Malware Corpus Tracker - Download Sites - wannacry
| # | Status | CC | Corpus | Google | VT | EE | HA | pdns | RiskIQ | BC | TC | TM | RT | MC | Url | Host | LastIP | Port | Protocol | ASN | Last Updated | First Seen | Last Seen | First Active | Last Active | SBL | Abuse contact | Details |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://down.xn--wda.fr/2017-05-13/68A4j7TKcX | 80 | http | AS24940 | 2017-08-14 23:00 | 2017-05-12 12:00 | 2017-05-12 12:00 | 2017-05-15 08:00 | 2017-08-14 23:00 | reg.afnic-notification@gandi.net,noc@gandi.net,abuse@gandi.net,abuse@hetzner.de | ||||||
| 2 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://huanxingedu.com/WanaDecryptor.exe | 80 | http | AS37963 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-22 13:00 | 2017-08-14 23:00 | ben@sas-ben.com,ylover5002@126.com,support@YinSiBaoHu.AliYun.com,DomainAbuse@service.aliyun.com,ipas@cnnic.cn | ||||||
| 3 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://muhok.net/images/images | 80 | http | AS133618 | 2017-08-14 22:00 | 2017-08-02 07:00 | 2017-08-02 07:00 | 2017-08-02 07:00 | 2017-08-02 07:00 | |||||||
| 4 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://munsun.hk | 80 | http | AS4134 | 2017-08-14 23:00 | 2017-07-04 01:00 | 2017-07-05 08:00 | 2017-07-04 01:00 | 2017-08-12 12:00 | enquiry@hkdnr.hk,hkdomain@xinnet.com,anti-spam@ns.chinanet.cn.net | ||||||
| 5 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.cpmgroup.hk | 80 | http | AS4134 | 2017-08-14 23:00 | 2017-07-03 10:00 | 2017-07-13 06:00 | 2017-07-03 10:00 | 2017-08-14 19:00 | enquiry@hkdnr.hk,jarking@gmail.com,anti-spam@ns.chinanet.cn.net | ||||||
| 6 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.clbao.com/01106035 | 80 | http | AS37963 | 2017-08-14 23:00 | 2017-06-07 11:00 | 2017-06-07 11:00 | 2017-06-07 11:00 | 2017-06-11 00:00 | 442323999@qq.com,tree_wf@yahoo.com.cn,DomainAbuse@service.aliyun.com,ipas@cnnic.cn | ||||||
| 7 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://liendoanyogavietnam.vn | 80 | http | AS26496 | 2017-08-14 23:00 | 2017-05-24 22:00 | 2017-05-31 03:00 | 2017-05-24 22:00 | 2017-05-31 03:00 | |||||||
| 8 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://muhok.net/images | 80 | http | AS13335 | 2017-08-14 23:00 | 2017-05-24 18:00 | 2017-05-24 18:00 | 2017-05-24 18:00 | 2017-05-24 18:00 | talissondark13@hotmail.com,abuse-contact@publicdomainregistry.com,abuse@cloudflare.com | ||||||
| 9 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.munsun-asset.com | 80 | http | AS4134 | 2017-08-14 23:00 | 2017-05-24 08:00 | 2017-07-05 08:00 | 2017-05-24 08:00 | 2017-07-23 12:00 | supervision@xinnet.com,admin@munsun.hk,anti-spam@ns.chinanet.cn.net | ||||||
| 10 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://demolidores2.com/@wanadecryptor@.exe | 80 | http | AS16276 | 2017-05-22 13:00 | 2017-05-22 13:00 | ALLAN_RIZZOTTI@HOTMAIL.COM,VENDAS@LGVHOST.COM.BR,abuse@enom.com,abuse@ovh.ca | |||||||||
| 11 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://munsun.hk/@wanadecryptor@.exe | 80 | http | AS4134 | 2017-05-22 13:00 | 2017-05-22 13:00 | enquiry@hkdnr.hk,hkdomain@xinnet.com,anti-spam@ns.chinanet.cn.net | |||||||||
| 12 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.cpmgroup.hk/@WanaDecryptor@.exe | 80 | http | AS4134 | 2017-05-22 13:00 | 2017-05-22 13:00 | enquiry@hkdnr.hk,jarking@gmail.com,anti-spam@ns.chinanet.cn.net | |||||||||
| 13 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.muvulcanus.com/@WanaDecryptor@.exe | 80 | http | AS13335 | 2017-05-22 13:00 | 2017-05-22 13:00 | everlon.luiz@gmail.com,abuse-contact@publicdomainregistry.com,abuse@cloudflare.com | |||||||||
