.120.84.38
Date added:2024-10-14 15:32:10 UTC
Last online:2024-10-20 23:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2024-10-14 15:33:12 UTC to abuse{at}virtualine[dot]org)
Takedown time:6 days, 7 hours, 42 minutes Bad (down since 2024-10-20 23:15:22 UTC)
Tags:exe MassLogger link VIPKeylogger

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-18n/aexe b8f3bee7d858d326011e8e3b7c0ee729d88d91e43fca77a226ec9db6ae4754edn/a 
2024-10-16n/aexe 86a6e101de8ab27931da6f90ce9378814a7779141c628a918f4d24557dfbd8b0n/a 
2024-10-16n/aexe 0abf3ef17c7e4b3f31e4294f666e4ae53062eafcf3cd6766d147837666b50e0dn/a MassLogger
2024-10-15n/aexe 1a577957af511edbb16df6070d54ae754c869c5b05787e26820ac83e669fcbf6n/a MassLogger
2024-10-14n/aexe 44223862b1ca9060ca97e5f36246dc1efd66a68745380ac1a6a221f0bc485b35Virustotal results 28.77%MassLogger
2024-10-14n/aexe 0868d29bf99ab1267ab55c306ecba0d147e12c1e8c6cec05acd76ded3e4edd1bn/aMassLogger