URLhaus Database

You are currently viewing the URLhaus database entry for http://147.45.44.209/lem.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3421021
URL: http://147.45.44.209/lem.exe
URL Status:Offline
Host: 147.45.44.209
Date added:2025-01-31 06:59:07 UTC
Last online:2025-02-09 05:XX:XX UTC
Threat:Malware download Malware download
Reporter: Riordz
Abuse complaint sent (?): Yes (2025-01-31 07:00:19 UTC to karina[dot]abusemailbox{at}gmail[dot]com)
Takedown time:8 days, 22 hours, 51 minutes Bad (down since 2025-02-09 05:51:24 UTC)
Tags:exe Vidar link

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-02-08n/aexe 03f111a7553d3e698a07aea301f9be5d29bcde70513a1323283db3e2e4045d95n/aVidar
2025-02-04n/aexe cedb81c4665ea6e96d6bce5b08546fa776d37f2ed10fee4eb65d216ba90bd839n/a 
2025-02-03n/aexe 0e151391b421b128c784c44b388ba9cc20767c7776c68edd3dbbc494f225a8e8n/a 
2025-02-02n/aexe 1d797f71b80b107992f697a74221c530a4e56f75a453f7e264dc859f08ca1627Virustotal results 55.56% Vidar
2025-02-01n/aexe bd9f73e63ac57f56c23dda08edc1932fe8dfd33fde7e3d1a3014c881988eb1a7Virustotal results 13.89%Vidar
2025-01-31n/aexe d80007837ee60fe9537c76e6a3d45005a86ddc3e066e608b57e1d4430cb96df4Virustotal results 37.50% Vidar