URLhaus Database

You are currently viewing the URLhaus database entry for https://checkandswitch.com/afile/7.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:59198
URL:https://checkandswitch.com/afile/7.exe
URL Status:Offline
Host:checkandswitch.com
Date added:2018-09-23 13:20:10 UTC
Threat:Malware download Malware download
Google Safe Browsing:Clean
Spamhaus DBL:Not listed
SURBL:Not listed
Reporter:@zbetcheckin
Abuse complaint sent (?): Yes (2018-09-23 13:20:20 UTC to abuse{at}rtcomm[dot]ru)
Takedown time:24 days, 20 hours, 2 minutes Bad
Tags:AZORult CoinMiner exe RemcosRAT tinynuke

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTSignature
2018-10-18n/aexe53ff3d24b2089d7bd4475166715eb8e6210e0b7239340906c801f74899e744f4n/aAZORult
2018-10-17n/aexe1f37b14f7bfb8626dffb6cdd280a3e8b00b6f1720a872278ff70cc98d41bc06an/aAZORult
2018-10-17n/aexe1106a2de32368f59dfed5e4cb59ee6bcf10a01c2ad01435dc5df9839097fa353n/aAZORult
2018-10-17n/aexed39429f51da3b316787159cef28fb04f6f3390166e6547ec6e40b7323b54bdafVirustotal results 10 / 65 (15.38)AZORult
2018-10-17n/aexe189df486467dab097b64741a72218bc06bb37fc87efa906689687983f7cb7cc3n/aAZORult
2018-10-17n/aexee4f4fa484af248360e2ef183f09b57ad1f6be81943f05a2c43a0943f7a44fb9dVirustotal results 6 / 67 (8.96)
2018-10-16n/aexe4d7a90c8295dcf791889f456a055a5a947d8023dd5717e45d3b303e6928c80d0Virustotal results 12 / 66 (18.18)AZORult
2018-10-16n/aexe58d298a17e91be6198e0fcef61cf1e94ae31af93819c4a87a02c32d6e2024f67n/a
2018-10-16n/aexe7cf73ac4922bb0ffb08bf56cce0e4b9111a4b0558c1d6a63d442a413bf23ba06n/a
2018-10-16n/aexe9e345e5065ee0de12e5bbe1647ea26ae6d316f523df781368b68474902693c69n/aAZORult
2018-10-16n/aexe039736c48faca1e05a2c578c5cea8143c70236d8bf86cf7979998a456167b46bn/a
2018-10-16n/aexe76272ff1569b08ea3fb8659b5dc497b7a0b15ca24fb82c82d6e4ad1885e1a80fn/a
2018-10-16n/aexe1608da5cfc807f8e20f5bbae1ecd328340dac2ef5ddd5b5760e17faf77f29c1eVirustotal results 14 / 65 (21.54)
2018-10-15n/aexed9133f19a23c78e2ce52c8b4a0f57cc1f234213919cf1fbda15dcdcb3f4efdcdn/a
2018-10-15n/aexe07d11924f2144c4992782d6efb02e007830bd3ab2243842598ff8bd21bacbcc9Virustotal results 16 / 66 (24.24)AZORult
2018-10-15n/aexef6f220c176965ddd3e5be56b99667c940cf67922dfcd7370d2c831ccac8a2d1bVirustotal results 13 / 66 (19.70)AZORult
2018-10-15n/aexe45e186a28c6be3f613eea336df0e4c290ab3dd9d8c3c8d07a2dc2fb57a5c34e5n/aAZORult
2018-10-14n/aexe6c4e0958c8ed8799f7f86d7fd5f6e1a6a7987ab07c5e7c6e66176561ec348fe5n/aAZORult