| 14 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.munet.com.br/@WanaDecryptor@.exe | 80 | http | AS16276 | 2017-05-22 13:00 | 2017-05-22 13:00 | ||||||||||
| 15 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://huanxingedu.com/@WanaDecryptor@.exe | 80 | http | AS37963 | 2017-05-22 13:00 | 2017-05-22 13:00 | ben@sas-ben.com,ylover5002@126.com,support@YinSiBaoHu.AliYun.com,DomainAbuse@service.aliyun.com,ipas@cnnic.cn | |||||||||
| 16 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.clbao.com/01106035/@WanaDecryptor@.exe | 80 | http | AS37963 | 2017-05-22 13:00 | 2017-05-22 13:00 | 442323999@qq.com,tree_wf@yahoo.com.cn,DomainAbuse@service.aliyun.com,ipas@cnnic.cn | |||||||||
| 17 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://gdlxyz.guet.edu.cn/@WanaDecryptor@.exe | 80 | http | AS4134 | 2017-05-22 13:00 | 2017-05-22 13:00 | ||||||||||
| 18 | N | N | N | N | N | Y | Y | N | N | N | N | Y | https://transfer.sh/PnDIl/CYBERed01ebfbc9eb5bbea545af4d01bf5f1071661840480439c6e5babe8e080e41aa.EXE | 443 | https | AS16509 | 2017-05-18 12:00 | 2017-05-18 12:00 | ||||||||||
| 19 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.muedge.com/themes/@WanaDecryptor@.exe | 80 | http | AS16276 | 2017-05-15 11:00 | 2017-05-15 11:00 | abuse@1and1.com,pabloduval94@gmail.com,hostmaster@1and1.com,noc@ovh.net | |||||||||
| 20 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.mudomal.com.br/Lista/@WanaDecryptor@.exe | 80 | http | AS13335 | 2017-05-15 11:00 | 2017-05-15 11:00 | ||||||||||
| 21 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://muhok.net/@WanaDecryptor@.exe | 80 | http | AS13335 | 2017-05-15 11:00 | 2017-05-15 11:00 | talissondark13@hotmail.com,abuse-contact@publicdomainregistry.com,abuse@cloudflare.com | |||||||||
| 22 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://secretgarden.co.id/@WanaDecryptor@.exe | 80 | http | AS9341 | 2017-05-15 11:00 | 2017-05-15 11:00 | ||||||||||
| 23 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://muhok.net/payments/@WanaDecryptor@.exe | 80 | http | AS13335 | 2017-05-15 11:00 | 2017-05-15 11:00 | talissondark13@hotmail.com,abuse-contact@publicdomainregistry.com,abuse@cloudflare.com | |||||||||
| 24 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.munsun-asset.com/@WanaDecryptor@.exe | 80 | http | AS4134 | 2017-05-15 11:00 | 2017-05-15 11:00 | supervision@xinnet.com,admin@munsun.hk,anti-spam@ns.chinanet.cn.net | |||||||||
| 25 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://liendoanyogavietnam.vn/@WanaDecryptor@.exe | 80 | http | AS18403 | 2017-05-15 11:00 | 2017-05-15 11:00 | ||||||||||
| 26 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://roxmu.net/Update/@WanaDecryptor@.exe | 80 | http | AS16276 | 2017-05-15 11:00 | 2017-05-15 11:00 | wagnerbr8@gmail.com,abuse-contact@publicdomainregistry.com,abuse@ovh.ca | |||||||||
| 27 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://muhok.net/images/@wanadecryptor@.exe | 80 | http | AS13335 | 2017-05-15 11:00 | 2017-05-15 11:00 | talissondark13@hotmail.com,abuse-contact@publicdomainregistry.com,abuse@cloudflare.com | |||||||||
| 28 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://liendoanyogavietnam.vn/wp-content/@wanadecryptor@.exe | 80 | http | AS18403 | 2017-05-15 11:00 | 2017-05-15 11:00 | ||||||||||
| 29 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://gdlxyz.guet.edu.cn/WanaDecryptor.exe | 80 | http | AS4134 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-22 13:00 | 2017-05-24 08:00 | |||||||
| 30 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://munsun.hk/wanadecryptor.exe | 80 | http | AS4134 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-07-05 08:00 | 2017-05-22 13:00 | 2017-08-11 23:00 | enquiry@hkdnr.hk,hkdomain@xinnet.com,anti-spam@ns.chinanet.cn.net | ||||||
