URLhaus Database

You are currently viewing the URLhaus database entry for http://119.192.128.163:28080/docs/x.rar which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3236450
URL: http://119.192.128.163:28080/docs/x.rar
URL Status:flame Online (spreading malware for 1 year, 10 month, 8 days, 8 hours, 47 minutes)
Host: 119.192.128.163
Date added:2024-10-15 18:18:22 UTC
Threat:Malware download Malware download
Reporter: abus3reports
Abuse complaint sent (?): Yes (2024-10-15 18:19:17 UTC to irt{at}nic[dot]or[dot]kr)
Tags:CoinMiner exe xmrig

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-12-13x.rarelf cab4b5ba9013d23a3cf7a6d209c80a2c7cb2810e78d9a0a7d613e39258cdd9c5n/a
2025-10-18x.rarelf ba90f5d41260b972f3dd647681c15914aaa8d9861efa40f8f302306c0ef07d14n/a
2025-09-24x.rarelf af374a8479dc646189b50a28053cac4b1ec29ac80092b02614ab36492b88a704n/a
2025-07-18x.rarelf bd5a56febc93c1e699a98a9884805147658cba894e0cfc170c7667c0b5f5305dn/a
2025-05-17x.rarelf b799cbad1b9af484035deb46e45c56a082e4a3d36b4a4805cd91884c0ebdf413n/a
2025-03-28n/aelf 584ddfb70de20399ace6d2f42c102e35158043d6a48d6dafeb6a646cc2cfc387n/aCoinMiner
2025-03-27n/aelf f09c0773f12b935f2bd0d91f52a872f66f31c9bc511e6c4aea3394acfb10656en/a
2025-03-27n/aelf 7aa470f4f04e97e7604d8a50b241d651897391b1982fbc8fec653ec241a60dc3n/aCoinMiner
2025-03-27n/aelf 30968e537b1dfebedddd125ae1b4aa1c08fcb44fec3ef021bc253c2e66bb6d17n/a
2025-03-21n/aelf eaf3671ee1af8990aa354f3bdc34a72192d56039105e4b1668fa0eec148bb716n/aCoinMiner
2025-03-19n/aelf 25606c17cbc241d671ba420ad7b728a5e93b0708106aeba32e07810860de4c50n/aCoinMiner
2025-03-14n/aelf 49142cd1a7f58d3f286fb8112ac3312038e11cb9721d1ed5d905cfc8ff116b6cn/a
2025-02-26n/aelf cd4bdf0c2d939d4d5e861f5d027aa9b1a393e04beaa2224ece3a77c03061ba3en/aCoinMiner
2025-02-20n/aelf 9935435c5fec3973215f89adafbe3cb9abef22a32c194e12349e40286927fdc0n/aCoinMiner
2024-11-14n/aelf c580c1ff9b86a63ae3b8a8cb107ca1cd714d2e78935172750ca2b2b9ac10dcd3n/aCoinMiner
2024-11-12n/aelf d0f3d934c14b6753ed73a8f5de91738167f1cede7341a5a937946be33c751c3an/a
2024-11-06n/aelf d19e282bf3f178a874d23b8d1eecf216a595c63d6b30f5c580ba82c0a85081b0n/aCoinMiner
2024-11-02n/aelf 2d81c42d39663eec2317fcc967ad0493ca4847492b31746a423c90e0ceed301cn/a
2024-10-31n/aelf 5ff891c9c6c342fbe6e308f688b71dc289eb7ececf40f73364e2792a714913c6n/aCoinMiner
2024-10-31n/aelf 2344ebb9860fec034e98539c8aba7e9691e3364226aee6704a7ab747a2b80c45n/aCoinMiner
2024-10-30n/aelf 71c4360eb1e452d6768a570f8097ea8c2d8f089b0038d8e72a3a6ca94ddf4c46n/a
2024-10-22n/aelf cc942ae79670224d4fbc856692da32a9e4ce13fdb103c8a90315317d7fff31e2n/aCoinMiner
2024-10-20n/aelf ecd512081292516391eb646f4f1b2a636ca993fd70f8892a2ac08935caa67a4en/aGafgyt
2024-10-20n/aelf f63acbb65eaf2fb3cfa72d0bb88f153f84330a729d77baa4243b686bd3f51a76n/a
2024-10-17n/aelf 81321d66a4128a647ff42b7d6a41bd709a3d9c25dfcf0816aa28fade7ec02f80n/aCoinMiner
2024-10-16n/aelf 75c4e9718e7d7dd5bd253752a440f028216fdda594e788018d9c70e978025e12n/aCoinMiner
2024-10-15n/aelf 0ad68d5804804c25a6f6f3d87cc3a3886583f69b7115ba01ab7c6dd96a186404Virustotal results 71.21%CoinMiner