URLhaus Database

You are currently viewing the URLhaus database entry for http://176.113.115.7/files/5265591378/JqGBbm7.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3467796
URL: http://176.113.115.7/files/5265591378/JqGBbm7.exe
URL Status:Offline
Host: 176.113.115.7
Date added:2025-03-05 11:51:08 UTC
Last online:2025-03-21 05:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2025-03-05 11:52:07 UTC to abuse{at}starcrecium[dot]com)
Takedown time:15 days, 17 hours, 38 minutes Bad (down since 2025-03-21 05:30:43 UTC)
Tags:exe LummaStealer opendir

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-03-19n/aexe 2b31d7c4cad611f0722b3f80797dbfdd3655b4499e65f8238d70db998281c092Virustotal results 54.79%LummaStealer
2025-03-19n/aexe 398b980134cecc9fc55ac2d354ed3e1f9cd74d861e476a7a433e90f88f143cden/a 
2025-03-17n/aexe 1331b5c3f80395ffae6402b057fb78395819d8851fba2b82979abcd520cf00edVirustotal results 58.90%LummaStealer
2025-03-16n/aexe 9281163159dd2ae542c514800b57f94efe32db28410c3902b85409093b860f3bn/a 
2025-03-13n/aexe ceb426731770a6cc7dcf8eb3a1c0f861e3e5e94562f7c0c37003219485e47509Virustotal results 57.35%LummaStealer
2025-03-11n/aexe 60399fd96e667a732cbe4cb91b6fcf93a8c980e3de2ad0918e46769f86ffaae2n/a 
2025-03-11n/aexe e5f7e1595de12406ced904707d3de7a1b6dfabed4f6b548ce6966c359fd26511n/a 
2025-03-07n/aexe db1a570eff9949a46f71e60ebc655d82f3caa61c0721ff83d52b27af8e5d781eVirustotal results 52.78%LummaStealer
2025-03-06n/aexe 2ebcbd95fec173669761c21314e521835ad74a657d844938538f4de0e2cca3c9n/aLummaStealer
2025-03-05n/aexe db15e9537c66a283d59f45e262018c45ef3fc5416b292b2c5269f4f9a4f10017Virustotal results 77.78%LummaStealer