2018-10-14n/aexe9609a0c13dcb8d91748d8a0e826c296ac4f967b4c65ffa26a51437cf7f309197n/aAZORult
2018-10-14n/aexe0d31842f218520187bb38c2e5020c9232d2ba6a30d69e1c30c8abd353148c766n/aAZORult
2018-10-14n/aexed61c496047983d247989e6f4caaaa4f48f8f6ef06874c7f7424f165f1b2173b3n/a
2018-10-13n/aexe0296e48652cc04f5134b9d26fdc20a602221b240a84a5d5a313c77aa42f60dfdn/aAZORult
2018-10-13n/aexe78e1d676ce9def6773054fa81d1914dc01ab8155f825cd5252e95388af4101b2n/aAZORult
2018-10-13n/aexe3cfc81ff994b2face02027e350ec57f04675558cc845ab50fbb94497a1674926n/aTinyNuke
2018-10-13n/aexef8936405d257b24fca01c85802740634eeaf8d024f74ba89396e6321f0a010d3n/aArkeiStealer
2018-10-13n/aexe63da405cc6ee99a2c83f2890ed15fc103a7b48e9de0f94b118e34c99b3f51b9an/aAZORult
2018-10-12n/aexec6738eb21d6f12d692b1da70c83f25b1fde2d0051f1047078a50be09b9daef4an/aAZORult
2018-10-12n/aexea149cb7f8d29506837ecad9e9b7e7a1e8fd23ba5716c653b2bd3d9bac9eccd6en/aAZORult
2018-10-12n/aexe561b829430af3884dfce6b81f8e7aa0075506283bae9b598a8de11fd775715f3n/aAZORult
2018-10-12n/aexee9214a32fe6541d12b7641588fdada5bcc06c3d1aaa41e5eef2007b038fc76b2n/aAZORult
2018-10-11n/aexe578325cc12420cd1401fe951744b6ff1dcc286e98f7afd22d5b45cf14b77e247n/aAZORult
2018-10-11n/aexe8630c942e88e959c11e496bf75a2107d7e805475f3bfa881a154e826e2931f83Virustotal results 27 / 68 (39.71)
2018-10-11n/aexe1f3939b4f22d72ad8fa441b4b35a3743b393e995c1a8fb4f21eff8ed3706e2can/a
2018-10-11n/aexe829b1e23a03a2670be5940593544435d836c560a8653ad18bc8d26747263f75dn/aAZORult
2018-10-11n/aexee5da4fb9e31773e77f2892ea35f0ed81797dff82da89f83a9e93745337c6969bn/aAZORult
2018-10-11n/aexe1120f826610d2b23d02bc7ea60a3ee7e15655ecc27037f293a21738c7559532en/aAZORult
2018-10-11n/aexe60bbcd4188e2c2cb6f77947817aef831d043403c55ce6f44ffad68ac03930857n/aAZORult
2018-10-10n/aexe96c46d8dd1fe84f265b4d4db5349d3039d23ef8b4b9393ab56226aea003060a8n/aAZORult
2018-10-10n/aexe2cd8efa26ae87603d7359f96237f717350f8b3397d6154e4db45f12938dfa5ben/a
2018-10-10n/aexeb562636ffaebe2466ef910bd92bdd95109afad118e72e9779b24c79fc0683510n/aAZORult
2018-10-10n/aexe488e9e6dc30e42153af84dff3891eca4e2f6a5af2c9c5bed1ae2a0922be90efdn/aAZORult
2018-10-08n/aexe66ddec63be00dc40c1cc6aa36966ac711a7a0dcb9a141fd59713f07417e5a473n/aAZORult
2018-10-08n/aexe67cb6e2e287027123959063b2baba9dfc01e362085fcd069c53f9773ce9e0bc4n/aAZORult
2018-10-07n/aexe5d67c7b61750054893a18dad1b043b8593972f30879507d7f9a02324de6402afn/a
2018-10-07n/aexea62dbf067fe820c2793635427b2e815efcac089bd3c1bdfbb62ca16bb4e8d3a3n/a
