URLhaus Database

You are currently viewing the URLhaus database entry for http://185.119.196.167/zhiga.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2575099
URL: http://185.119.196.167/zhiga.exe
URL Status:Offline
Host: 185.119.196.167
Date added:2023-03-17 13:47:10 UTC
Last online:2023-03-22 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: crep1x
Abuse complaint sent (?): Yes (2023-03-17 13:48:05 UTC to abuse{at}stark-industries[dot]solutions)
Takedown time:4 days, 22 hours, 8 minutes Bad (down since 2023-03-22 11:56:58 UTC)
Tags:Stealc

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-03-19n/aexe 4e92d369cc121131b68a5bc2839fca89752a8bfa39f1819bc576ed717f0a1441n/aStealc
2023-03-19n/aexe 15539a353d5b7e18b87b30f717454dc25c4261954d97af791596ea49acb1fa92n/aStealc
2023-03-19n/aexe 29d41c9566739f5371b7e2c1142ffb3c55fe8771d1e4d872d4755ca1f6141f53n/a Stealc
2023-03-19n/aexe bc169d66a15f7a459d73225fe925d3d08fa693530313bc6f31b2e711eaad1f0en/a Stealc
2023-03-19n/aexe 6eca42031f2809aca73b3cc3296cde7d49852f2ed14985c3093c10244d22376dn/a Stealc
2023-03-19n/aexe 67bcfd8b4e4705f88ddd43f9ee4a0ee7efb252e6a74fadc4b1dbe132ce33addbn/a Stealc
2023-03-19n/aexe ad12983641a6deb84c9c86d5fa24eb5380db39c010e15c004ecf4837440a8a7dn/a Stealc
2023-03-19n/aexe 9cf45a082d2a9a3aca0ea3c0dc160cb7e3a33a928e58bef1fb77d419de8afad9n/a Stealc
2023-03-19n/aexe 9aa35dc2156011e95e3b7692e7fccacd8be52681042ca198bfe50305c75248f1n/a Stealc
2023-03-19n/aexe cc83ee64b2cf6d7bef4aea6c5fb58328223749d6bfe86e6dee21149e4321eab6n/a Stealc
2023-03-19n/aexe 39c6e03af114a0046c77f185fd98ef1dacc418939d9f8379a89da1212bf9af43n/a Stealc
2023-03-19n/aexe aacb20f669b174f1d38daa0fd94c42d375ec652b0623e47a1d69f6823d1c8892n/a Stealc
2023-03-19n/aexe 9dacee1ce29d21d9798bbb30cc8ef8d62346f0d09e26669c50cb7d47e8441315n/a Stealc
2023-03-19n/aexe 241d2d6184620ce8d617065bd69eb92d833705518e485868399dd0fa514b0670n/a Stealc
2023-03-18n/aexe 15cf9bf2faf0e67d058abf46628467ff05ecf90097ffbcb1dd434e477685f75an/a Stealc
2023-03-18n/aexe de565992035f04954144853c6ea32bcb011becb55422c243bdeaaa65bb69c68cn/a Stealc
2023-03-18n/aexe 7a2a0872367e2b8d2440d3fd5e57db5e988b2db98e3a82f9a5e4ec1705d88291n/a Stealc
2023-03-18n/aexe 6e53cd4ff1c9a249cfb8f15e0ace2d7139843b14726ef12cc26bf9b469f59c4bn/aStealc
2023-03-18n/aexe 788f40e71fe7def232556f15af985c2f9058a0d4a3155548b91b5f46bf04fa92n/a Stealc
2023-03-18n/aexe 223c077f6eeb0ff32fd5c932f5a4dd311feb4e0156e2d464a6cb9a3645dede90n/a Stealc
2023-03-18n/aexe 7c2e73b65f763f492847eaa6b91be2eccb6c335e1217ff01a7d6a4a7b2c82014n/a Stealc
2023-03-18n/aexe a0e69f08c2fa6024b971272ca58b242e2f315c6a02dc021f985a1ec296b4ca66n/a Stealc
2023-03-18n/aexe ddb0eb49fbaccec15aa023cd0e3f184b431ceccad615cdaf419c8dde6f4ee0f5Virustotal results 39.71% Stealc
2023-03-18n/aexe fd82f497d37d39f0bdc6db9a32f6474d1820327a5de1d8dc1dd0fd7274caace4n/a Stealc
2023-03-17n/aexe 2c5d05c4b6001bbdaede43124cb0aceab4ea859f1a736fe4c9cea937dc358a55n/a Stealc
2023-03-17n/aexe 507da6dd60f7fdeecbd1286dac0458ce493ecb89eae4b398695e98f0aaaf7082n/a Stealc
2023-03-17n/aexe 78b6dc966c04ef3a8e01b9e4af1cecb5d66c869a50c86cb7197555b1eeddab4bn/a Stealc
2023-03-17n/aexe 61574da5a4ce85b7e4ab4456a7cc4410c281a1fa6e4144b8be7f6d0b7679fbcdVirustotal results 42.03%Stealc
2023-03-17n/aexe 8384eb97c0fd7d916cdb454b2212794a8eafa37fe6c7165644d02e8d9bfe5237Virustotal results 42.03%Stealc
2023-03-17n/aexe a46844ca8aac1630877f85b10245c97334de38a93f4a9aa722d287d5316c16c5n/aStealc