URLhaus Database

You are currently viewing the URLhaus database entry for http://176.111.174.140/event.php which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3076639
URL: http://176.111.174.140/event.php
URL Status:Offline
Host: 176.111.174.140
Date added:2024-07-29 06:17:33 UTC
Last online:2024-12-10 06:XX:XX UTC
Threat:Malware download Malware download
Reporter: zbetcheckin
Abuse complaint sent (?): Yes (2024-07-29 10:48:08 UTC to abuse{at}changway[dot]hk)
Takedown time:4 months, 13 days, 19 hours, 19 minutes Bad (down since 2024-12-10 06:07:28 UTC)
Tags:64 AsyncRAT link exe RedLineStealer link StormKitty

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2024-10-18zbi.exeexe 8ff3039072ecb32c50f446d6857aceef55547486f0572fe70feb5b1fa4c4727aVirustotal results 55.56%RedLineStealer
2024-09-19zbi.exeexe 873993a436c7d56e5a3923559685d325a07b3f18395308851b85091d0e2e2375n/a RedLineStealer
2024-09-14zbi.exeexe adda26f300167b69228b5166b7d462b149b2bcd3fc06a46e5ff5676e951b2f05Virustotal results 47.30% DiamotrixClipper
2024-09-12ZBI.exeexe 91bf7e0ad7d7f15ac417683fba7522f3c97f732c8a1909c64b3aedfd70da574cVirustotal results 36.49% DiamotrixClipper
2024-09-09ZBI.exeexe c076f935f629d2049e2cdc80ce6c4bdfd5a240f69bc573d891ce24c8af4e8bc5n/a RedLineStealer
2024-08-28ZBI.exeexe a38e3e82e522f7ecedfc51da3b44b9013bde09383f565a79a31b36e2e313c60cVirustotal results 44.00% RedLineStealer
2024-08-22ZBI.exeexe 810791ccd63225a766dd580e0e83d502df14172812fb912997e6a844bc9d7f6cVirustotal results 43.24%RedLineStealer
2024-08-20Sniffthem.exeexe 410bbd43e9fe61cfd4dc8a903f016cb0b50e5efcd49cfba0bcc2a93fc9c50155Virustotal results 56.00% AsyncRAT
2024-08-15Sniffthem.exeexe 459d228bb2e9e11064a79672ec8071417be56fffd906f5310f64e31b79e87b51Virustotal results 41.89% 
2024-08-04zbi.exeexe 30423fad469c19c4fa41f1028dcb5f393931125f000e50e20cbaa8301fa3e973n/a AsyncRAT
2024-08-01zbi.exeexe 773b7430b45b6c8d03ff3ca60ba642c62626cc570daf86cd5dcd40cd0678eaf1Virustotal results 50.00%StormKitty
2024-07-29zbi.exeexe 4da3bff89fc796886ca615a29a2595c4109f86fff2a9e699ea1036195719cb3bVirustotal results 61.33%RedLineStealer