URLhaus Database

You are currently viewing the URLhaus database entry for http://3.zhzy999.net3.zhzy999.net/images/n.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:161756
URL: http://3.zhzy999.net3.zhzy999.net/images/n.exe
URL Status:flame Online (spreading malware for 7 years, 6 months, 22 days, 18 hours, 19 minutes)
Host: 3.zhzy999.net3.zhzy999.net
Date added:2019-03-19 05:21:05 UTC
Threat:Malware download Malware download
URLhaus blocklist:Blocked
Spamhaus DBL :Abused domain (botnet C&C)
SURBL :Blocked
Quad9 :Blocked
AdGuard :Not blocked
Cloudflare :Blocked
dns0.eu :Status unknown
ProtonDNS :Blocked
OpenBLD :Blocked
DNS4EU :Not blocked
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2026-08-31 13:57:17 UTC to abuse-reports{at}cloudzy[dot]com)
Tags:exe

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2026-08-31n.exeexe 39b20380ab6ebdcea2024d9f49e03fc145d01a5c998319433402a703253f3d8dn/a 
2026-08-31n.exeexe 73475a4bda17b83de8cd6d13c6bf812bdb7930dfd6bffbb96701ab7eca5ee83fn/a 
2020-04-02n/aexe 92bd9732f75f5039992d37f9f72008ad260e4d0dc6cc31e422ccffca3a50ea0fn/a 
2020-03-29n/aexe 84e917ee7c99d8d511237b523456769124ce402d4b539f4f03b397ffd844bcafVirustotal results 58.33% 
2020-03-12n/aexe a115a21ac2ec4da060777c6ac92968c237d76c7dcb2b6fe10ee9a61fa3b597b7Virustotal results 80.82% 
2020-02-02n/aexe 54f7690820302c4ed95b0c16d49a3135bc1ca32db6e8bf60943b218bbc744e0an/a 
2019-10-08n/aexe 88d207ff8f8213a7b7dfe03f6d1c0b4354bd94daa698f3331b1e491a6cc478den/a 
2019-09-16n/aexe d896d02df2dcf1ef467715523579240155ab956b802909c0ab04d2fc944cbb6cVirustotal results 35.71% 
2019-08-09n/aexe 333af662045e12fdcd831e0a60a0234380d150a01fd4e6b4dffe5adcffc46333Virustotal results 28.17% 
2019-03-26n/aexe 51b3d6b1add70e3b14c8ea224dd804467523a4fe2360021576f559761331a084n/a 
2019-03-26n/aexe bac3b5c3c4aa46632d68b90c7d9fb78866e2c2cc6fa2c406576d75d4a271b4cen/a 
2019-03-19n/aexe 46fc116835cd967c56ba90ca176d9d0662285aa7f0d04b914444b85db51633e7Virustotal results 58.46%