URLhaus Database

You are currently viewing the URLhaus database entry for http://runds.duckdns.org/proceso.vbs which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3659722
URL: http://runds.duckdns.org/proceso.vbs
URL Status:Offline
Host: runds.duckdns.org
Date added:2025-10-05 23:21:25 UTC
Last online:2026-06-16 08:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Abused domain (phishing)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Not blocked
ProtonDNS :Not blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Riordz
Abuse complaint sent (?): Yes (2026-06-11 14:55:20 UTC to abuse{at}nfx[dot]rip)
Takedown time:9 months, 14 days, 0 hours, 23 minutes Bad (down since 2026-07-16 23:45:55 UTC)
Tags:duckdns opendir remcos link RemcosRAT link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-07-16proceso.vbsunknown 450025ae86bc598d67b64fe43dc66818454aeee38099d03f4ff0d5689007d2dbn/a 
2026-07-15proceso.vbsunknown b7192092a6a67eac8dfd240e7e9a0caa4c97a2ad5ed17ed0991ae0b342e9df66n/a 
2026-07-14proceso.vbsunknown 0de96aad996d165a8433ccd571affc665b6dd83dbc519d44cf5b66a01c7b158fn/a 
2026-07-08proceso.vbsunknown 11964c9c24300a6b8aa78c1acd099af875981e7f0dca2f5dc94e0fff0c911a9bn/a 
2026-07-07proceso.vbsunknown b7b59b2adbe8bfb0422e1e65ac227bd570267d03ddc6815a0a444a9c2d5e2770n/a 
2026-07-07proceso.vbsunknown 7c05d5d482267a794342e8a557cabc9f313301792c9731d10019cbf8ee9b633dn/a 
2026-07-01proceso.vbsunknown 3620b2f12cf3088b6aef436a27afeb45ac5f76ad6f11eec60a47444d1bb5b2ean/a 
2026-06-22proceso.vbsunknown 5fa67dd016856c4ce0a5b59ba47e77c4db86638d0f4b88b1e87db4b0b989e4b1n/a 
2026-06-17proceso.vbsunknown 79d88cfbf92de05a5f9af0fe8f71e803fb6899bce028bb10d1ad29521015eb2an/a 
2026-06-11proceso.vbsunknown b38528c22b871ddeffe599d35d4d14c3db4efa93013fb5fa15acbde121cf3ce7n/a 
2026-06-04proceso.vbsunknown d816827cc6ddf1850ccbb25aaf3c774c9a175b6dc4c3cc3b3f87828e43c3c975n/a 
2026-06-03proceso.vbsunknown a9eaa6e29c7e255c1f99751e641760967bf6a73cb144ae9f2aee3f6098bfa1fan/a 
2026-05-29proceso.vbsunknown 9abce7f60bca6a836f866651ce01c9842e2b30a423a6a42708f7369fa25419b1n/a 
2026-05-29proceso.vbsunknown 6265b4edc6b656c54f81d72312f2bce80d131dc5077c5336013cb221ceaaf61an/a 
2026-05-28proceso.vbsunknown d3a8ca5f782261ce47a843c35fb1f614300fb418b041c2f8a76e20288310cbdan/a 
2026-05-27proceso.vbsunknown fc9d1c156432e1468870691b1eacbfbec2147e986ed2f9dc0fb716fcd8aa2ab0n/a 
2026-03-14proceso.vbsunknown c290cee85135851b18310ff007b1c7af8e13bc07b72e84ec5555f53daec4899bn/a 
2025-10-08proceso.vbstxt 9066ce1e54712b37d97f0f5fbb9862e062dedb37ebbcdcff22a23fd056b0b243Virustotal results 17.74% RemcosRAT
2025-10-07proceso.vbstxt fdda094c58d9911d5a8e151ba237d77d4f0c920998b80da150d2f8d58996cd8fVirustotal results 24.19%RemcosRAT
2025-10-06proceso.vbstxt 45d7217d9750ae5e186caa325d66c15db7da42835555b11f5f7b1fd6190452a7Virustotal results 24.19% RemcosRAT
2025-10-05proceso.vbstxt 94212177445ae515a0c60e69c5db6da8bfbb2f0ec00541d34eaa09329b2cd394Virustotal results 25.81%RemcosRAT