URLhaus Database

You are currently viewing the URLhaus database entry for http://45.93.20.34/UpdateScr.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3731614
URL: http://45.93.20.34/UpdateScr.exe
URL Status:Offline
Host: 45.93.20.34
Date added:2025-12-11 15:36:14 UTC
Last online:2025-12-17 17:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2025-12-11 15:37:25 UTC to abuse{at}changway[dot]hk)
Takedown time:6 days, 2 hours, 20 minutes Bad (down since 2025-12-17 17:57:57 UTC)
Tags:exe Stealc

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-16UpdateScr.exeexe 2b78e71a37454943ee8eca2133039ee30ae60d19840f19f3bd183f111959c940n/a Stealc
2025-12-13UpdateScr.exeexe eadecfcd224b3d20b25754a99d239025c97c556df1f9f6789e6faa352c024407n/a Stealc
2025-12-12UpdateScr.exeexe a3fc607bb0e65e1a28f72bb6cc8a7814d9b9da6f958e0becc27289a240ba564bn/aStealc
2025-12-12UpdateScr.exeexe f50023166d780b6854ef84a1af2b3c6526877a78bf59290d4caf24ca1248149en/a 
2025-12-11UpdateScr.exeexe 97920d2ca396abe3d2f720f4a006436237753b53141b888a93c2624e899efd9fn/aStealc