URLhaus Database

You are currently viewing the URLhaus database entry for http://watchdogdns.duckdns.org/mrd.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:47797
URL:http://watchdogdns.duckdns.org/mrd.exe
URL Status: Online
Host:watchdogdns.duckdns.org
Date added:2018-08-27 08:00:09 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Abused domain (malware)
SURBL:Blacklisted
Reporter:@abuse_ch
Abuse complaint sent (?): Yes (2018-09-07 11:41:12 UTC to support{at}vpsace[dot]com)
Tags:exe HawkEye LimeRAT NetWire QuasarRAT rat RemcosRAT

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2019-02-21n/aexe27a3fc452725be3bbf5e82f96228b16bedd8747bbf5638c8277e7c76f07c857cVirustotal results 23 / 69 (33.33)LimeRAT
2019-02-07n/aexe110ef1bf1f55e400ef17c8179a25f696c4f667741b89a998ba0ea041fe53e916n/aRemcosRAT
2019-02-02n/aexe672b504f3c51fe58144d664f757072a17877a0682e08b35b8e69b6721022768dn/a
2019-01-29n/aexe2c94e1ac0a94aa3aa6e03f9ff33eb0f94f916b00ca0a34a4da62d113c438327fn/a
2019-01-26n/aexee7056a38ead49cd247e653e500510e3c6d73898bd29cc629ef1262e68ef191bbn/aLimeRAT
2019-01-24n/aexe9d6ade1d690124086d594c06ba8db497434c560fc7d9b4a8a4df12ffa441836fn/a
2019-01-23n/aexeca37979ed84f2bc2cee74191df9f03ba9970d31a9d04654fd541ad073d706c6fn/aHawkEye
2019-01-20n/aexea07c195912a35bb4f09c0adbc3e174e9dcf7bbb744c036f8e4698aaef44f0763n/aHawkEye
2019-01-17n/aexe1a422b2a6288cbb50beb3c380df782bcccf7516e74fceb799d5e1b014e9fb252n/a
2019-01-14n/aexec69bb2d27769eba71d7b031249b8cac97c65f560dd1b06840fd2d6c2b3ce58b1n/aLimeRAT
2019-01-13n/aexe987b518b7a461694585044a73f4121f88faf5ff4b6ab9575cbeb717f802fc606n/aRemcosRAT
2019-01-12n/aexebb93d16760825fb1ef7127af898b6b1e0be7e9829d0bffae4b7c0d2bdec58101n/aLimeRAT
2019-01-11n/aexe7156b8450ce9aa9f4b4e47972df99caa22b5ae87d0d88b5417be301ef4e09b19n/a
2019-01-10n/aexe2f31154a459e48c110a42c2cd1e13580d72569e93a1291c48160a8cdb6e44111n/a
2019-01-09n/aexe2ee2dc10a0d93a93bdb2c301acca3368ea311eef78eba5299f05a14d9e5867b4n/a
2019-01-07n/aexefd31089c7084acd50019b50d107eaa77999f52c16dcbee55f12544f1024ba8e8n/a RevCodeRAT
2019-01-04n/aexeccc59f7a7f97047cb768a15ee44e1af2d609764dc44195dd78c28c758b8629f8n/a
2019-01-02n/aexe3ec8523e399cc2c8603fb87e77695625f4c2c85db67ea3e2a630be2dcc18d248n/a
2019-01-02n/aexe77b4754b91d276916f63dfedd7b8d52cb93237fa08eca93bed7e2d02013a483en/aLimeRAT
2018-12-24n/aexe851960ccd0f680682be12ac57ae6cf639a605163344be8c1f7dc16238d909dabn/aLimeRAT
2018-12-22n/aexe8078741205658d4255dbb3d62ea353b2c4cb58b0a08053c1d85f3191fc1ad2dfn/aLimeRAT
2018-12-20n/aexefdd871366ddf7d08ae6bebc663100483a0b3f02ac393f020d25e980c60070eecn/a RevCodeRAT
2018-12-20n/aexeb358a99a1ece1007fd0d6f4269ddbf6e6cf04f31e53093f4cd0e43802cb5c251n/aLimeRAT
