URLhaus Database

You are currently viewing the URLhaus database entry for http://136.144.41.207/OnlyFun.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

You are viewing an historical record

While the URL referenced below has been used by bad actors to spread malware in the past, the malicious content has obviously been removed around 2022-12-20. Hence the the URL / website should no longer represent a threat. As a result, URLhaus considers this record as historical. This database entry has not impact on the reputation of the website / domain nor does it appear in any of our blocklists anymore.

ID:	1941658
URL:	http://136.144.41.207/OnlyFun.exe
URL Status:	Offline
Host:	136.144.41.207
Date added:	2022-01-01 17:55:04 UTC
Last online:	2022-01-06 01:XX:XX UTC
Threat:	Malware download
Reporter:	abuse_ch
Abuse complaint sent (?):	Yes (2022-01-01 17:57:43 UTC to abuse{at}serverion[dot]com)
Takedown time:	4 days, 7 hours, 3 minutes (down since 2022-01-06 01:00:44 UTC)
Tags:	AsyncRAT exe

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Signature
2022-01-04	n/a	exe	b1fde48aa3298e07bede742647168ab9d13d509d04cb0aad30d0c80a3d893530	n/a	AsyncRAT
2022-01-03	n/a	exe	ef1e1769665ea5ec9a7bf2b55ff43d2d1d741512eb6d3d3ab4b8347a1aa20042	n/a	AsyncRAT
2022-01-03	n/a	exe	85f761e00245eacfd186c66675bf1309b3c7993f515d6b7c011b1a0654a025d1	n/a	AsyncRAT
2022-01-03	n/a	exe	8d115bd44f9930b6b908a873a748e0f73f2271d15cb993d15fb898a9335e6428	n/a	AsyncRAT
2022-01-03	n/a	exe	b639555bf101f6461b0156f0d93b786d8b120e56810f56b0d98b5593233f1377	n/a	AsyncRAT
2022-01-01	n/a	exe	1b505dd97979f77eb945dced33b51d4ce2f026c12e6a80ca4ddae93f5756b369	n/a	AsyncRAT