URLhaus Database

You are currently viewing the URLhaus database entry for http://dfd.zhzy999.net/images/m.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	182491
URL:	http://dfd.zhzy999.net/images/m.exe
URL Status:	Online (spreading malware for 7 years, 5 months, 17 days, 2 hours, 40 minutes)
Host:	dfd.zhzy999.net
Date added:	2019-04-23 04:52:16 UTC
Threat:	Malware download
URLhaus blocklist:	Blocked
Spamhaus DBL :	Abused domain (malware)
SURBL :	Blocked
Quad9 :	Blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	zbetcheckin
Abuse complaint sent (?):	Yes (2026-08-31 04:03:15 UTC to abuse-reports{at}cloudzy[dot]com)
Tags:	exe njRAT

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Bazaar	Signature
2026-08-31	m.exe	exe	73475a4bda17b83de8cd6d13c6bf812bdb7930dfd6bffbb96701ab7eca5ee83f	n/a
2021-05-03	n/a	exe	22fb221ab2307c4a7574f9a48e5503eb05c11f16d05042e58ecfbfaf16bc5025	n/a		njrat
2020-08-21	n/a	exe	a211e5ecd0d534d5231bdd53c817fb9ec571a83c5b1f8e967526c2c6a29ff2c1	n/a
2020-04-02	n/a	exe	92bd9732f75f5039992d37f9f72008ad260e4d0dc6cc31e422ccffca3a50ea0f	n/a
2020-03-29	n/a	exe	84e917ee7c99d8d511237b523456769124ce402d4b539f4f03b397ffd844bcaf	n/a
2020-03-12	n/a	exe	a115a21ac2ec4da060777c6ac92968c237d76c7dcb2b6fe10ee9a61fa3b597b7	80.82%
2020-02-02	n/a	exe	54f7690820302c4ed95b0c16d49a3135bc1ca32db6e8bf60943b218bbc744e0a	n/a
2019-04-23	n/a	exe	51b3d6b1add70e3b14c8ea224dd804467523a4fe2360021576f559761331a084	74.63%