URLhaus Database

You are currently viewing the URLhaus database entry for http://pastelcolors.in/wp-content/plugins/LayerSlider/classes/sserv.jpg which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:90087
URL: http://pastelcolors.in/wp-content/plugins/LayerSlider/classes/sserv.jpg
URL Status:Offline
Host: pastelcolors.in
Date added:2018-12-06 10:38:04 UTC
Last online:2019-02-19 22:XX:XX UTC
Threat:Malware download Malware download
URLhaus blocklist:Not blocked
Spamhaus DBL :Not blocked
SURBL :Not blocked
Quad9 :Status unknown
AdGuard :Not blocked
Cloudflare :Not blocked
dns0.eu :Status unknown
ProtonDNS :Status unknown
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: Racco42
Abuse complaint sent (?): Yes (2018-12-06 10:40:03 UTC to security{at}datashack[dot]net)
Takedown time:2 months, 15 days, 11 hours, 32 minutes Bad (down since 2019-02-19 22:12:54 UTC)
Tags:exe Shade link Troldesh link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2018-12-29n/aexe 414bb1af4fbb618c4889d69144c7f66591c6e5294d0ab3b7ea8b774946977cf2n/a
2018-12-28n/aexe 6e748e99e864e4741156e9c47804bd64d04945be2115cdba2a3ca5668bd69f90n/a Ransomware.Troldesh
2018-12-27n/aexe 9fd59ba40c26b3161642d5ebb85796b4262e5d5aa5d1e5eceb919b52a8f9b00en/a Ransomware.Troldesh
2018-12-26n/aexe 925b389565fcfca729ebdc6f8aef4aa37186d5ac70ced53099321acdc51086d4n/a Ransomware.Troldesh
2018-12-19n/aexe 7701170304fdd48b184aac032391ae3a1f880be6160812d0089049834b3ec828Virustotal results 27.54% Ransomware.Troldesh
2018-12-18n/aexe f6c3a6ed241e86647c3532bf92594fc3828d0c1be2f50fa97f668d31318eabafVirustotal results 17.14% 
2018-12-18n/aexe 8eba21c5b2d2dd4c381f576c2c290748af323a4cdb09bc1246e628b2dc60313en/a 
2018-12-17n/aexe 07c490dd3e333cc3bafeaeea0163f93a685931219c7bd3b01286d5026904415fVirustotal results 14.71% Ransomware.Troldesh
2018-12-17n/aexe c5b09851acea8726771377b1ad6595528e6a31d4795681142c9c5717614d7445Virustotal results 14.49% Ransomware.Troldesh
2018-12-14n/aexe a5f26414edc613aadc835fe5192a42ecf6ece659af1cfb9f5f8b6d4eccc81903n/a 
2018-12-13n/aexe 6b495bad8b1d7e5f26ba3270d21731cfa2f23f4b26bfeb19be8667b01e7d35ddn/a 
2018-12-13n/aexe 5d28b7648fbd8cc3d37843a42fb6a12639356eaf0570d647637af9c9915a79f3n/a Ransomware.Troldesh
2018-12-13n/aexe b1f13a9ef3da3c9bd2cfd0fcfd7368b48346a6995a91dd0edca12557773a7763n/a 
2018-12-07n/aexe ac00db38736f8b064f0d878eea44c13923475186b5135fee2fd6f92522c0699fn/a 
2018-12-06n/aexe e39fd52523f742331dc20ee90a051e456561481ef4c360a40ffaac292cb6c37bVirustotal results 23.94%Ransomware.Troldesh
2018-12-06n/aexe 5466ba20f94b4a5f28a7dd9b2ee00b611104da3267e71d976dd6dc88ff6e83c1Virustotal results 32.84%