2018-12-18n/aexeae43cc01ee0b8fbba682ae40f8e097ad1bad6bc465aca99064396bd1162b59fcn/a RevCodeRAT
2018-12-17n/aexecd541ee7b22487180ad5be07be2dbee4a0fb73392e9c43b07a0665e6d5cc5e28n/aQuasarRAT
2018-12-15n/aexe6a327b0cf6e2816f8b9434770955cde3e3c57d91026c0753221ff81a80b4cfdfn/a RevCodeRAT
2018-12-11n/aexe34bbe865c813adccc3e9690ea8eb998eec414e509103d613a010576743bd858an/a
2018-12-04n/aexe1b3190bd9170d8a74c558e674de5d62bb868c4a6a4187a03055534d4e1f6834an/a RevCodeRAT
2018-12-03n/aexea02d6ffa75184ad2b4bbd98bb84149d50b4f7b8968d233473f8146e194b23e45n/a
2018-11-06n/aexeffee963c59cd0ea28f92669c03a615024e371b90fd208389ccf62930d565dbecn/a
2018-10-29n/aexeec3ed905c7f458d937390c12338c4c78e7bbb3826e00afcf6cedfb8f23d15c95n/a
2018-10-27n/aexe730f18e9ffb57da527d9aa1a7a056a6ebb49bb48942c4d0bd5e7ce9d79c154fcn/a
2018-10-25n/aexec252dfb61d2e4b744cd7b3e85244802b18f36d502f630679133247ddc54e9bcan/a
2018-10-25n/aexe97b722727611f9350022ccfd7beed54e956401e5a49461691e9c56602b9997c5n/a
2018-10-23n/aexe7156af66fa6e799ff628896eebffb7419eea929c898331d12a4bf0c182fe4d2fn/a
2018-10-16n/aexef6e1d0e550476f43d43d52d3ada67c5fd0e8441e41cda85f5dc3190677104a29n/a
2018-10-12n/aexe10cbfb5a8db8e0655f1e96261055e193bf236590634cfede532c306afda5c4d8n/a RevCodeRAT
2018-10-07n/aexed63887c154125d688d1fbc4a878abf99dc146a4bbabebc3fa9d3cf0030a922b7n/a RevCodeRAT
2018-10-05n/aexe09c341acef2ebd96d7d62d57d886132efe5cf64772f3f2165e2d930c1f4e78e8n/a RevCodeRAT
2018-10-03n/aexeac2e31d4477aff5f071f1b63459a0297f2b7d5c8b1e38d2d4daf7c18d7c7ab4bn/a
2018-10-02n/aexe791a96d690dc28e66f7b726aa7c2b8de919bf49d406c869a4f2298f7b19861can/a
2018-10-01n/aexe402a6b0caec743de28cbf8475ec6aadc9f8fa97ae892293821c5c50b264a22a6Virustotal results 29 / 69 (42.03)
2018-09-28n/aexe1fbe50e2d8a6ddd1fac353a8fc0453b95e7c3eee25592695f128f8d168dbad0an/a RevCodeRAT
2018-09-28n/aexe1fbe50e2d8a6ddd1fac353a8fc0453b95e7c3eee25592695f128f8d168dbad0an/a RevCodeRAT
2018-09-28n/aexe5eb430f6923cc731282e5ea68ebc0e86fd668c407c93918f3d68899d024e83f9n/a
2018-09-27n/aexe28440eb547f66d0a5c78c932287cdde2b5f81d77c108bb29283a2bdfd5454344n/a RevCodeRAT
2018-09-27n/aexea790a5746128383c6a4aa634362bd174c008b7965935f95caa3e68ba8ad3b043n/a RevCodeRAT
2018-09-26n/aexe59b3bb37db40c36ebf7700efee28cf5d44bd5906b00161bee63a9f3c46c7ded5n/a RevCodeRAT
2018-09-25n/aexeb09b0b7cb3286967e5f2cf8e5ea071ffb292aa0125c95fdc4be43813a6972a1en/a RevCodeRAT
2018-09-25n/aexea6111862a694b7ce39687e4b470e0447b08d30fb5c253cd9b307ad2a65f6f3e1n/aRevCodeRAT
2018-09-24n/aexea04ae46f95b5e9243ff33db3fe8ebd55193112478378cdc0d36219d779fe2ae9n/a RevCodeRAT
2018-09-24n/aexe137ff4c550cbc9d05408072d20b08903fa80ab8edcfab7c6f421869485652e82n/a
