URLhaus Database

You are currently viewing the URLhaus database entry for http://222.130.136.35:8085/Video.scr which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry




ID:3490407
URL: http://222.130.136.35:8085/Video.scr
URL Status:Offline
Host: 222.130.136.35
Date added:2025-03-25 18:24:06 UTC
Last online:2025-04-07 03:XX:XX UTC
Threat:Malware download Malware download
Reporter: BlinkzSec
Abuse complaint sent (?): Yes (2025-03-25 18:25:08 UTC to zhaoyz3{at}chinaunicom[dot]cn)
Takedown time:12 days, 9 hours, 29 minutes Bad (down since 2025-04-07 03:54:09 UTC)
Tags:CoinMiner scr

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-04-05Video.screxe 5d9fe2735d4399d98e6e6a792b1feb26d6f2d9a5d77944ecacb4b4837e5e5fcaVirustotal results 82.19%CoinMiner
2025-04-05Video.screxe 654307d489d693be89dc3c483d043cf0e07a5ea502048616a3a74f0b52a240fdn/a CoinMiner
2025-04-04Video.screxe db01fe2ecfe5b6140e827e7502090cbb931a15c35f069f0e6fdb41b5cf341ccbn/a CoinMiner
2025-03-30n/aexe f153898f2b7dbbbbe977af560ba76e709668bcf39a9612630bd490f5d6201fe0n/a CoinMiner
2025-03-27n/aexe 9194b57673209c8534888f61b0cdefa34f463ae50cd78f72ab2b3348220baaf9Virustotal results 79.45% CoinMiner
2025-03-27n/aexe a5baa524af8104c7e7688e9cc85dab8ec3c5b98accf1dfbc4caf6da598f5cfabn/a CoinMiner
2025-03-27n/aexe 024b9667f4fd0dbd9d70282a8e1409cd8292cf3449bd42a8db4d15f74368b314n/a 
2025-03-25n/aexe af94ddf7c35b9d9f016a5a4b232b43e071d59c6beb1560ba76df20df7b49ca4cVirustotal results 81.94% CoinMiner