URLhaus Database

You are currently viewing the URLhaus database entry for http://80.64.18.219/well/random.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3532656
URL: http://80.64.18.219/well/random.exe
URL Status:Offline
Host: 80.64.18.219
Date added:2025-05-02 11:59:13 UTC
Last online:2025-05-07 14:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2025-05-02 12:00:10 UTC to abuse{at}stimllc[dot]ru)
Takedown time:5 days, 2 hours, 40 minutes Bad (down since 2025-05-07 14:40:28 UTC)

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-05-07random.exeexe dce58402161634deddfe6a5163c6d2f09aad572e11cffb494f2683512c22c25dn/a CredentialFlusher
2025-05-07random.exeexe 04ce044d553f7a6ea538a240ae7fc48a4cbc62c144663ae180a5dc96ababfed0Virustotal results 26.39% CredentialFlusher
2025-05-07random.exeexe f7ab4e40281281269233d22e20affae234ef7c1bc776eb8353b030eeb515e8e0n/a CredentialFlusher
2025-05-07random.exeexe fbdaa34cf96318452714143d52539c223b4be42ce8530e284673b93236eb5810Virustotal results 26.76% CredentialFlusher
2025-05-07random.exeexe c79ddd08c7c47c76256907d6d937aacc8f6f1855117b16477674f8eaec4bf1e0n/a CredentialFlusher
2025-05-06random.exeexe c5e77e849db51fcabb59d50ae5ff78799715e4a34c620bc3e10a9d15119cdb84n/a CredentialFlusher
2025-05-06random.exeexe b18392f01c99ee44a2ce0206be4387013d12304726cb49f27541bd03238a7b5an/a CredentialFlusher
2025-05-06random.exeexe fa069b8a7c26e328caa1b7b39593696f2d517566c7c216d9384568ef7fdf06aan/a CredentialFlusher
2025-05-06random.exeexe 27d893d06620c1ab091069ed3bd01fa67edd6a2d9e420f56f974b4f186150c94n/a 
2025-05-06random.exeexe f47f8995a5218e8c5bce19714908bf5fa25093ee59bf34976960e585569b3819n/a CredentialFlusher
2025-05-06random.exeexe a150eb7b2afc55e3603de31784c75953247dd9e79560e2d0bf98caa315829645n/a CredentialFlusher
2025-05-06random.exeexe b80b18f831c37bc8fa5d0fabe9aebc9aa807657080cbdde9cf37d951b5c93fa4n/a 
2025-05-06random.exeexe d4822b144fffd190be562d57d0369f3a49f27f0c9c64444b2ccb7a210132389dVirustotal results 27.78% CredentialFlusher
2025-05-06random.exeexe f424ba1553aa46d54530be327bf1c7eded9f640b9d4ef30e0afe31d0a9bbe2a1n/a CredentialFlusher
2025-05-06random.exeexe 094fc4fa9d15eb62ae375075e3aab8b6dd5f26051fefb07f15fff4584419dcb7n/a CredentialFlusher
2025-05-06random.exeexe c92d00ad81536dc3c8782dae4882d379b6d38ca375a938eaa981112dfe6c6ad8n/a CredentialFlusher
2025-05-05random.exeexe ebb08357b9377669222a923af5586d49683eaad13b4de012b9a6e97e67dde350n/a CredentialFlusher
2025-05-04random.exeexe 1c2186ba4df7ed5c3bbe3a8c7cbca28bcff84debc88ed0348aa66d3243f55e3an/a CredentialFlusher
2025-05-03random.exeexe 4fd82ce4aeb0a7686bbc3666e26c2fcb642a3a46f23469cd0f80ae1e716c7c73Virustotal results 26.39% CredentialFlusher
2025-05-03random.exeexe 4577dabf474d2fb34ad164be5cb509bb175285852ae1fae6659d5f7cfaa44d48n/aCredentialFlusher
2025-05-03random.exeexe dc81f381d5a133373e89a2e71ead659e937e566a006cbe89a57d9e5a4264a8abn/a CredentialFlusher
2025-05-03random.exeexe a92bb0374034d7599dadbfd1c9ea4b82447091c8ce1bc9a62c544d084aba42cdn/a CredentialFlusher
2025-05-03random.exeexe 16ca62d7a63db6faf5b28bd871878ceb3a84d477821e351f49f79155314d2db4n/a CredentialFlusher
2025-05-03random.exeexe 9e574be5e2b5883aebe20d4da8ab4e70c20ae55eb335b9c9896867b38bca522dn/a CredentialFlusher
2025-05-03random.exeexe ec9f8c2a3432742bf2fed10bbad3de88f40f89d1dc42fe1be05d62aa7583ed6cn/a CredentialFlusher
2025-05-03random.exeexe 7d221f4530c6439527ce1bef2ed7db41d969d4b5e51c78b41a45ad2791f26cb2Virustotal results 26.39% CredentialFlusher
2025-05-03random.exeexe 0bf43bb57332909f48396f64df0a1aea52dccf8701ac456b7bb359fe270db048Virustotal results 27.78% CredentialFlusher
2025-05-03random.exeexe 90fa92d639b3946023c732654b1740d9606ca3a87d61228a3b49477ca2a338d5Virustotal results 26.39% CredentialFlusher
2025-05-03random.exeexe a2802a5a9ca95e5b0b86cd1cafc21e8e4629ce0f283c8fb92d7715990ea7172dn/a CredentialFlusher
2025-05-02random.exeexe 2184bcc32d47c506d95da46ef17c94613ea4f7f2b56b92e3f953c4f8b102b818Virustotal results 27.78% CredentialFlusher
2025-05-02random.exeexe 7da1880e254d9a72484a51cfa2ecb32e1a54d7095432742ed10fd2df378a5cban/a 
2025-05-02random.exeexe 22850f752d88d183465dcf56528d837f3edbd6300d4f64bfbbf24680952ac3ffn/a CredentialFlusher
2025-05-02random.exeexe 13c1dbaf34d0eef57e214942bc3275d0f8d2aa1cf2aad07087868d94d87cf9e3n/a CredentialFlusher
2025-05-02random.exeexe 7bd05a5cc0cc8ac396ce0fd05ab22bb80228f812f2698a13ddc4370beda9ca00Virustotal results 26.39% CredentialFlusher
2025-05-02random.exeexe b6f13edc8a36dd4b2774597eab25e1e8b1993e9f4c25aeaba266fc24d445c1ebVirustotal results 25.00% CredentialFlusher