URLhaus Database

You are currently viewing the URLhaus database entry for http://31.172.80.212:7002/obfdownload/service.dll which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	3691004
URL:	http://31.172.80.212:7002/obfdownload/service.dll
URL Status:	Offline
Host:	31.172.80.212
Date added:	2025-10-30 07:16:11 UTC
Last online:	2025-11-01 09:XX:XX UTC
Threat:	Malware download
Reporter:	DonPasci
Abuse complaint sent (?):	Yes (2025-10-30 07:17:25 UTC to u-abuse{at}ultahost[dot]com)
Takedown time:	2 days, 1 hours, 54 minutes (down since 2025-11-01 09:11:35 UTC)
Tags:	dll

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT
2025-11-01	service.dll	dll	7f7ac0e70ce5046e27ad67c4f82e05e7d9d953d36f1cd2b87c982a3b58092649	n/a
2025-10-31	service.dll	dll	b008a4f0ab2e689f3d4a5499cd9c75511a1fdb63d55887c71b8153981ab569cc	n/a
2025-10-31	service.dll	dll	459c39fb24a40561ae6c4b42b02093545b80a824918308360a577dbd4b886227	n/a
2025-10-31	service.dll	dll	2c4249cf90b2ea8c986d34d135e02fb7cbb2e657ce8e34e7649c02c40853c0cb	n/a
2025-10-31	service.dll	dll	7de0749eaa84eb867aecb5cc9505a09364ecbea5b30bbc86b9ded111f0674889	n/a
2025-10-31	service.dll	dll	c10bf1f5bcdde453d77bd6bc9e2cd6c3a6ee330299ae40dfdab8f6280c2f2f6a	n/a
2025-10-31	service.dll	dll	e0a8ce4da057623e0c4578784735abc89251092a1de5ef1b62859065dc336063	n/a
2025-10-30	service.dll	dll	df65e877e99342ff6abbfefa310bbb0a6bcfe1dd8ca721c4cd0082926fbabdfa	n/a
2025-10-30	service.dll	dll	1da51bd7b2cd9bfc7830b88f492f8c358d74db78ba716cb99dba8f8a1d1c52e4	n/a
2025-10-30	service.dll	dll	02bb1f0c7f8ec232ebba88b3ef5021599625c8f4d276b2916cf1f0460ed21f85	n/a
2025-10-30	service.dll	dll	e6f3ba99dc1593ee7223cc94b74325d4817b4bec9ff511e6e4a7794c634ed81b	n/a