URLhaus Database

You are currently viewing the URLhaus database entry for http://208.67.105.179/tonyzx.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2608017
URL: http://208.67.105.179/tonyzx.exe
URL Status:Offline
Host: 208.67.105.179
Date added:2023-04-13 04:38:03 UTC
Last online:2023-05-17 10:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2023-04-13 04:39:06 UTC to abuse{at}serverion[dot]com)
Takedown time:1 month, 4 days, 5 hours, 49 minutes Bad (down since 2023-05-17 10:28:24 UTC)
Tags:32 exe Loki link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2023-04-19n/aexe 22c40a20b262b528a2ccb515f2c8fa65994a53e5fd2c2217098e0a87628376adn/a 
2023-04-19n/aexe f3c1e24605b9a17504f4ce40644050104e6def3cae38ab1d83000021f58b5dd8n/a 
2023-04-18n/aexe e2613367d62f9860baac0408fee61cd26c03e1c9800349334f04cf7dc2cffaa6Virustotal results 28.57% Loki
2023-04-17n/aexe 8e037e4f240e4e19c96586828984e7f2681f82a00e526783f60cf1423de0e1d5Virustotal results 25.37% Loki
2023-04-13n/aexe f36afdc4b01e349a83cd54619dcc3864d800c328c784c79ccce271ff48742523Virustotal results 31.88%Loki