URLhaus Database

You are currently viewing the URLhaus database entry for http://igynjkolwbnxvzaghuoplmnahuqwsbhyexbzmbdu.ydns.eu/ABW.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:779105
URL: http://igynjkolwbnxvzaghuoplmnahuqwsbhyexbzmbdu.ydns.eu/ABW.exe
URL Status:Offline
Host: igynjkolwbnxvzaghuoplmnahuqwsbhyexbzmbdu.ydns.eu
Date added:2020-11-02 08:53:05 UTC
Last online:2020-11-11 14:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Not blocked
DNS4EU :Blocked
Reporter: gorimpthon
Abuse complaint sent (?): Yes (2020-11-02 08:54:02 UTC to abuse{at}ovh[dot]net)
Takedown time:9 days, 5 hours, 53 minutes Bad (down since 2020-11-11 14:47:53 UTC)
Tags:exe NanoCore link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2020-11-10n/aexe ecb435211089891e65a4632e22668914f662ca6a56747c7cd25dd0339f2ff20fn/aNanoCore
2020-11-10n/aexe 3348bbff21e5de66cf00f7275086faf7069149da8dc3ed39db220b465b85cfe4n/aNanoCore
2020-11-08n/aexe e13a56c72598fdcf9974cf0b12dc39b72955e1fa77460f2145be84bd57239d84n/aNanoCore
2020-11-03n/aexe 965b61084fc5dc0ae159bb0060c74b6d313e0a6c658b6c71d371d60dd41ed1c9Virustotal results 26.39%NanoCore
2020-11-02n/aexe e024aa034b2b9edfa9b170e20c89b0804a61b78a7904956d3c27d5b05a6ba45an/aNanoCore