URLhaus Database

You are currently viewing the URLhaus database entry for http://31.128.173.853.zhzy999.net31.128.173.853.zhzy999.net/images/n.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry

ID:	261506
URL:	http://31.128.173.853.zhzy999.net31.128.173.853.zhzy999.net/images/n.exe
URL Status:	Online (spreading malware for 6 years, 10 months, 9 days, 5 hours, 49 minutes)
Host:	31.128.173.853.zhzy999.net31.128.173.853.zhzy999.net
Date added:	2019-11-29 18:03:15 UTC
Threat:	Malware download
URLhaus blocklist:	Blocked
Spamhaus DBL :	Abused domain (malware)
SURBL :	Blocked
Quad9 :	Blocked
AdGuard :	Not blocked
Cloudflare :	Blocked
dns0.eu :	Status unknown
ProtonDNS :	Blocked
OpenBLD :	Not blocked
DNS4EU :	Not blocked
Reporter:	zbetcheckin
Abuse complaint sent (?):	Yes (2026-09-01 10:11:17 UTC to abuse-reports{at}cloudzy[dot]com)
Tags:	exe

Payload delivery

The table below documents all payloads that URLhaus retrieved from this particular URL.

Firstseen	Filename	File Type	Payload (SHA256)	VT	Bazaar	Signature
2026-09-02	n.exe	exe	6560f56fb7678e25f07a6a353435cab7e2c1a175e48357b12b4b407fcdd76ad0	n/a
2026-09-01	n.exe	exe	da2ed35202d50cf08bc53111ca7c89687b8076b0983e7a0b5894f1759296f6d7	n/a
2026-09-01	n.exe	exe	39b20380ab6ebdcea2024d9f49e03fc145d01a5c998319433402a703253f3d8d	n/a
2020-04-02	n/a	exe	92bd9732f75f5039992d37f9f72008ad260e4d0dc6cc31e422ccffca3a50ea0f	61.11%
2020-03-29	n/a	exe	84e917ee7c99d8d511237b523456769124ce402d4b539f4f03b397ffd844bcaf	n/a
2020-03-12	n/a	exe	a115a21ac2ec4da060777c6ac92968c237d76c7dcb2b6fe10ee9a61fa3b597b7	80.82%
2020-02-02	n/a	exe	54f7690820302c4ed95b0c16d49a3135bc1ca32db6e8bf60943b218bbc744e0a	n/a
2019-11-29	n/a	exe	51b3d6b1add70e3b14c8ea224dd804467523a4fe2360021576f559761331a084	83.82%