| 31 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.muvulcanus.com/WanaDecryptor.exe | 80 | http | AS13335 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-22 13:00 | 2017-05-31 03:00 | everlon.luiz@gmail.com,abuse-contact@publicdomainregistry.com,abuse@cloudflare.com | ||||||
| 32 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.cpmgroup.hk/WanaDecryptor.exe | 80 | http | AS4134 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-07-05 08:00 | 2017-05-22 13:00 | 2017-07-31 09:00 | enquiry@hkdnr.hk,jarking@gmail.com,anti-spam@ns.chinanet.cn.net | ||||||
| 33 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.clbao.com/01106035/WanaDecryptor.exe | 80 | http | AS37963 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-22 13:00 | 2017-05-31 12:00 | 442323999@qq.com,tree_wf@yahoo.com.cn,DomainAbuse@service.aliyun.com,ipas@cnnic.cn | ||||||
| 34 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.munsun-asset.com/WanaDecryptor.exe | 80 | http | AS4134 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-15 11:00 | 2017-05-25 01:00 | supervision@xinnet.com,admin@munsun.hk,anti-spam@ns.chinanet.cn.net | ||||||
| 35 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://roxmu.net/Update/WanaDecryptor.exe | 80 | http | AS16276 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-15 11:00 | 2017-05-15 14:00 | wagnerbr8@gmail.com,abuse-contact@publicdomainregistry.com,abuse@ovh.ca | ||||||
| 36 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://muhok.net/WanaDecryptor.exe | 80 | http | AS13335 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-15 11:00 | 2017-05-31 03:00 | talissondark13@hotmail.com,abuse-contact@publicdomainregistry.com,abuse@cloudflare.com | ||||||
| 37 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://muhok.net/payments/WanaDecryptor.exe | 80 | http | AS13335 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-15 11:00 | 2017-05-26 10:00 | talissondark13@hotmail.com,abuse-contact@publicdomainregistry.com,abuse@cloudflare.com | ||||||
| 38 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://liendoanyogavietnam.vn/WanaDecryptor.exe | 80 | http | AS18403 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-15 11:00 | 2017-05-17 03:00 | |||||||
| 39 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://muhok.net/images/wanadecryptor.exe | 80 | http | AS13335 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-15 11:00 | 2017-05-31 03:00 | talissondark13@hotmail.com,abuse-contact@publicdomainregistry.com,abuse@cloudflare.com | ||||||
| 40 | Y | N | N | N | N | Y | Y | N | N | N | N | Y | http://liendoanyogavietnam.vn/wp-content/wanadecryptor.exe | 80 | http | AS18403 | 2017-08-14 23:00 | 2017-05-11 18:00 | 2017-05-11 18:00 | 2017-05-15 11:00 | 2017-05-17 03:00 | |||||||
| 41 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://girlfriendbeautiful.ga/hotgirljapan.jpg?i=1 | 80 | http | AS34119 | 2017-08-14 22:00 | 2017-05-15 08:00 | abuse@freenom.com,copyright@freenom.com,abuse@ifastnet.com | |||||||||
| 42 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://radiolobobajio.mx/images/jpg/imagenes.html?retencion=081525418 | 80 | http | AS20013 | 2017-08-14 22:00 | 2017-05-13 13:00 | ayuda@nic.mx,abuse@nic.mx,ipadmin@websitewelcome.com | |||||||||
| 43 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://graficagbin.com.br/loja/q.hta | 80 | http | 2017-08-14 22:00 | 2017-05-13 12:00 | |||||||||||
| 44 | N | N | N | N | N | Y | Y | N | N | N | N | Y | http://www.rentasyventas.com/incluir/rk/imagenes.html?retencion=081525418 | 80 | http | AS46475 | 2017-08-14 22:00 | 2017-05-13 12:00 | abuse@joker.com,webs@intellia.com.mx,santacruz@intellia.com.mx,abuse@limestonenetworks.com |
