URLhaus Database

You are currently viewing the URLhaus database entry for http://163.123.143.4/download/WW2.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2536631
URL: http://163.123.143.4/download/WW2.exe
URL Status:Offline
Host: 163.123.143.4
Date added:2023-02-11 04:40:35 UTC
Last online:2023-09-04 06:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2023-02-11 07:56:10 UTC to abuse{at}serverion[dot]com)
Takedown time:6 months, 24 days, 22 hours, 25 minutes Bad (down since 2023-09-04 06:21:23 UTC)
Tags:32 exe PrivateLoader

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-07-24n/aexe 901bb2af39f52f86d0173bf737610ff2edfabe7f5a1c406d35ff016f66b115a8n/aPrivateLoader
2023-07-14n/aexe eedff513f456a5ad4de8d8ef5fb4f45c4d6d2a5ef930c1f7d43c86e4bf100865n/a
2023-05-26n/aexe 595daef1eccf4f144a39610006cf77e8ab32dabce45675ed48011a3a8e739558n/aPrivateLoader
2023-03-12n/aexe 549f00b759a2d18d2958ac46b06bc7b043a4eb6b8842c104abd966127aad63b5n/aPrivateLoader
2023-02-26n/aexe eaa834cea1c9ab48aed587744f5e7ce33639e8c4d194704ffa4fb6a2889e5e3an/aPrivateLoader
2023-02-11n/aexe 27c1ed01c767f504642801a7e7a7de8d87dbc87dee88fbc5f6adb99f069afde4Virustotal results 38.03%PrivateLoader