URLhaus Database

You are currently viewing the URLhaus database entry for http://81.42.249.132:1080/Photo.scr which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3312827
URL: http://81.42.249.132:1080/Photo.scr
URL Status:Offline
Host: 81.42.249.132
Date added:2024-11-30 09:31:16 UTC
Last online:2025-09-02 12:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2024-11-30 09:32:29 UTC to nemesys{at}telefonica[dot]es)
Takedown time:9 months, 6 days, 2 hours, 28 minutes Bad (down since 2025-09-02 12:01:09 UTC)
Tags:CoinMiner scr ua-wget

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-06-04Photo.screxe ebcdf536447cba219a13756c00c97b4ed5fea47f2cbf2283ea86e80216d3822eVirustotal results 81.94% CoinMiner
2025-04-13Photo.screxe 807126cbae47c03c99590d081b82d5761e0b9c57a92736fc8516cf41bc564a7dVirustotal results 95.83% CoinMiner
2025-04-04Photo.screxe 60344aa2912da44694ee617a2952e9e03fd66d17ecaf4445e2e856e6c71a3091Virustotal results 58.33% CoinMiner
2025-01-05n/aexe 3fde84a46aea58ba4ddb5fb0473fc756ff209ba96b1a63a2759d13b8adc01a69Virustotal results 80.56%CoinMiner
2025-01-01n/aexe aa1ea82f170dc2cb2e203bb3d3fc1d623a3b0bbe32b8a29ab5f397de0fdd8292n/a 
2024-12-23n/aexe 89236dc0d48a8ef726e708ac43476628b6f95927b07a2c73a8f4d857951b6c58n/a CoinMiner
2024-12-18n/aexe af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4cVirustotal results 80.56% CoinMiner
2024-12-04n/aexe 3c829e2a2eab35554a0db64a7a5cc147c8d9d1a85637ffe39252c5104f623c67n/a CoinMiner
2024-12-04n/aexe 9194b57673209c8534888f61b0cdefa34f463ae50cd78f72ab2b3348220baaf9Virustotal results 81.94% CoinMiner
2024-11-30n/aexe 5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fcaVirustotal results 83.33%CoinMiner