2018-10-07n/aexeb82c8ad77e94a127216caf7af7b91bdafe078a0b20262290b5b23052e141e054n/aAZORult
2018-10-07n/aexe20b8bd11df53fb64dd5ac4e8ff37507c902be9de61f0af9cc586ac1561fbcf71n/a
2018-10-06n/aexe88dd3aedca9fcef3d23948d55c2d8ea994bab4eeb5ea9c9b56bb93502b2f04fdVirustotal results 8 / 69 (11.59)
2018-10-06n/aexe91e6fb3956890cf7c4c9b84785d66b94ee97110b03b3eb4dfcf670f850375a5en/aArkeiStealer
2018-10-06n/aexecf1572370d63d52c6e688211e287bb2398ece8d424650b80b97f3d72249ce6dbn/aArkeiStealer
2018-10-06n/aexeb823bd4fa46205a28646b6dde6d982fc138b3c013c58cadaf0c9c52cbdf4d100n/aAZORult
2018-10-06n/aexe1a923a22f930dcf5c23200df358f682248e25a2d23f5c99ef369a7ff73d9b112n/a
2018-10-06n/aexe463abf7f20772e22cbbbfe39f400e2596da862ff95bb2b1a6350da8c59505359Virustotal results 11 / 68 (16.18)AZORult
2018-10-05n/aexebf8def344dd4c581b60fae58085c3e4e6372368b808187aa8330571e9e124016n/a
2018-10-05n/aexe8e8f4d291b0b8498d0ea4a0ab740bf4e4b23a3aea2aa6053f98d38f683e11b7an/aAZORult
2018-10-05n/aexe64c1e2395a37a0af5c0992929c5bd7654ad095cf3961494c8fde463ae13a4888n/a
2018-10-05n/aexe85e6c73f848e5f2e0c7d259f67cdc6109873f771f8e98cf0f6b408d2aa100fefVirustotal results 11 / 68 (16.18)
2018-10-05n/aexeee44e0141ac6fb5071634d03f745f4981ae9c4ee009a73a4073e8260bf72e8adn/aAZORult
2018-10-04n/aexe2de2eeec3dd17925a368e9260069a9594aa779687930b9db9e68b31301de7f2cn/a
2018-10-04n/aexe674b215c62e2652527acd033a6c572e75422c32e7e9daa2890f0b8265df464b5n/a
2018-10-04n/aexe5588e54fad44336e2e6b68238e705e21585b67546dabaad154b8c6c93f4917afn/a
2018-10-03n/aexefd7a32830945d4a136be869ab3ca02a0dd2572ecab3c6d9f510403daba4770b7n/a
2018-10-03n/aexe5f6c234a54abe2bdffa1b3b30145e648f7c766adc817e03d2bfe9100f8179f42n/a
2018-10-03n/aexe755e63afb74ddafd5b84de0972e93ef6c341a66582c47f2cd4f3d05356cc1c28n/a
2018-10-03n/aexefac23f5b11ab5a10641b7a06a08844408ca72c63351a2799f2d7c353170824ffn/a
2018-10-03n/aexee9d83638faf94f8f2c9f40b786b7a87f4f9003dc496aeb954a565384f9ad0812n/a
2018-10-02n/aexec9c07b7cd3ff83314ca6c68dd627e8517432bb9484bff5fe3ab36f25bdea2422Virustotal results 10 / 68 (14.71)AZORult
2018-10-02n/aexe2547e3f8fa33aad0b2e2bfb7179129ba19cf5c63c30b84266e96cb9a4a205b57n/a
2018-10-02n/aexe3c5a4528eef7c32b46c53f8534b9c2c5be89b4cdcc0738589499c3756217bdc7n/a
2018-10-02n/aexe34f8239251c753e23dd1608bf391ea30778a8d4d1232df133e3dd1ad6ed84660n/a
2018-10-02n/aexe214663171a0ceb6f13bbc35dcdbf8ccc06e67f61637d47a10075dfc4353d80e0n/a
2018-10-02n/aexe1c3cb510c9bec19423e5565cc9b778334afa94c7a10be0f86fef9f494ca6976en/aAZORult
