URLhaus Database

You are currently viewing the URLhaus database entry for http://185.156.72.2/files/7453936223/08IyOOF.exe which is being or has been used to serve malware. Please consider that URLhaus does not differentiate between websites that have been compromised by hackers and such that has been setup by cybercriminals for the sole purpose of serving malware.

Database Entry


ID:3542088
URL: http://185.156.72.2/files/7453936223/08IyOOF.exe
URL Status:Offline
Host: 185.156.72.2
Date added:2025-05-12 14:28:09 UTC
Last online:2025-07-02 10:XX:XX UTC
Threat:Malware download Malware download
Reporter: abuse_ch
Abuse complaint sent (?): Yes (2025-05-12 14:29:08 UTC to erishennya[dot]res{at}gmail[dot]com)
Takedown time:1 month, 20 days, 19 hours, 51 minutes Bad (down since 2025-07-02 10:20:56 UTC)
Tags:exe LummaStealer

Payload delivery


The table below documents all payloads that URLhaus retrieved from this particular URL.

FirstseenFilenameFile TypePayload (SHA256)VTBazaarSignature
2025-06-2808IyOOF.exeexe 05e17a331ca058df53684857247fc423b4a9c4f0804c08cba532227eafe33806Virustotal results 55.56%LummaStealer
2025-06-1908IyOOF.exeexe 6872600b6f16078df28079124b9acfec03b534cde0c0dd9588aff718e901dd7en/a 
2025-06-0808IyOOF.exeexe bde974e262d193cfb99dc558f2d227665f5e15fdacab30cdc3f00018cd33e1c5n/aLummaStealer
2025-06-0408IyOOF.exeexe 04c0a81857162cc18343b292804d2f6bec491f3eeb3689b65c1b183fbfc74668Virustotal results 38.03%LummaStealer
2025-05-3008IyOOF.exeexe 11a7be9d636486515b24c10826b0537c174a368cbea06b99c4f17204e5d7f447Virustotal results 43.06% 
2025-05-2508IyOOF.exeexe 0a81714ddd5c1d08dda8cfd3ccd4c86a48d60a4d9568cc83154c4a027db5c949Virustotal results 34.72%LummaStealer
2025-05-1908IyOOF.exeexe 6c0816cd05cc9c52d1356c90e09110159968f39078bd4ebe90842637bd9d544bn/a LummaStealer
2025-05-1608IyOOF.exeexe 5125bdd56a603dcb3929a4bf2282467ded28ccfed837d908ad4eff4246f43e94n/aLummaStealer
2025-05-1208IyOOF.exeexe e13f38636c5776a92885f62831bc323f843256c147eafcd79eafe96762a6145aVirustotal results 76.39%LummaStealer