URLhaus Database

You are currently viewing the URLhaus database entry for http://185.133.214.138:29245/i which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:2814109
URL: http://185.133.214.138:29245/i
URL Status:flame Online (spreading malware for 2 years, 1 months, 21 days, 22 hours, 47 minutes)
Host: 185.133.214.138
Date added:2024-04-16 12:21:15 UTC
Threat:Malware download Malware download
Reporter: ClearlyNotB
Abuse complaint sent (?): Yes (2024-12-20 07:45:58 UTC to kothitsein{at}globalnetmm[dot]com)
Tags:elf hajime

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-11-20n/aelf 83f1cc08c430107e70a2976aef153eb5e8f25fecc561f4a55d226158c080ace9Virustotal results 61.90% 
2025-11-20n/aelf dd81f8b28ffba84f418b7ba15c3406b9e69e722281ab5822e8191aea1ae6e728Virustotal results 65.08% 
2025-11-18n/aelf eaa08f7cedc2ed4a97fdff1e549b54726ae32832f1bcf0294b767f983213a157Virustotal results 61.90% 
2025-11-18n/aelf c0b1ac2a4e9df27794b10c8738057ba5476357bd5129bee50a2a1ab9f8183853Virustotal results 60.94% 
2025-11-18n/aelf d4b125064e284d4586ccbe058f214c34ae4a973a3f276f7db1a1b1da0e9f97b6Virustotal results 56.25% 
2025-08-25n/aelf b38eea6d2365d7735c194f9dfafcb8e827f671b2557d40186ae457323db026d3Virustotal results 56.25%Hajime
2024-12-12n/aelf ff7be862ce8598ec2193df64170942518445c558bfd6b13b59453f1ea0b5aa9dVirustotal results 51.56% 
2024-06-20n/aelf 64d671e954c370655d61855ba22381f9bbd929ac713322765686619cebeac480Virustotal results 63.64% 
2024-06-20n/aelf 0c8555271eb8e5ec0a17685fff0af8fa9c8ffc8b3a5e5b1affd1772db0d9e5f6Virustotal results 47.69% 
2024-05-08n/aelf d5db5782bc7194a26773dd757da5de9b3f4f5d0dc2771f89518745b1c29b1eecVirustotal results 46.15% 
2024-04-16n/aelf 020f1fa6072108c79ed6f553f4f8b08e157bf17f9c260a76353300230fed09f0Virustotal results 69.84%Hajime