2018-09-23n/aexe82d90c0be035b0996364955537e22842ca0c5513ab8cc54e9d94888d63b3fbc3n/a
2018-09-21n/aexe8283317065119d189fa959a17715d96c9e6c9810a411ad7e9f20d3b424d3b5c6n/a
2018-09-21n/aexed3aca161e594c11260d108e3e1f1c49e459ab2b12b9b9e9ac798fe1ec7faa553n/a RevCodeRAT
2018-09-20n/aexee10278b7fd1d25e7841cb60f0cdf4f99e8e4b9f7e44f2f7b157d91c72a21bf9an/a RevCodeRAT
2018-09-20n/aexea3206bf9bc553dd8675a5d3b38b7fec4409bdd46fb581e2b5a69d4072563d5f5Virustotal results 9 / 64 (14.06)
2018-09-19n/aexe3985ec0c18bf2ed76ffd091cc5454c8c76bbc0053c1323ebf714ba2b6ff951d4Virustotal results 13 / 67 (19.40) RevCodeRAT
2018-09-18n/aexe640e71c86214534fe4aec5dda513bcce6631f61fa427868716822284801e54f9n/a RevCodeRAT
2018-09-18n/aexeb6cfac2d4d82f7cb4cb204e0c51a59a692ec170d51a9c45308652e066a3e5d91n/aRevCodeRAT
2018-09-18n/aexe20cd2c1d674f0d5c01f9a95b7313c7f5ff3ca73136288e0f64d83bcae34230e1n/a
2018-09-17n/aexe1ccb9055ef91ac772019b37c9bd65fde01a8498da8a2a864d1cc135e9e74406cVirustotal results 22 / 68 (32.35)
2018-09-13n/aexe86627583ccd8e3e397650479f9e1534632082d2f1a67aaa8ddbd57be8639ce97n/a
2018-09-11n/aexe67d02d9a91c4ea4e4e7cea3f0f712eb308505cff5ae10f1149b7fec9805c56b5n/aQuasarRAT
2018-09-09n/aexe972c00e084129a602b3e81cf1c125e9d3af5016deb9eaa6c53703d878e24a3d9n/aQuasarRAT
2018-09-07n/aexe7953e1835d8e00723f03ae8d226d2ff3622f0ec889f4b685f8469a4bc571426eVirustotal results 11 / 68 (16.18)QuasarRAT
2018-09-06n/aexebc6127382f8e27db3cffdd77f402b5b817e78a6e4b28194126fbefce842e76d3n/aQuasarRAT
2018-09-06n/aexe56e5edfbaa4df5aabafcd00784cfeebed5f6d40392c8a5f5f0117cadbaa96487n/aQuasarRAT
2018-09-05n/aexeb669fb2ea58e2c801c5a069a6e9c44afc5632da7d0c91240bdcc2719b8a0662en/aQuasarRAT
2018-09-04n/aexee375bb00ca83472d066f5887c619b5a57d46acb3b52be4a25294a1d394130d33n/a
2018-09-01n/aexe0aa1462c916c90dcec569c9edf7e06b29c5f9ab2f6c766d4129d06f9e51aef00n/a
2018-09-01n/aexeb32759bdb42fa2a773b6a72c24cae16c1378bc7cfadb36fe7fd7fa323a22a53an/aQuasarRAT
2018-08-31n/aexebe29837bae2ae67692746781ada8bdbabfb2a44df31f80c6f255a777e44dd4b3n/a
2018-08-30n/aexef2d0d55597a552e78ba283228860aa967ae474a12da69cdd52c2721c162e5602n/a
2018-08-29n/aexef5afe88d256e5162118403f2da9b83717c13f5b3c6922ef9bf38a91b6276a958n/aQuasarRAT
2018-08-29n/aexe08c386efbf101b21b73a9da7295742ce8dae41b17e006fe6018ae88ee26bed45n/a
2018-08-28n/aexe0e67e91c90653b11cea9ea24f15ae31169e8a069c33adc7918489ad89aab1bf2Virustotal results 8 / 68 (11.76)
2018-08-27n/aexe9d1bae99dbb1c8c898b1ee3aa249e572c656328d94407f4c21a3731d65edd817n/aQuasarRAT
2018-08-27n/aexe80050a00b3d54f91a12699a8c84817e1657a454671a09483abd1e78ba1f50b87Virustotal results 12 / 68 (17.65)NetWire
2018-08-27n/aexe493110b53527815bd3a825b712966e0d92481911c7cb35cd30566b4d6f0ed71eVirustotal results 14 / 67 (20.90)NetWire