URLhaus Database

You are currently viewing the URLhaus database entry for https://softcatalog.ru/builds/offers/12.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:326350
URL: https://softcatalog.ru/builds/offers/12.exe
URL Status:flame Online (spreading malware for 6 years, 3 months, 11 days, 9 hours, 24 minutes)
Host: softcatalog.ru
Date added:2020-03-18 10:00:07 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (malware)
SURBL :Not blocked
Quad9 :Blocked
AdGuard :Blocked
Cloudflare :Blocked
dns0.eu :Not blocked
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: 0xFrost
Abuse complaint sent (?): Yes (2025-08-11 17:44:09 UTC to abuse{at}selectel[dot]ru)
Tags:exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-06-0212.exeexe c60c3a7d20b575fdeeb723e12a11c2602e73329dc413fc6d88f72e6f87e38b49Virustotal results 14.29% 
2025-05-0112.exeexe 85ddc30b6b53ebe529688528e74bcfd74df0b93ea29ee1693d7d9aeec4d48776Virustotal results 20.55% 
2020-03-18n/aexe 8e553e9aa721db167bdeaf7748bb09d4f497e3a469fd09b6a995ea25d378f1fbVirustotal results 0.00%