2018-10-01n/aexead01603de1fc678da55d8e86528e6ea1685b18b75f73dd7f9abe90a457e20d45n/aAZORult
2018-10-01n/aexe61abc3582bca30517d8ed16dc9daf721e76461bbee1de1a17192159b156e503eVirustotal results 13 / 69 (18.84)
2018-10-01n/aexe6c7a8fccf4ab8a4dcd3f77c0bb8da9d78f15892c4be1c043e501cebb7aadee8dn/aAZORult
2018-10-01n/aexeada36f29428e6c3c0dc106582feefaea2013f468cf02f0ce8db7fca2df6f6da6n/aAZORult
2018-09-30n/aexe21882685790a4ba0753502096eb12fb6e8076b728854f3e99f2391a26c8ac3a4Virustotal results 8 / 65 (12.31)AZORult
2018-09-30n/aexecc2f35db7acba5ad4ed96c420763da0781c7baa434cf767a5d203c00991a6c55Virustotal results 16 / 69 (23.19)AZORult
2018-09-30n/aexef19e531d7f4296f270bf905fba9697366b3afbc3a77ea72a820a080bb9570cffn/aArkeiStealer
2018-09-30n/aexe61b17ae5186af84c9b7eda3b470cb8558787ab9ab4ec4fed9656428c266d32b2n/aAZORult
2018-09-30n/aexec0daaf5842053f031bd333fe2d3aa49e040fa9b54d22399481fe8b0542f937aen/aAZORult
2018-09-30n/aexee35134ce409c2975e750dcaea125cf34f095da3e04a231c6d94d7aa3a8f4cdbfVirustotal results 24 / 69 (34.78)CoinMiner
2018-09-29n/aexe61be0cc7fd48b0b940d1e765fbd40a27fdfa4442734e1e5255c5f3a1b41740bbn/aAZORult
2018-09-29n/aexe9708e1fa89033332fa2841d08d3e172742919128cf17c39da06fa6e71d7a1d92Virustotal results 57 / 69 (82.61)
2018-09-29n/aexef51c03ca7f50084edb09f74d598e5713d69ea0d9fa39e091306ccd5f159d34aan/aAZORult
2018-09-29n/aexe8bd22011364bbcf30fe08078293c71561a32ab8955d701f317b1af1c31dfbbd4n/a
2018-09-28n/aexe43833dbbd13d314ea07a9a4dd2c13c94a1d20be7e65617d9b2bbf9997c0670bcn/aAZORult
2018-09-28n/aexe6fdef3c614cda93d118bd6bd59dd086fe0ff931c8730ed5fcf0d43a412d48f9en/aAZORult
2018-09-28n/aexec1b6319d894d94d991231384a0310d130a33ad3e645b96e334a557db4c609d04n/aAZORult
2018-09-28n/aexe03a1c7c88fafffb531720d8fee9d5edb12b734605e3784056b6e337ef55560b9n/aAZORult
2018-09-27n/aexef6054bd9c9d45d24670864216d84d2b95571e3f9ab38bdb67c8a78c651b05a77n/aAZORult
2018-09-27n/aexe50f75918af52f2098197877dfd6877a59cd13773431097dd39df8dd7a90fb389Virustotal results 21 / 68 (30.88)AZORult
2018-09-24n/aexed4fa4ef92a3f0f09117210844d10f070be32707af01e4b14cf2cc6795771859dn/a
2018-09-24n/aexe9ccd50e8c87e0c397545126198c566457c20ebb2d6effccb32fc03c6e8aae11an/a
2018-09-23n/aexefe741c7dbf97bd8b59b8540fee2705e2052c7b268021cfb6e864851d177b0d14Virustotal results 14 / 68 (20.59)AZORult
2018-09-23n/aexe73a7562381bb0a1bba1f8f5a5328fe4544fe1fd9eb105928afe37aefb24ab307n/a
2018-09-23n/aexe7cfeec070912c721e00be23a98f4c3a3d7e2d2359ed4699c433f8bde974d9e82Virustotal results 11 / 68 (16.18)RemcosRAT