URLhaus Database

You are currently viewing the URLhaus database entry for http://89.175.24.90:8080/AV.scr which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:2905209
URL: http://89.175.24.90:8080/AV.scr
URL Status:Offline
Host: 89.175.24.90
Date added:2024-06-25 04:57:29 UTC
Last online:2025-01-13 07:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2024-06-25 04:58:15 UTC to abuse{at}mtu[dot]ru)
Takedown time:6 months, 22 days, 2 hours, 40 minutes Bad (down since 2025-01-13 07:38:53 UTC)
Tags:CoinMiner ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-01-03n/aexe 5e5371d2e6f2d986c348a9d0fbb64ab82b4c48569821e76b752ee27b6ba2fe60n/a CoinMiner
2024-12-15n/aexe ca48cd293c0a9a846ad73fafe3ca9b288bd1d9da65c6b1fc3bffcf5ddbab5b0eVirustotal results 58.33% CoinMiner
2024-12-10n/aexe 8d4e244be169d10095628ab91fa408d99a745f9005e4a3cc706d12e1b0d76f7cVirustotal results 60.56% CoinMiner
2024-09-12n/aexe 397e5773a435cde69c08563ed5de9f063b97c3313b5e8203ce066e24ec5131ban/a CoinMiner
2024-07-23n/aexe 25a636dff4864e3ecbc7dd60c839cc58ef970692d47941e8dd3243a4d12694b0n/a CoinMiner
2024-07-18n/aexe 3fde84a46aea58ba4ddb5fb0473fc756ff209ba96b1a63a2759d13b8adc01a69Virustotal results 80.82%CoinMiner
2024-07-18n/aexe 34ae8a4da0909a4b8f35a588286e21752fd274a0df245ac09fcde5e4256e8392n/a CoinMiner
2024-07-06n/aexe af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4cVirustotal results 83.78% CoinMiner
2024-07-04n/aexe 5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fcaVirustotal results 82.19%CoinMiner
2024-06-25n/aexe ebcdf536447cba219a13756c00c97b4ed5fea47f2cbf2283ea86e80216d3822eVirustotal results 79.45% CoinMiner