URLhaus Database

You are currently viewing the URLhaus database entry for http://91.215.85.223/net.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2757869
URL: http://91.215.85.223/net.exe
URL Status:Offline
Host: 91.215.85.223
Date added:2024-02-07 06:47:09 UTC
Last online:2024-07-15 11:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2024-02-07 06:48:06 UTC to abuse{at}pro-spero[dot]ru)
Takedown time:5 months, 9 days, 5 hours, 8 minutes Bad (down since 2024-07-15 11:57:03 UTC)
Tags:CoinMiner exe opendir Rhadamanthys zgRAT

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-07-08n/aexe 33682e861b76b0ae22b7361f5b59bb7e69b95e69480156714f01e7044408b546Virustotal results 18.84%Rhadamanthys
2024-06-28n/aexe 4a69a64d652063b65cfe7f7ad5e54491b06547c783d74147c79cb9145536cf26Virustotal results 41.10%
2024-06-27n/aexe 8491781afed15ad4fa80b176c3516cd3b44e7880a559ab22899b216be74cec48Virustotal results 13.70% 
2024-06-26n/aexe 07445b196288e616e539c775b87265d10341c0c644558ba94a8525a70536e871Virustotal results 12.50% 
2024-06-26n/aexe 8c13fdcfeb87abd390f487e9d51d7edcdd6073951a5f96e5c0b1f7d899874932Virustotal results 12.50%
2024-06-26n/aexe f1a3575752ad9f9ed80f361cda52efb5b46a8cc15a23b2c047d1f146008128feVirustotal results 11.94% 
2024-06-26n/aexe f567eb23dd95fe66f925bce074253f46263b0916de62d8850dd8c3ac35efc72eVirustotal results 13.70% 
2024-06-26n/aexe 24f6c1b06912c2d8d46c6ac10737fd8efaaf7d18b227279f9dae584a5625c0c6Virustotal results 12.33% 
2024-06-26n/aexe 47a817f85453e16e52d201810fd5a719a1fcb01c49dfd350a2fc36fef42ac442Virustotal results 12.68%
2024-06-26n/aexe a2e4f1eead7d430cf08d33e04c48adb2af23b71ec4c633bc6b88d870c1d61a56n/a 
2024-06-23n/aexe 7ccfae8644c3bc7439b88f2dc0de06bb5082de09b0bf5e143de17487ff252224Virustotal results 32.43% Rhadamanthys
2024-03-27n/aexe 432747c04ab478a654328867d7ca806b52fedf1572c74712fa8b7c0edb71df67Virustotal results 29.17%CoinMiner
2024-03-18n/aexe be73738191878fdc49c8994b60069df39e835b6bae6a4a8ded041c87b8514e1dVirustotal results 43.06% 
2024-03-16n/aexe b457ad1cf4b7ce7836f255961195d29b4e83c52713d9eb346a95b9a273db16e3n/a 
2024-03-16n/aexe 4b67c970a160de627e2d4934c644902354754f7eb71fa9a1e27a7e4463342bd4n/a 
2024-02-07n/aexe 217fbf967c95d1359314fcd53ae8d04489eb3c7bdc1f22110d5a8a476d1fc92eVirustotal results 77.78% Rhadamanthys