URLhaus Database

You are currently viewing the URLhaus database entry for http://185.215.113.16/doma/stone.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3271006
URL: http://185.215.113.16/doma/stone.exe
URL Status:Offline
Host: 185.215.113.16
Date added:2024-11-02 05:11:08 UTC
Last online:2024-11-04 15:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2024-11-02 05:12:08 UTC to automatic-abuse{at}eliteteam[dot]to)
Takedown time:2 days, 10 hours, 37 minutes Poor (down since 2024-11-04 15:49:14 UTC)
Tags:32 Amadey exe healer

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-11-03n/aexe 7e3b498a6ab112773c212a1dc15968572b9d86df32dfcefdfd04432435e8d29cVirustotal results 52.78% Healer
2024-11-03n/aexe 97f29e138df5a6bacf5533fc5536c034efc49f6eba97a22bc52ac5aca89a69d9Virustotal results 52.78%Amadey
2024-11-03n/aexe 6c7535401e739bbf3002dd48767b58a5989a23de0f787951fab04bbd39582d61n/a Amadey
2024-11-02n/aexe 0fed91254f03a3bff84798b10a7adf64b664d35c3e1fe0cc66ffe57908210870n/aAmadey
2024-11-02n/aexe 8a2233bb4ba4b75321203b06b211455f09c60c52bc56a11fb36d9ce0d0ee7d20Virustotal results 52.11%Amadey
2024-11-02n/aexe 51c35cc8bfc37189048a0454992f30143289dcace11c5fc108db47e91f467bd0Virustotal results 60.56%Amadey